Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/VashtG9uyYxRkwD0xFRDzBbuI40.roa
File: VashtG9uyYxRkwD0xFRDzBbuI40.roa (raw, json)
Hash identifier: 56XcJIjqSUbLEqwwa5vmGuYV3E6Cr6RI+j6UOljRVrM=
Subject key identifier: 55:AB:21:B4:6F:6E:C9:8C:51:93:00:F4:C4:54:43:CC:16:EE:23:8D
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 0189782D12972CB197EBC0768B09B3876FC3
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/VashtG9uyYxRkwD0xFRDzBbuI40.roa
Signing time: Fri 21 Jul 2023 11:19:27 +0000
ROA not before: Fri 21 Jul 2023 11:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211251
IP address blocks: 213.171.64.0/23 maxlen: 23
213.171.66.0/24 maxlen: 24
213.171.66.0/23 maxlen: 23
213.171.67.0/24 maxlen: 24
213.171.68.0/23 maxlen: 23
213.171.74.0/24 maxlen: 24
213.171.75.0/24 maxlen: 24
213.171.72.0/23 maxlen: 23
79.98.176.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:2d:12:97:2c:b1:97:eb:c0:76:8b:09:b3:87:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jul 21 11:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55ab21b46f6ec98c519300f4c45443cc16ee238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:7e:64:75:d1:b5:27:c9:46:fc:ca:b0:3e:
12:78:80:cf:e0:de:07:56:b7:1c:2f:66:2a:31:9f:
dd:80:d7:4d:99:d1:73:19:81:3c:79:a6:6a:91:a9:
1f:b5:ca:4a:ff:2f:00:b8:6c:b3:27:d6:fd:b3:b2:
46:c7:f4:25:e9:e3:28:df:dc:a4:10:65:bc:22:bf:
ae:b5:2a:c2:21:58:9a:5d:aa:4c:5a:dc:3f:c8:2f:
87:27:19:0f:f6:cb:22:b7:9d:63:3a:70:78:e6:4d:
6a:26:40:62:c4:4e:db:63:84:3f:7b:af:43:37:60:
0c:ed:81:b3:a2:19:ba:79:7c:3c:26:df:6f:9f:af:
33:ba:5d:7a:3c:00:6a:9c:68:ed:c5:15:33:7d:1f:
27:41:36:8b:9f:8e:b8:42:1d:bb:19:28:b9:1a:f3:
07:e2:9a:f1:39:c9:6a:71:76:16:a0:26:ef:87:7f:
64:c8:7c:ce:b1:08:92:e9:10:1b:84:97:c0:bf:6e:
03:1b:0a:a4:94:e9:56:58:fb:85:a9:15:ad:d6:4e:
ba:df:8d:5e:cc:3f:f9:84:c2:0d:7c:bc:e5:be:c5:
87:0f:20:4c:e7:06:ff:3b:c6:30:5d:0b:7f:d0:10:
9c:07:45:1b:23:cb:30:2e:ea:bb:69:78:7b:92:e8:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:21:B4:6F:6E:C9:8C:51:93:00:F4:C4:54:43:CC:16:EE:23:8D
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/VashtG9uyYxRkwD0xFRDzBbuI40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
34:df:27:31:62:4a:49:5a:1f:af:7c:af:35:26:5c:d2:a5:d6:
90:d6:66:7f:3d:14:00:01:8f:4d:1b:18:8e:f2:ec:54:32:1e:
e3:c8:ea:1d:ec:28:db:f8:be:f3:36:30:e8:cc:d9:a9:e0:15:
ec:eb:83:d9:7d:cc:8c:bf:a6:16:ba:99:6d:4c:c8:a2:b8:d4:
8f:f7:c1:89:d3:c1:49:e6:5a:95:cb:37:28:7b:e1:30:5c:4d:
10:02:f6:cb:30:1b:14:db:d1:c2:c5:58:fc:af:3b:01:3e:43:
da:fc:f5:bd:92:3b:b7:4a:f1:87:76:68:ed:61:2f:34:aa:e7:
5b:fc:3c:65:a5:b5:35:86:d4:c8:90:df:a0:bc:37:89:fc:d9:
51:07:4f:e2:02:e4:f9:77:26:76:79:a9:fd:ba:26:cb:08:69:
c2:86:56:d2:c6:10:1f:ad:80:56:b4:bf:c1:16:b7:be:85:4b:
31:1a:14:43:b1:0f:d5:c8:5e:89:96:92:13:23:ff:51:b6:49:
49:27:b5:4d:be:e5:7d:a7:84:33:36:d7:e9:6b:c5:18:c5:5e:
9f:b1:56:04:d9:8e:5b:ea:f0:3c:f0:cf:ba:49:3d:d2:84:c4:
8e:bd:7f:ec:71:70:ca:b7:36:73:b1:7c:34:3f:33:91:75:11:
aa:87:55:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net