Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/5BnUkRuANDj7gSGLyosKaIP3vFU.roa
File: 5BnUkRuANDj7gSGLyosKaIP3vFU.roa (raw, json)
Hash identifier: AjybRNGV+CHi3U2lsQpQXKii2QIiRqj/+2ySLckkkfc=
Subject key identifier: E4:19:D4:91:1B:80:34:38:FB:81:21:8B:CA:8B:0A:68:83:F7:BC:55
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 018CC2DAB2FD0D5DA58ACFD6FD82F46BDFBC
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/5BnUkRuANDj7gSGLyosKaIP3vFU.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208666
IP address blocks: 83.229.2.0/24 maxlen: 24
31.193.185.0/24 maxlen: 24
213.255.192.0/24 maxlen: 24
2a09:b300::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 05 Apr 2024 05:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b2:fd:0d:5d:a5:8a:cf:d6:fd:82:f4:6b:df:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e419d4911b803438fb81218bca8b0a6883f7bc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:04:7a:0b:56:94:41:9f:60:03:dd:7d:5c:
45:21:86:c5:c2:1d:3c:1b:80:9a:26:17:98:e6:09:
fe:1f:70:f2:2e:f5:3a:14:4d:25:ae:48:dc:ce:ae:
43:f1:cd:35:be:b2:e6:4a:2d:d0:fb:bd:cd:90:e9:
f7:4e:f6:28:b3:33:dc:9f:75:f2:16:ad:f1:35:fb:
e0:5b:2f:53:7a:4d:b5:16:16:06:5e:d8:38:92:72:
42:94:59:55:2a:98:0d:ef:74:16:41:02:41:7a:7d:
19:a1:37:e3:0d:36:f7:68:a0:a6:c6:9f:3e:91:95:
51:34:55:2b:68:9d:bf:01:95:82:91:20:91:e5:79:
ec:9c:ef:89:37:df:e6:fe:8a:b3:6b:2b:ab:ab:19:
fe:7c:0e:b2:45:3b:2a:9b:3b:3b:e6:cd:79:f4:e2:
a5:7a:c9:37:b9:46:71:d7:65:89:22:1f:9d:3f:7e:
60:68:48:b3:2b:8a:c8:6f:e6:90:ab:a5:41:fb:d9:
e5:17:37:7a:9c:c1:0e:93:2f:a0:c4:4f:de:c5:d3:
de:e2:60:e9:40:45:41:61:58:b0:c3:80:9f:31:39:
37:f9:27:0a:60:3e:5f:6a:c4:a2:b7:38:6a:a9:75:
d3:e9:82:70:20:09:9b:e9:e8:a8:40:a7:b4:55:ac:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:19:D4:91:1B:80:34:38:FB:81:21:8B:CA:8B:0A:68:83:F7:BC:55
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/5BnUkRuANDj7gSGLyosKaIP3vFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.185.0/24
83.229.2.0/24
213.255.192.0/24
IPv6:
2a09:b300::/29
Signature Algorithm: sha256WithRSAEncryption
4c:b1:64:06:b3:47:57:d2:ce:cb:16:ba:da:1f:fc:49:ef:38:
eb:0f:2d:a5:14:b6:dc:2e:0b:65:9a:0e:2d:a9:03:51:09:25:
8c:47:d1:f0:9e:e2:ff:b5:d1:e9:e5:62:fe:30:ec:9d:00:49:
98:6d:30:9e:77:a4:8f:e4:89:dd:87:7f:a4:bc:8d:85:99:e7:
c8:d2:46:85:a9:7c:13:30:4d:9f:20:58:6f:31:d4:18:f0:ea:
42:4a:fc:3e:e3:7e:2b:35:d3:c9:44:62:95:47:b8:9e:25:4f:
c1:2d:bc:d0:6d:eb:b0:9c:b1:36:64:b4:14:65:e7:b5:46:b1:
fc:1c:65:cf:bb:f6:c0:8e:70:46:c7:5a:36:0b:1e:10:45:17:
ac:06:db:28:e2:36:4a:6e:e5:8e:09:ff:4f:bd:48:9d:a7:3e:
00:87:96:40:af:fb:51:1b:5b:10:a3:e0:71:04:48:6f:f7:ff:
3d:71:c5:ab:16:3f:78:cf:e5:5e:ae:aa:fd:ed:14:ee:c8:30:
b7:cb:d8:8a:cb:48:64:ea:22:2f:0b:61:fd:a0:1f:9b:38:b6:
10:ba:b4:74:7e:9e:ec:47:1c:e8:3c:5a:a6:a7:ea:a3:57:33:
ac:c3:3b:8a:9f:34:e1:82:da:28:e0:0d:aa:bb:03:c3:6e:5d:
44:8d:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 08:56:46 2024 by rpki-client on console.sobornost.net