Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/_IWEN2w4Y3xGMoM7u1LQoT5nfms.roa
File: _IWEN2w4Y3xGMoM7u1LQoT5nfms.roa (raw, json)
Hash identifier: KVUExoDPs4ZywiK8ie6o27FTHSklSI7ieU2Kw/HlEJI=
Subject key identifier: FC:85:84:37:6C:38:63:7C:46:32:83:3B:BB:52:D0:A1:3E:67:7E:6B
Certificate issuer: /CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Certificate serial: 018570C2B82A7AE41996A8BC201F682A56D0
Authority key identifier: AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/_IWEN2w4Y3xGMoM7u1LQoT5nfms.roa
Signing time: Mon 02 Jan 2023 04:34:47 +0000
ROA not before: Mon 02 Jan 2023 04:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213089
IP address blocks: 193.178.128.0/24 maxlen: 24
193.178.139.0/24 maxlen: 24
193.178.137.0/24 maxlen: 24
185.133.232.0/22 maxlen: 24
193.178.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:b8:2a:7a:e4:19:96:a8:bc:20:1f:68:2a:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe3f1ed1b49c5ba7cc1f192a4024765a253664e
Validity
Not Before: Jan 2 04:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8584376c38637c4632833bbb52d0a13e677e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e3:cd:0c:81:52:25:43:40:bd:48:1a:25:8b:
3d:1d:e6:8f:cf:b0:3a:cc:3e:4b:b0:72:1c:62:1c:
81:8c:ee:b8:53:e0:6c:9b:1b:82:c6:f7:ad:5f:66:
bf:21:ad:1e:65:0d:f3:c0:2d:82:61:db:5b:0b:81:
39:5d:e9:92:ba:a7:1b:a8:3e:8e:53:af:87:64:54:
45:ae:ce:9b:84:fe:74:8b:50:c8:02:eb:b9:1e:a8:
4b:d1:fc:28:89:6e:8b:c9:e0:dd:27:58:fc:f2:3b:
98:e8:ff:93:d7:65:f6:21:c3:46:06:75:83:6e:df:
ea:b1:4c:61:44:f4:65:cc:49:fc:c2:5e:63:4c:f3:
ed:4b:bf:10:3f:61:7e:c0:53:41:28:dc:13:b1:95:
7c:fa:7a:7d:60:c6:ed:f1:8c:eb:44:68:d4:8d:33:
36:69:91:c8:ad:76:ac:53:db:ff:6b:9c:8e:04:1d:
f8:d8:81:f2:c4:81:85:92:fd:52:01:40:5b:8f:61:
19:df:2a:5f:89:a6:7f:7d:4b:6a:82:54:29:4a:b8:
2f:e7:b2:38:10:dd:64:22:dd:4c:be:a5:23:72:48:
2f:56:46:6d:28:4e:14:7e:eb:06:73:e5:86:cd:b9:
33:2c:23:30:0b:81:30:67:4b:74:45:d2:65:5e:37:
59:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:84:37:6C:38:63:7C:46:32:83:3B:BB:52:D0:A1:3E:67:7E:6B
X509v3 Authority Key Identifier:
keyid:AF:E3:F1:ED:1B:49:C5:BA:7C:C1:F1:92:A4:02:47:65:A2:53:66:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Px7RtJxbp8wfGSpAJHZaJTZk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/_IWEN2w4Y3xGMoM7u1LQoT5nfms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b44488-0500-4538-93b1-2688d346f6ab/1/r-Px7RtJxbp8wfGSpAJHZaJTZk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.232.0/22
193.178.128.0/24
193.178.137.0/24
193.178.139.0/24
193.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8d:d6:f4:38:b5:e3:69:d5:9d:17:91:5c:65:7e:36:e2:53:
d9:94:32:fe:45:e2:a6:06:a5:c4:41:b3:88:a0:96:02:c5:75:
7b:c9:70:cd:a0:7c:b6:dd:bd:b8:81:ca:76:ef:73:ce:97:53:
29:b0:a0:fe:ec:67:a6:7e:73:8f:15:66:93:0c:0b:f5:ab:58:
46:9c:f5:97:7d:05:ab:e0:df:38:5c:08:44:51:de:a4:8a:a8:
f1:4e:2b:81:6e:47:94:9a:4b:16:90:97:cb:11:8f:88:cd:60:
93:f6:e1:c3:c0:82:43:69:3e:47:5d:fe:92:d4:6c:68:15:ca:
94:dc:b3:41:a4:50:37:3f:1c:3c:ba:40:8e:b7:03:8b:56:ae:
f2:41:9a:ee:c9:f6:79:c2:f6:03:54:96:52:19:52:97:25:62:
db:0b:06:e3:99:2b:42:20:9f:6d:07:bc:bb:39:9f:38:68:02:
ec:d4:a1:f7:a9:b1:47:9e:f6:c6:0f:24:38:a7:9f:b0:14:e0:
c1:37:86:05:83:a4:f7:da:ee:42:f8:c4:72:e7:3c:33:3a:be:
01:67:dc:08:ea:b4:97:15:0b:e1:69:c5:17:31:5a:6d:83:62:
69:1f:ac:87:84:e9:81:a6:76:1e:e7:6a:76:c1:33:68:44:de:
45:9f:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:58 2024 by rpki-client on console.sobornost.net