Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/fF1ZP9m8uxOtr4uazF3bba6_buo.roa
File: fF1ZP9m8uxOtr4uazF3bba6_buo.roa (raw, json)
Hash identifier: ZSv0lGEh8lwTMWsJP2kp9jFKfZjsbXym8i3xcescWis=
Subject key identifier: 7C:5D:59:3F:D9:BC:BB:13:AD:AF:8B:9A:CC:5D:DB:6D:AE:BF:6E:EA
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 0186FFEA3FEFDF0767E6786D2DB444201C7E
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/fF1ZP9m8uxOtr4uazF3bba6_buo.roa
Signing time: Mon 20 Mar 2023 16:46:27 +0000
ROA not before: Mon 20 Mar 2023 16:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15547
IP address blocks: 81.88.176.0/21 maxlen: 21
81.88.176.0/20 maxlen: 20
194.12.16.0/20 maxlen: 20
213.230.56.0/21 maxlen: 21
213.230.52.0/22 maxlen: 22
86.111.128.0/20 maxlen: 20
185.50.220.0/22 maxlen: 22
92.62.176.0/20 maxlen: 20
185.17.176.0/22 maxlen: 22
31.31.48.0/20 maxlen: 20
213.221.128.0/19 maxlen: 19
77.242.160.0/20 maxlen: 20
195.162.164.0/23 maxlen: 23
185.44.196.0/22 maxlen: 22
195.162.167.0/24 maxlen: 24
195.162.168.0/21 maxlen: 21
195.162.176.0/20 maxlen: 20
178.237.80.0/20 maxlen: 20
217.79.192.0/20 maxlen: 20
185.17.108.0/22 maxlen: 22
2a03:4380::/32 maxlen: 32
2a02:26a0::/29 maxlen: 29
2001:14a8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ff:ea:3f:ef:df:07:67:e6:78:6d:2d:b4:44:20:1c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Mar 20 16:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5d593fd9bcbb13adaf8b9acc5ddb6daebf6eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:1d:09:45:5d:94:25:ac:d7:96:cb:23:37:
99:11:24:98:bc:4f:11:72:b6:18:d8:8c:b8:01:84:
ef:a6:6b:81:8a:fa:76:e2:ae:ec:4d:66:f6:02:f3:
8e:3a:35:ea:44:e6:6e:35:e2:5a:05:cc:d2:6d:9b:
69:27:a3:e3:74:f2:28:4d:b6:d2:2d:c7:7e:03:0a:
56:d1:2d:0c:f1:d9:71:6e:1b:35:32:1b:6b:28:a9:
5d:5f:7f:d3:5d:da:c0:37:34:bd:70:eb:82:e0:48:
0a:82:e1:36:d8:fe:84:b4:e9:ff:57:f6:fa:74:5b:
d9:03:62:0b:03:9e:61:75:b0:8c:14:12:a6:81:d1:
9a:99:23:f5:05:6b:e3:78:65:a2:45:3f:84:ac:1c:
e6:bb:29:31:cd:b4:0b:c2:5d:cd:49:6d:63:01:92:
5f:c1:96:3f:ab:db:df:8f:e9:7f:62:ee:bf:26:a3:
76:6d:bc:3d:24:a7:03:dd:09:e6:78:27:e8:da:62:
b5:4b:70:6f:73:91:90:83:ad:4d:6f:96:7c:f4:0e:
c3:c6:e0:d3:bc:83:c1:de:74:df:b1:8b:76:fd:d7:
59:33:43:6d:53:8d:e2:6e:6f:cc:bb:c5:a9:c6:af:
d6:1d:e9:2d:49:8e:37:fc:68:65:b4:78:1f:7e:34:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:59:3F:D9:BC:BB:13:AD:AF:8B:9A:CC:5D:DB:6D:AE:BF:6E:EA
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/fF1ZP9m8uxOtr4uazF3bba6_buo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.48.0/20
77.242.160.0/20
81.88.176.0/20
86.111.128.0/20
92.62.176.0/20
178.237.80.0/20
185.17.108.0/22
185.17.176.0/22
185.44.196.0/22
185.50.220.0/22
194.12.16.0/20
195.162.164.0/23
195.162.167.0-195.162.191.255
213.221.128.0/19
213.230.52.0-213.230.63.255
217.79.192.0/20
IPv6:
2001:14a8::/32
2a02:26a0::/29
2a03:4380::/32
Signature Algorithm: sha256WithRSAEncryption
5d:1c:76:b6:8c:6f:f2:d6:90:c0:2c:95:53:05:c0:69:33:28:
25:4d:d5:e0:2f:1a:fb:71:ce:c0:b9:58:54:b3:7b:44:ed:6d:
df:fe:bd:f9:ac:17:5b:18:55:90:e0:ff:ea:83:e3:19:1d:3f:
d7:75:68:e6:49:e3:e0:04:bf:9a:33:93:e7:ac:e3:41:64:18:
79:b1:c3:94:74:aa:46:68:4f:33:6f:3b:a7:03:a1:22:19:f0:
40:63:15:0d:24:31:eb:75:39:b5:13:b7:dd:b5:37:b8:f7:32:
47:98:bd:c0:71:c8:89:00:3e:eb:07:49:2c:00:d8:dd:d5:0d:
09:4f:b0:55:b3:8c:40:4f:08:ef:36:05:23:36:42:60:5a:ab:
0a:3d:0b:81:6f:76:8d:1a:d0:d0:5c:e0:2f:51:5f:e4:cd:49:
5a:0e:fd:56:6c:05:bc:d7:f1:6a:9c:34:2e:bf:e0:fa:6d:02:
80:e0:49:b6:ad:13:0c:1a:8f:0a:88:a5:b9:e0:37:72:92:4a:
28:31:b5:90:70:99:43:ac:75:e4:de:d1:2b:0d:06:0d:3c:9e:
a4:0d:1e:03:80:39:a4:d0:14:3b:f2:c6:54:9b:e2:1f:ca:50:
e8:34:cc:f3:0a:a9:da:46:aa:05:14:01:5f:45:70:ba:bc:5e:
c7:08:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net