Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/gMGkHLdofuhhFaRyTMwwZz018Wk.roa
File: gMGkHLdofuhhFaRyTMwwZz018Wk.roa (raw, json)
Hash identifier: M/79hXr5YAlgvyddwbiJXagK4SjDXVnWYhwybOShMCA=
Subject key identifier: 80:C1:A4:1C:B7:68:7E:E8:61:15:A4:72:4C:CC:30:67:3D:35:F1:69
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 01856F26DC4849BAFBBFFEC5C2C58F2D1635
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/gMGkHLdofuhhFaRyTMwwZz018Wk.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57752
IP address blocks: 185.54.36.0/22 maxlen: 22
109.205.64.0/21 maxlen: 21
2a03:dc00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:dc:48:49:ba:fb:bf:fe:c5:c2:c5:8f:2d:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80c1a41cb7687ee86115a4724ccc30673d35f169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:ea:a1:69:2a:51:a1:ab:de:45:88:6f:60:
99:88:2f:7a:38:1d:e6:45:dd:ac:2d:2d:61:a9:fc:
a1:6b:37:43:73:36:8a:57:a9:a9:84:1d:a2:24:0c:
00:bb:72:bf:e2:fa:ec:2c:6b:e8:93:b2:0a:16:4e:
95:0b:95:be:a7:6e:64:f4:bb:5d:da:a3:4f:89:69:
70:d0:9b:b7:e0:81:71:e0:dd:a5:d2:07:57:ef:46:
73:14:34:bb:03:4d:34:1d:e3:60:92:62:cb:25:05:
0c:c2:bc:1d:76:ad:30:3e:2d:3e:e3:f7:86:62:3c:
30:5d:70:fd:ed:1b:ee:8c:7c:17:55:94:b0:ae:52:
0a:f7:f2:93:16:59:ff:0f:6c:d4:d9:db:27:ea:fb:
61:8c:b2:72:77:6d:1c:14:78:85:ac:0f:19:03:20:
ec:da:64:4d:80:be:78:a2:ed:7a:02:70:e0:9e:a7:
ca:7d:bf:a1:6a:56:84:b4:60:1b:6d:e0:13:0b:49:
2a:0f:cf:e4:83:72:94:31:55:5d:f5:1f:f9:a3:ff:
fa:46:8a:1a:82:d9:94:d2:9b:a7:0e:24:59:55:05:
58:06:eb:cf:e8:a5:76:14:b5:37:03:45:3a:38:a0:
9e:fe:19:94:24:f4:18:bd:37:97:dd:9c:b6:a6:82:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C1:A4:1C:B7:68:7E:E8:61:15:A4:72:4C:CC:30:67:3D:35:F1:69
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/gMGkHLdofuhhFaRyTMwwZz018Wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.64.0/21
185.54.36.0/22
IPv6:
2a03:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
70:6f:b1:84:b4:bd:75:13:88:d2:e4:d6:8d:3b:23:24:03:85:
62:ae:b9:6e:d1:42:b7:84:92:7e:68:ce:5f:19:bd:b9:4e:55:
a9:af:8b:3b:29:14:b8:b1:67:24:e4:42:8e:35:bd:59:24:48:
15:03:93:49:a3:e2:f6:fc:3e:29:14:3d:05:d4:76:f2:c8:33:
8b:41:0b:f5:32:9a:b6:55:45:3b:5a:d6:eb:be:80:16:17:82:
14:a3:d6:a7:8f:4c:fb:62:c3:b5:6e:d1:ea:8c:7e:23:48:7b:
4b:92:8c:bb:66:58:92:05:b2:ad:49:65:13:5c:f6:87:d3:52:
45:ed:60:73:04:17:10:bd:6e:96:f2:18:f3:88:ac:19:42:82:
0c:ed:6f:f2:23:f2:be:38:8a:44:99:46:fe:15:74:cc:eb:5b:
66:da:91:3d:b3:81:cc:94:09:cd:bf:b2:56:df:81:5d:01:db:
ec:f7:c5:7f:81:48:2b:aa:c4:23:d5:13:b4:89:b8:5f:b0:3a:
74:dc:d7:95:56:43:eb:85:1b:62:f9:9a:70:57:10:83:43:0d:
3b:70:20:8f:17:23:19:f8:0a:f1:32:e4:f1:46:68:85:d9:dd:
7f:b7:d2:72:dc:27:99:4b:9a:4b:4e:1d:ef:83:84:07:76:07:
06:5d:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net