Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/LN2n5AnBTpYGe5sAlTgQvpK_mYY.roa
File: LN2n5AnBTpYGe5sAlTgQvpK_mYY.roa (raw, json)
Hash identifier: Qu2QLYqIvhLzK362yDxypN7EQg9Ir5j3js01klXfIH8=
Subject key identifier: 2C:DD:A7:E4:09:C1:4E:96:06:7B:9B:00:95:38:10:BE:92:BF:99:86
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 018C0FE3E12B9B8EB191C3832C44F93EABC2
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/LN2n5AnBTpYGe5sAlTgQvpK_mYY.roa
Signing time: Mon 27 Nov 2023 08:27:21 +0000
ROA not before: Mon 27 Nov 2023 08:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210275
IP address blocks: 83.229.65.0/24 maxlen: 24
176.105.148.0/22 maxlen: 24
185.35.78.0/23 maxlen: 24
2a13:2400::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0f:e3:e1:2b:9b:8e:b1:91:c3:83:2c:44:f9:3e:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Nov 27 08:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cdda7e409c14e96067b9b00953810be92bf9986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7c:96:41:59:b7:d2:de:ea:85:69:27:0b:68:
24:7c:75:c0:6c:c9:ab:7e:58:8f:c3:ae:1a:06:67:
16:0b:46:4c:13:f5:6e:6a:a5:bc:8a:97:c6:11:f0:
c0:6c:57:6b:1b:d4:6f:b9:73:d0:27:96:ed:0e:21:
7e:7a:a7:0a:4d:48:7b:ce:4d:c9:2b:84:ed:aa:75:
8c:a0:f2:27:e5:25:d8:20:30:66:65:2b:c8:c2:a9:
6e:37:9f:29:1e:b2:0a:fc:fb:77:32:e3:d4:67:27:
ae:38:8d:8a:35:3e:50:ee:99:05:de:e9:a9:a3:0a:
8e:9b:86:97:fa:fc:b8:1e:4d:d7:fa:a2:ba:85:ae:
37:95:61:96:74:d8:9e:db:15:70:c0:15:2f:ed:88:
90:38:70:3f:08:0a:b9:40:99:73:a5:97:ef:93:bd:
cb:d4:8f:a8:9b:91:e5:68:8b:df:0f:20:3d:32:95:
06:30:ff:56:44:1c:db:99:c6:d0:4e:f0:91:3e:2f:
91:d3:f7:a4:6b:8a:50:a9:ac:ec:c9:87:17:32:75:
6b:75:66:a9:db:f0:1e:3c:be:23:4a:9e:3d:59:2e:
0e:6f:67:b4:b1:21:50:83:ad:0e:8a:4d:17:eb:f8:
9b:a0:97:8b:0c:8f:c7:2f:6f:62:ea:6f:29:7b:33:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DD:A7:E4:09:C1:4E:96:06:7B:9B:00:95:38:10:BE:92:BF:99:86
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/LN2n5AnBTpYGe5sAlTgQvpK_mYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.65.0/24
176.105.148.0/22
185.35.78.0/23
IPv6:
2a13:2400::/29
Signature Algorithm: sha256WithRSAEncryption
65:94:bc:04:d3:20:44:bd:40:af:2c:da:10:02:ce:2b:d6:95:
2a:a5:4f:fb:4d:08:92:44:c6:67:62:df:6d:f7:ce:04:40:6d:
00:06:d7:ba:b2:fb:3b:b1:a2:65:fe:18:8a:37:97:e4:7e:21:
ea:cd:b1:85:0c:73:ec:61:27:2c:06:ac:14:cc:5e:74:48:7f:
90:dd:d3:ab:5e:9e:23:d2:7b:8c:5f:57:e4:74:79:02:ff:96:
38:86:ca:39:a2:8f:76:fb:3f:1a:f2:0f:2a:2a:48:d3:84:7a:
2f:42:4b:cb:05:73:7a:1b:93:b0:99:35:c0:f5:fa:a7:90:2b:
8c:47:01:d5:87:db:1f:ad:7a:0b:08:74:2d:68:ce:ce:44:d9:
26:8c:e9:dd:c4:29:f6:c5:46:be:b7:cb:46:9d:00:e2:a0:70:
80:30:2f:7e:31:ed:28:c4:ae:55:c9:55:0e:97:04:ab:fa:fc:
f3:bd:0a:32:d6:c7:90:bc:d1:f3:cb:5e:7f:6b:7e:3c:8e:b2:
dc:1a:be:67:3b:3d:02:ee:d0:75:78:39:87:a4:6b:35:fa:98:
74:86:8b:e3:28:d2:9d:37:b5:45:00:cc:5a:3e:b1:a7:a0:73:
0d:44:22:8c:1c:e3:d5:79:82:64:e2:02:e4:f9:a9:77:2c:c2:
c0:2c:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:00 2023 by rpki-client on console.sobornost.net