Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/13Pmf9nv4B6qubwXmDSWHjILDc0.roa
File: 13Pmf9nv4B6qubwXmDSWHjILDc0.roa (raw, json)
Hash identifier: jMT5/l6nYk55/IGXjNlJJdLYpyj8wyvuV9ZIEDwLPHY=
Subject key identifier: D7:73:E6:7F:D9:EF:E0:1E:AA:B9:BC:17:98:34:96:1E:32:0B:0D:CD
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0187ECD96F42CC2D615A2C148C0A7415521E
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/13Pmf9nv4B6qubwXmDSWHjILDc0.roa
Signing time: Fri 05 May 2023 16:58:05 +0000
ROA not before: Fri 05 May 2023 16:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206119
IP address blocks: 194.0.207.0/24 maxlen: 24
185.213.169.0/24 maxlen: 24
185.213.171.0/24 maxlen: 24
185.213.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:d9:6f:42:cc:2d:61:5a:2c:14:8c:0a:74:15:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: May 5 16:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d773e67fd9efe01eaab9bc179834961e320b0dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:a4:c3:ce:97:3b:7f:da:b8:db:1d:97:57:
00:d1:9a:e3:d8:f8:5f:9a:42:b0:fa:45:c7:00:f5:
b3:c8:fc:2b:1f:dc:d5:a5:44:e0:97:06:5b:73:91:
bf:e2:08:f8:a0:31:b5:b6:dd:22:31:f3:91:74:0b:
6e:4a:08:30:98:14:9d:21:8c:2c:9a:0c:c0:c6:9f:
98:75:83:2b:b0:09:fb:2f:30:7c:5f:0c:af:10:c2:
b2:aa:f0:cc:ba:9d:56:fd:ba:4a:c5:50:20:4d:23:
4d:c7:7c:75:ee:45:c5:46:08:85:94:c6:68:0e:9b:
34:93:d5:c7:4d:c9:60:f1:e8:43:24:d8:77:52:76:
ae:9e:b8:ca:22:d5:75:51:68:af:d9:33:64:b0:bb:
37:e5:06:d4:03:6c:c4:73:7b:be:28:af:5f:bb:0b:
6b:1c:24:fa:b1:0a:89:da:01:fc:ca:97:6d:a1:92:
ff:06:1b:76:ed:d9:d4:d0:21:16:cd:0e:80:5e:d7:
73:3d:b4:3c:23:cb:ac:39:b2:3a:4c:b6:c0:ed:d0:
b1:74:b1:83:bd:fd:d3:e3:60:d3:40:71:cc:95:ab:
43:a7:03:ea:75:d7:92:0c:50:e7:7a:f2:c6:27:d6:
76:95:39:ff:7e:d9:b5:c9:d2:61:57:cb:da:28:a7:
69:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:E6:7F:D9:EF:E0:1E:AA:B9:BC:17:98:34:96:1E:32:0B:0D:CD
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/13Pmf9nv4B6qubwXmDSWHjILDc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.169.0-185.213.171.255
194.0.207.0/24
Signature Algorithm: sha256WithRSAEncryption
69:77:e8:24:37:09:b8:94:33:14:65:fa:f9:f3:5e:cd:e9:6d:
55:72:ce:a3:09:7f:00:c5:04:6d:90:ea:c7:19:bd:0f:1f:99:
31:3c:17:87:cc:70:38:c0:b7:23:09:f0:89:cb:ea:2b:7f:dc:
55:1b:84:2b:22:de:22:e7:e2:a2:c9:54:9a:82:cf:71:a4:8b:
71:98:50:60:53:7b:46:be:a4:0f:ae:8a:8b:7b:9e:f7:0f:9c:
1c:e5:e3:1f:91:e2:01:74:c6:ae:f1:01:b5:5d:3b:25:51:1d:
6f:c5:04:3f:62:b9:44:3b:57:9d:72:d4:2c:c1:73:81:e5:d5:
f7:51:de:ad:c2:08:ce:9a:e3:3e:38:5b:39:68:89:15:ea:9f:
f5:2a:f1:6d:03:f8:c0:65:29:43:65:58:fc:be:15:c4:cb:a2:
a4:4a:36:87:f0:9e:e1:2d:8a:50:a3:33:f4:d0:97:91:49:d9:
6a:35:b0:9c:fc:1d:da:36:cb:16:15:cb:4a:7b:b7:e5:a2:08:
61:e9:dc:d6:79:05:1f:7b:e5:85:df:1e:53:91:8c:05:23:90:
00:2e:cc:2e:7c:04:63:ff:44:3c:8f:00:07:98:20:d4:7b:ed:
d3:86:1d:cc:61:89:17:60:87:3b:56:17:23:25:86:b7:70:59:
ae:fa:28:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net