Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/lOzo4dGlzmwLU9IMuGEbS48ZY3Y.roa
File: lOzo4dGlzmwLU9IMuGEbS48ZY3Y.roa (raw, json)
Hash identifier: zgSNStkb0Z5wGXLaVu/HcQUP+S51+7stS7m0xjDVNoc=
Subject key identifier: 94:EC:E8:E1:D1:A5:CE:6C:0B:53:D2:0C:B8:61:1B:4B:8F:19:63:76
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 018570FBCB54C24350AA382092061A37ABEE
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/lOzo4dGlzmwLU9IMuGEbS48ZY3Y.roa
Signing time: Mon 02 Jan 2023 05:37:07 +0000
ROA not before: Mon 02 Jan 2023 05:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49584
IP address blocks: 185.179.112.0/24 maxlen: 24
185.179.114.0/24 maxlen: 24
185.179.113.0/24 maxlen: 24
185.179.115.0/24 maxlen: 24
2a0e:1c40:4000::/48 maxlen: 48
2a0e:1c40:2000::/48 maxlen: 48
2a0e:1c40:1::/48 maxlen: 48
2a0e:1c40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:cb:54:c2:43:50:aa:38:20:92:06:1a:37:ab:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Jan 2 05:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ece8e1d1a5ce6c0b53d20cb8611b4b8f196376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:83:91:b1:60:5e:73:eb:72:92:f4:33:5e:
b7:30:cc:e5:09:9d:0f:6a:55:39:cd:d2:c5:b7:95:
82:1c:a5:af:01:d1:18:54:df:06:9d:48:7d:38:3c:
57:5a:aa:96:a5:0a:54:5c:c6:d8:b3:ac:98:aa:b5:
f9:d4:bf:54:ca:62:7f:f1:8d:c9:7e:9a:ec:ee:7f:
65:02:d8:c4:27:dd:07:56:bd:ac:e1:46:48:ac:5c:
2c:7b:58:2c:8f:7b:31:bb:6b:00:14:04:62:c5:a5:
57:67:72:e2:4c:83:52:d4:de:ed:b3:4a:2b:38:37:
ea:19:1d:66:fa:82:37:f9:96:da:69:0b:40:f7:67:
3b:41:d9:f0:c1:d9:3e:ea:72:f8:a0:7e:0a:f6:59:
7d:eb:24:6e:8d:4b:f4:4d:2d:63:c8:81:72:ad:04:
24:12:f4:cf:16:8e:9a:5b:cf:78:fb:36:d3:d7:8d:
f4:84:b4:bc:31:39:65:c4:2d:a3:f4:a1:f8:6a:a8:
06:cd:bf:30:f1:13:89:2b:b4:94:18:84:7a:d4:21:
56:47:6b:0a:e3:93:b7:48:56:fb:fe:06:35:7e:3d:
23:6b:f0:5d:d5:50:1a:db:da:ff:9b:f3:b8:29:52:
7c:44:93:6b:e0:e8:91:f8:d5:16:b6:b8:b2:cf:bc:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:E8:E1:D1:A5:CE:6C:0B:53:D2:0C:B8:61:1B:4B:8F:19:63:76
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/lOzo4dGlzmwLU9IMuGEbS48ZY3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.112.0/22
IPv6:
2a0e:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
c0:ec:61:24:57:8c:55:6f:ab:ca:ff:7c:a7:ea:41:de:24:79:
ee:3a:93:52:f7:67:ca:27:ca:7f:94:6a:09:0d:e5:d8:d5:ac:
6b:23:92:d6:14:0b:6b:0c:e0:2f:e2:bc:12:bd:02:14:e0:60:
e8:dd:cb:2a:d9:61:b6:d9:61:41:12:82:71:fa:32:aa:9b:23:
44:6c:59:f3:66:78:b4:71:8a:75:d7:22:5e:b4:7c:96:c8:b2:
a5:48:f6:c0:e2:78:d3:ab:81:15:15:56:25:40:ae:40:c5:87:
52:a6:d0:db:42:ce:df:47:cc:ae:c2:f2:49:fa:b1:53:51:76:
8b:32:4c:be:b5:16:84:66:bc:7e:eb:ed:f2:3b:a5:d3:e8:f3:
39:69:f8:46:ae:63:56:16:ff:1e:73:03:df:68:51:43:e3:e9:
14:3f:06:22:a7:ab:c1:2c:3b:54:11:6c:ac:8a:f5:c9:d6:01:
46:df:19:db:f9:c1:64:d8:c6:ed:55:d9:2a:30:1b:bc:8f:57:
97:61:1b:cc:15:ae:61:2d:ee:f1:0f:48:47:02:28:dc:1e:15:
5e:6a:23:bb:0d:ec:4e:9e:5f:3b:69:3e:7c:a5:fa:d7:95:53:
80:73:32:2a:7c:1d:4d:ff:df:b9:f1:c1:03:3d:a2:fa:9e:14:
61:3f:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:32 2023 by rpki-client on console.sobornost.net