Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/K07HCWEMUQetldD0OSeuK6TKmyk.roa
File: K07HCWEMUQetldD0OSeuK6TKmyk.roa (raw, json)
Hash identifier: XpGtxIt0nlziARVHPrM8oKH5h9cn9l7FNdFnN7R3EJ0=
Subject key identifier: 2B:4E:C7:09:61:0C:51:07:AD:95:D0:F4:39:27:AE:2B:A4:CA:9B:29
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 018C5D5BCD291E7F5A08BD616EC55B3AF657
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/K07HCWEMUQetldD0OSeuK6TKmyk.roa
Signing time: Tue 12 Dec 2023 09:29:06 +0000
ROA not before: Tue 12 Dec 2023 09:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34704
IP address blocks: 37.208.53.0/24 maxlen: 24
37.208.52.0/24 maxlen: 24
37.208.55.0/24 maxlen: 24
37.208.54.0/24 maxlen: 24
37.208.51.0/24 maxlen: 24
37.208.50.0/24 maxlen: 24
37.208.49.0/24 maxlen: 24
37.208.48.0/24 maxlen: 24
93.174.37.0/24 maxlen: 24
93.174.36.0/24 maxlen: 24
93.174.35.0/24 maxlen: 24
93.174.34.0/24 maxlen: 24
93.174.33.0/24 maxlen: 24
93.174.32.0/24 maxlen: 24
93.174.39.0/24 maxlen: 24
213.232.82.0/24 maxlen: 24
213.232.81.0/24 maxlen: 24
213.232.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:5b:cd:29:1e:7f:5a:08:bd:61:6e:c5:5b:3a:f6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Dec 12 09:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b4ec709610c5107ad95d0f43927ae2ba4ca9b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:5c:39:85:f7:eb:79:b3:4f:24:20:a2:19:
ca:95:34:78:bd:5a:ab:94:96:ee:12:61:f0:98:9f:
76:87:d0:af:86:91:8b:ca:5c:b6:ba:29:34:01:f5:
77:0e:be:90:db:e0:47:b3:ae:ed:96:34:85:35:42:
46:cb:4b:9e:20:26:06:7d:57:37:0a:a7:c2:c9:d7:
27:cd:36:5b:fe:ab:a5:df:0d:86:95:d4:5b:c5:cf:
bf:36:9c:9d:d8:27:44:f4:97:f7:1c:e6:a7:f5:31:
01:dc:d6:87:2f:44:98:ac:9f:6d:da:65:6f:0e:8e:
37:13:9e:b0:19:3f:db:8c:3a:24:2f:84:48:d5:6a:
5e:1c:aa:f1:03:a9:cd:45:71:13:b5:d2:0f:44:57:
af:37:88:05:9d:47:ed:88:f6:ad:df:87:41:81:71:
3d:6a:36:a2:56:90:89:5f:87:af:0a:2f:0f:e2:8f:
a0:d6:53:f0:42:7f:59:6a:a5:dd:19:99:1c:1f:98:
cc:1e:8a:5f:e2:b3:82:1a:d2:be:9a:66:af:ab:7d:
2f:5d:32:30:9e:e8:53:8f:13:59:c0:48:f7:0b:40:
9d:5d:89:df:7a:18:63:ac:f0:9c:33:21:3e:45:e7:
2c:be:81:e5:76:8a:9e:f6:1d:3c:37:9b:41:da:41:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4E:C7:09:61:0C:51:07:AD:95:D0:F4:39:27:AE:2B:A4:CA:9B:29
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/K07HCWEMUQetldD0OSeuK6TKmyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.48.0/21
93.174.32.0-93.174.37.255
93.174.39.0/24
213.232.80.0-213.232.82.255
Signature Algorithm: sha256WithRSAEncryption
c2:3d:8e:ca:10:e0:3e:70:a8:84:97:27:80:95:bb:20:f7:2d:
4d:b0:da:44:74:7a:53:51:1b:30:1f:0a:62:04:6b:ee:67:db:
cf:af:d9:79:2f:07:d3:88:5f:be:99:ac:34:88:ca:74:13:cd:
a1:a2:2e:f2:f5:b4:6d:7d:b3:a2:a6:b6:88:b9:24:1f:ce:e8:
01:e8:17:71:e1:5c:d8:82:5b:d9:eb:1f:bc:af:a1:f2:e2:85:
c5:a9:74:d2:02:e6:78:60:16:48:24:40:c0:a8:96:ae:0b:bd:
0d:b9:f4:02:81:ab:8a:dd:26:1d:bd:f1:79:e8:74:24:6f:bc:
75:d6:d6:90:3a:e2:8c:21:95:bf:b2:95:31:fe:35:99:c6:f3:
fd:94:98:2b:b5:49:6f:bd:f6:75:b2:3f:18:cf:02:b6:a7:a5:
d5:54:9e:14:e7:d3:94:a1:bf:fd:e0:31:9f:3c:d2:d1:d5:cd:
cd:e0:06:f9:9e:d6:bd:31:a1:84:99:57:1d:8c:cc:6d:78:ac:
1c:23:66:ef:47:d0:85:f1:58:13:1a:96:fb:ba:d1:3a:9f:ed:
6f:e3:7c:6a:18:26:e8:38:eb:8d:99:30:58:42:1e:1f:dd:51:
10:fc:e3:64:b8:44:30:7f:44:11:f2:83:be:f0:a1:67:df:19:
a2:4c:37:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:34 2024 by rpki-client on console.sobornost.net