Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/mYhiD5A9RhHf99xsxf0_nWfSOAs.roa
File: mYhiD5A9RhHf99xsxf0_nWfSOAs.roa (raw, json)
Hash identifier: FNhulWYxDroLFJK26hug/lk0jGlYIKxaqUjO4EAG9VY=
Subject key identifier: 99:88:62:0F:90:3D:46:11:DF:F7:DC:6C:C5:FD:3F:9D:67:D2:38:0B
Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial: 018755CF9E43D9883DDF3706579887079537
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/mYhiD5A9RhHf99xsxf0_nWfSOAs.roa
Signing time: Thu 06 Apr 2023 09:04:42 +0000
ROA not before: Thu 06 Apr 2023 09:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 185.133.181.0/24 maxlen: 24
185.133.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:cf:9e:43:d9:88:3d:df:37:06:57:98:87:07:95:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
Validity
Not Before: Apr 6 09:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9988620f903d4611dff7dc6cc5fd3f9d67d2380b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:ea:0a:f9:d1:71:96:b4:f9:4e:e6:2d:c5:
f4:ae:25:16:f6:b6:c3:40:c2:09:3c:97:3a:c6:a1:
d2:49:8e:55:64:24:bb:be:79:ca:91:c4:f2:29:25:
f0:27:5e:f0:a5:b8:bf:9b:50:cb:6b:45:b4:38:57:
4c:42:c8:40:39:c4:66:4e:4a:26:df:f7:ad:bb:04:
98:11:64:f2:8b:75:6e:e7:84:63:3c:77:3c:4d:0e:
3c:70:08:6c:89:aa:4e:db:ff:a7:b7:ff:d9:8e:90:
0a:68:ca:bb:59:be:91:aa:ab:5e:3c:2f:ed:d7:43:
a4:24:d3:99:14:21:31:61:cb:f8:28:32:a3:f2:f1:
63:43:1c:d3:74:9e:6d:d4:15:e5:0a:13:8b:54:13:
f3:c3:32:fb:6d:02:cd:e1:b7:94:c6:8c:70:02:ca:
a3:b7:a5:61:1d:dc:79:4b:3a:4d:31:c0:ad:84:62:
e5:49:85:d4:40:f3:40:68:eb:1e:0f:22:f0:7b:2f:
1e:8f:60:fe:91:53:6f:a0:11:58:2d:1d:8b:81:3e:
0d:f9:85:a7:69:af:ad:c0:a3:e1:ca:4e:04:e7:ee:
dc:98:cd:24:d0:34:f8:35:e5:e2:f8:70:13:8a:f0:
23:89:9f:03:13:bf:09:15:7a:cd:c2:75:ab:1a:f0:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:62:0F:90:3D:46:11:DF:F7:DC:6C:C5:FD:3F:9D:67:D2:38:0B
X509v3 Authority Key Identifier:
keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/mYhiD5A9RhHf99xsxf0_nWfSOAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.180.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:dd:74:8c:f1:f7:67:a0:89:02:68:01:4e:7e:7e:1d:9d:48:
25:24:ba:b2:03:a3:b8:26:e1:21:16:78:44:a5:c3:38:30:89:
c3:f1:8f:1f:df:92:00:eb:34:48:37:d0:c2:ef:30:cd:7c:af:
16:16:a5:e6:38:74:c8:ba:23:2a:25:b8:47:d0:b6:a9:4f:83:
53:3f:e9:4e:6c:8c:3a:ac:7d:13:00:54:68:b7:9f:86:23:6d:
a8:f2:00:c5:f2:ea:7c:22:ce:7f:07:f7:07:af:7e:7d:60:0a:
ac:48:c3:90:0e:d1:e0:cb:0f:5f:b8:97:2b:95:21:94:19:1e:
43:64:c0:62:25:a6:a0:44:92:10:ee:69:eb:84:f5:a6:82:17:
ea:98:f7:a9:23:1e:66:2d:cf:14:4b:b3:9c:84:fe:3a:06:19:
e3:1e:3d:8d:83:0e:22:18:91:fd:53:fc:7b:d5:bc:ff:d9:71:
7f:e7:2f:41:a4:a1:57:28:75:56:53:37:b0:c6:6e:81:a3:5b:
6a:fc:ab:3a:37:ed:2b:37:ab:c7:ed:3f:96:38:6d:fa:09:9a:
bc:36:b1:8d:43:25:6c:e5:af:97:92:58:9c:35:39:38:8b:0d:
4e:31:35:73:68:96:95:b2:e0:58:2c:ad:62:48:39:5c:14:d7:
66:98:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:04 2024 by rpki-client on console.sobornost.net