Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/xNzqMWdhEqnZiBmF2duR0lPWbcw.roa
File: xNzqMWdhEqnZiBmF2duR0lPWbcw.roa (raw, json)
Hash identifier: vaSSlk9RmOtU/G78phwfyJrjAPyCrZ3JvOw6FPIPtzw=
Subject key identifier: C4:DC:EA:31:67:61:12:A9:D9:88:19:85:D9:DB:91:D2:53:D6:6D:CC
Certificate issuer: /CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Certificate serial: 018570E75B257F9DDB48038C9FA4413AD417
Authority key identifier: DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/xNzqMWdhEqnZiBmF2duR0lPWbcw.roa
Signing time: Mon 02 Jan 2023 05:14:48 +0000
ROA not before: Mon 02 Jan 2023 05:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198477
IP address blocks: 185.55.31.0/24 maxlen: 24
37.99.192.0/21 maxlen: 21
185.55.30.0/24 maxlen: 24
37.99.192.0/24 maxlen: 24
185.55.29.0/24 maxlen: 24
185.55.28.0/22 maxlen: 22
185.55.28.0/24 maxlen: 24
37.99.196.0/24 maxlen: 24
37.99.195.0/24 maxlen: 24
37.99.194.0/24 maxlen: 24
37.99.193.0/24 maxlen: 24
37.99.199.0/24 maxlen: 24
37.99.198.0/24 maxlen: 24
37.99.197.0/24 maxlen: 24
2a02:5440::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:5b:25:7f:9d:db:48:03:8c:9f:a4:41:3a:d4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad7a0b00102a28416e3093b5765a0b27755ccf3
Validity
Not Before: Jan 2 05:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4dcea31676112a9d9881985d9db91d253d66dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:f5:0a:ae:6d:d5:98:70:f9:4f:4a:b6:76:
93:57:01:22:ec:4d:3d:15:75:73:be:82:b7:1f:2b:
9a:6b:82:b4:68:a9:d3:a2:26:da:e4:01:06:b9:5d:
0f:c3:97:98:13:0c:52:ad:e3:c8:3c:7d:60:9c:30:
be:46:d3:cd:79:0e:b0:45:0e:39:b0:fe:98:bf:d2:
0d:33:7c:09:29:83:c0:87:72:0b:f5:14:50:fc:8a:
be:47:46:65:af:15:5c:4a:26:34:8c:95:d9:5f:59:
30:7a:c5:9e:74:91:21:dd:84:dd:ad:34:b1:6e:91:
4a:87:ce:74:ba:cf:e8:e1:6b:72:28:cd:83:a8:dc:
6c:2a:69:8c:56:e0:91:de:42:99:a4:d1:7d:5f:a7:
59:b4:a9:07:4e:fd:ae:1e:3a:ee:2a:4f:ec:0b:68:
fb:54:fd:60:85:3d:32:d5:0e:5d:7e:9d:d6:5b:42:
e3:a7:1f:d0:a6:20:84:df:b3:38:bb:ac:4f:25:88:
4f:01:ff:a0:fd:d3:e7:dd:37:1c:94:5a:f7:0a:65:
9d:30:f7:53:57:78:02:0b:4f:27:cd:64:2e:1e:74:
83:b2:e5:45:b2:ea:0e:2d:57:3a:20:cb:46:ac:a9:
dc:06:77:21:a9:1b:fc:8d:1e:f7:e2:22:8e:d4:c2:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:EA:31:67:61:12:A9:D9:88:19:85:D9:DB:91:D2:53:D6:6D:CC
X509v3 Authority Key Identifier:
keyid:DA:D7:A0:B0:01:02:A2:84:16:E3:09:3B:57:65:A0:B2:77:55:CC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tegsAECooQW4wk7V2WgsndVzPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/xNzqMWdhEqnZiBmF2duR0lPWbcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e2cb16-9c16-40b1-ac8c-959dc21e9293/1/2tegsAECooQW4wk7V2WgsndVzPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.192.0/21
185.55.28.0/22
IPv6:
2a02:5440::/32
Signature Algorithm: sha256WithRSAEncryption
26:f5:66:f9:ba:87:78:e7:ac:b5:67:8f:01:35:6d:5f:f3:55:
fe:f2:11:bf:fa:b3:69:1c:0c:00:82:ab:27:3c:8d:9a:98:7f:
da:6c:f9:42:fb:7b:2c:54:59:96:a4:e3:25:3a:ab:e3:ee:10:
12:d0:d6:62:ee:75:32:1d:c3:94:9a:35:7a:02:ae:fb:6a:3b:
b4:f5:61:ed:19:b3:f7:49:5a:ab:9d:43:52:ff:05:88:a0:cc:
f9:e7:31:50:5b:90:d0:2a:15:50:da:77:b5:2c:15:e1:a1:ba:
ae:53:c4:1a:63:9d:7c:42:b3:5f:b3:fa:46:20:92:b1:b2:af:
68:cf:f4:01:81:10:8f:cd:52:9c:6b:a5:2d:c8:2a:eb:f6:25:
22:ae:28:67:4c:2f:cf:a8:59:5b:10:d9:30:93:41:e9:24:09:
0e:48:71:5b:10:20:b9:da:19:f8:14:d4:8a:6c:e7:c3:bb:bb:
a6:f8:27:a7:0f:17:3e:32:4f:59:05:8f:f2:10:02:52:56:ab:
8e:d4:f9:6e:a7:29:67:4d:91:71:e5:22:53:43:cd:e8:f2:40:
24:91:38:d3:92:8c:2f:00:e3:9b:72:1f:b5:c9:98:24:85:04:
15:7f:8c:68:08:52:0e:4a:db:68:97:5b:6c:cd:43:75:d0:f3:
0f:6c:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:28 2024 by rpki-client on console.sobornost.net