Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/HIq_neYuD-lV6FHP7R4HOTQ5iOI.roa
File: HIq_neYuD-lV6FHP7R4HOTQ5iOI.roa (raw, json)
Hash identifier: cIOHoXmv7O4BAvmBsCgGNQ81/RX9un4uW2B+9Eg3SVE=
Subject key identifier: 1C:8A:BF:9D:E6:2E:0F:E9:55:E8:51:CF:ED:1E:07:39:34:39:88:E2
Certificate issuer: /CN=252a182d91f456d850210dbf72da7e475fbf3c08
Certificate serial: 018572D5C1C670E85CF4A45A7EC665E15E4A
Authority key identifier: 25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/HIq_neYuD-lV6FHP7R4HOTQ5iOI.roa
Signing time: Mon 02 Jan 2023 14:14:49 +0000
ROA not before: Mon 02 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198434
IP address blocks: 185.73.250.0/24 maxlen: 24
185.73.248.0/22 maxlen: 24
185.73.248.0/24 maxlen: 24
185.73.249.0/24 maxlen: 24
213.138.217.0/24 maxlen: 24
213.138.218.0/24 maxlen: 24
213.138.219.0/24 maxlen: 24
213.138.216.0/22 maxlen: 24
213.138.216.0/24 maxlen: 24
37.72.33.0/24 maxlen: 24
37.72.34.0/24 maxlen: 24
37.72.35.0/24 maxlen: 24
37.72.36.0/24 maxlen: 24
37.72.37.0/24 maxlen: 24
37.72.38.0/24 maxlen: 24
37.72.32.0/21 maxlen: 24
37.72.32.0/24 maxlen: 24
37.72.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c1:c6:70:e8:5c:f4:a4:5a:7e:c6:65:e1:5e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252a182d91f456d850210dbf72da7e475fbf3c08
Validity
Not Before: Jan 2 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c8abf9de62e0fe955e851cfed1e0739343988e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:e3:82:e1:f1:66:38:24:3a:df:4f:26:46:
1c:5d:a3:70:37:dc:6e:c4:7d:c0:e8:2e:36:75:34:
c9:f6:aa:83:95:23:28:7f:58:78:75:ce:37:51:65:
cd:44:b1:4f:26:bd:c2:93:b0:7b:29:f2:85:a5:0f:
04:ef:f9:92:e6:30:12:b5:20:38:50:1f:58:b1:5f:
fb:c1:37:7c:d7:bd:60:87:c5:29:38:75:94:67:0b:
d4:c7:7a:c2:26:b4:9c:03:ad:d4:0f:de:e5:e5:94:
14:60:66:ea:43:cc:aa:36:b2:a5:cd:30:80:ff:03:
73:a1:cc:ee:1c:3d:cb:7b:2a:a3:29:c7:d9:e7:82:
0f:6f:17:ea:26:ea:23:35:86:cb:20:96:ef:e0:75:
bf:1c:9a:b1:e0:af:16:0e:dc:2a:92:f0:e6:13:57:
79:39:82:57:33:d4:3c:d4:47:9b:88:b0:7f:65:d7:
93:f0:0c:84:db:87:41:1d:15:09:f1:b9:93:f1:88:
1d:a0:04:f3:0a:81:7d:58:15:c6:77:b6:4d:3b:50:
c7:d1:3e:1f:43:ab:d1:c7:91:ee:8c:f0:b9:38:97:
89:7f:98:de:f7:71:d8:d5:43:ac:d5:6b:43:74:f3:
52:f7:1b:04:46:c5:31:7e:9a:67:0b:65:88:d5:30:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8A:BF:9D:E6:2E:0F:E9:55:E8:51:CF:ED:1E:07:39:34:39:88:E2
X509v3 Authority Key Identifier:
keyid:25:2A:18:2D:91:F4:56:D8:50:21:0D:BF:72:DA:7E:47:5F:BF:3C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSoYLZH0VthQIQ2_ctp-R1-_PAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/HIq_neYuD-lV6FHP7R4HOTQ5iOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b77e6a-ace3-4ff2-b22a-582f9d2e38b2/1/JSoYLZH0VthQIQ2_ctp-R1-_PAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.32.0/21
185.73.248.0/22
213.138.216.0/22
Signature Algorithm: sha256WithRSAEncryption
62:01:aa:09:48:c9:67:34:44:aa:9c:2f:a8:50:b4:06:79:9c:
aa:bd:be:6b:7b:a0:84:24:cc:43:60:d0:27:2c:95:fe:e5:92:
5b:98:ca:13:82:ec:7d:a4:c6:81:38:34:5c:ad:9b:dc:3a:23:
f3:51:c4:15:ae:45:2d:3f:c5:51:54:62:18:9f:b0:78:88:21:
46:29:b8:1a:e9:d7:bf:97:ee:0f:5f:af:eb:96:6f:74:40:e7:
4f:12:95:8b:3b:d9:c8:2e:97:d7:62:64:42:fd:59:4a:0c:e1:
6d:9d:44:c0:4d:65:23:e5:c3:df:b3:8e:84:cc:84:ca:af:12:
b9:a2:27:7a:34:b3:d5:cf:58:08:a2:52:18:7a:3a:03:1f:6e:
41:0c:81:d8:1c:c9:02:d8:74:3b:1f:23:99:94:7a:3c:13:76:
8c:bc:f1:cf:12:ae:cd:44:d0:2f:2a:e0:a0:d6:72:46:79:85:
fb:49:5a:44:68:23:63:46:8e:98:bc:06:ba:c2:55:87:a8:cd:
17:0e:17:34:43:df:4b:46:04:da:47:a7:d4:30:98:20:9e:d2:
e6:5b:0d:37:16:0a:68:c3:ea:82:6c:18:92:41:0c:81:aa:c1:
15:e6:40:b4:9c:49:b0:ea:31:7a:f9:d8:1d:54:2a:04:98:64:
14:75:fc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:10 2024 by rpki-client on console.sobornost.net