Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/uJ9fdJBy5E4fFEWjbDkGdjdTUp0.roa
File: uJ9fdJBy5E4fFEWjbDkGdjdTUp0.roa (raw, json)
Hash identifier: 6tYcGOM9Xodajzhpfvk4RA6W3prilK9p0NFMxChZJD8=
Subject key identifier: B8:9F:5F:74:90:72:E4:4E:1F:14:45:A3:6C:39:06:76:37:53:52:9D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01890F64E81257782C5E7F14877BEC7BF197
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/uJ9fdJBy5E4fFEWjbDkGdjdTUp0.roa
Signing time: Sat 01 Jul 2023 03:00:18 +0000
ROA not before: Sat 01 Jul 2023 03:00:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 91.206.168.0/24 maxlen: 24
45.149.3.0/24 maxlen: 24
93.185.162.0/24 maxlen: 24
45.130.139.0/24 maxlen: 24
45.130.137.0/24 maxlen: 24
45.139.253.0/24 maxlen: 24
45.139.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0f:64:e8:12:57:78:2c:5e:7f:14:87:7b:ec:7b:f1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 1 03:00:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89f5f749072e44e1f1445a36c3906763753529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6d:ff:16:9f:e4:d8:7b:56:24:ea:19:dd:bd:
96:67:87:04:51:50:ed:0d:f9:4e:34:fc:84:17:9f:
4d:08:43:57:d2:59:9b:24:a2:6d:ea:62:b7:a3:ab:
06:46:02:b5:22:35:9d:4d:28:00:1f:d2:ac:c0:b4:
2e:83:76:a1:01:4f:19:e0:15:47:e8:9b:2c:eb:36:
b7:4c:9e:f6:85:18:42:4a:26:28:33:14:10:41:36:
8c:6f:8b:ec:eb:f9:7c:71:ed:70:c2:5c:85:21:96:
4c:97:54:74:e1:82:41:67:14:2a:4e:55:27:3c:78:
29:d2:99:47:72:ca:18:2b:6a:e6:f8:38:89:02:f7:
52:fc:a0:a6:b3:34:64:b9:36:13:a8:92:2c:e2:1a:
21:76:af:b1:2b:94:e6:63:71:53:d7:36:f8:e5:f1:
f7:2a:7e:5a:6a:de:c2:c5:7f:e0:91:0a:62:71:c8:
61:a7:c8:e1:4b:73:fc:2d:8f:c5:21:f1:3e:ae:e3:
1b:ea:63:d9:a7:be:05:23:d4:4a:72:a5:cc:d7:a9:
e8:32:a6:b5:88:11:af:d2:a2:9d:7a:b7:71:da:c0:
d7:1f:6a:1a:8c:d0:2d:b1:a7:24:8e:40:0e:00:68:
88:ac:53:2f:f6:01:70:5a:3f:f9:5e:b8:19:66:05:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:5F:74:90:72:E4:4E:1F:14:45:A3:6C:39:06:76:37:53:52:9D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/uJ9fdJBy5E4fFEWjbDkGdjdTUp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.137.0/24
45.130.139.0/24
45.139.252.0/23
45.149.3.0/24
91.206.168.0/24
93.185.162.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b4:8b:bb:3f:27:86:7c:18:c5:a3:99:34:ce:7f:86:78:02:
e0:dd:31:d2:83:d6:6e:53:f2:7b:14:8c:a0:67:e2:02:1d:bf:
ee:f0:1d:9e:aa:ab:05:ec:e8:c3:a6:c8:27:21:a7:69:0e:37:
3e:8b:dc:8b:80:ef:31:21:1d:e7:aa:65:0e:76:5f:f7:42:83:
04:f8:2f:43:f4:8c:4c:5b:9f:33:cd:9c:a4:01:87:9c:23:7a:
66:ed:b9:55:5a:f9:a8:49:6f:e5:eb:0c:d9:cc:96:00:10:de:
34:15:3b:a8:aa:89:d9:c2:58:a9:03:04:fe:84:60:34:5b:28:
1d:60:d5:bb:4e:ee:f1:fb:ff:26:c2:cf:0e:76:59:7a:37:c2:
df:3e:75:75:8e:e0:0c:e8:d5:fd:d2:f0:9f:0a:28:96:1c:07:
16:b3:b1:28:d8:86:df:2e:6e:05:d4:11:24:40:03:63:d3:ad:
18:29:d0:40:d7:a9:8a:8c:59:37:a8:68:26:58:3a:c8:40:e9:
e8:e1:d9:e1:8a:3a:65:ad:bb:e8:71:81:46:4e:b6:67:af:b3:
28:82:49:60:6f:27:be:a7:32:26:81:09:9e:c4:8b:28:70:de:
d7:34:69:72:64:12:56:41:21:dc:40:41:9b:bd:f6:43:70:d7:
03:ca:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:36 2023 by rpki-client on console.sobornost.net