Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/LopuOPxdKkCp4b-D3o3MEy5Dx8Y.roa
File: LopuOPxdKkCp4b-D3o3MEy5Dx8Y.roa (raw, json)
Hash identifier: Dj00Shy5+9eDjm1rL2VhVXu7jqLYjzgGdy8eGwQB0ek=
Subject key identifier: 2E:8A:6E:38:FC:5D:2A:40:A9:E1:BF:83:DE:8D:CC:13:2E:43:C7:C6
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0185704BB7CE99D41078512EBC5BEED0C9FF
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/LopuOPxdKkCp4b-D3o3MEy5Dx8Y.roa
Signing time: Mon 02 Jan 2023 02:24:48 +0000
ROA not before: Mon 02 Jan 2023 02:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211559
IP address blocks: 31.11.48.0/21 maxlen: 21
80.76.166.0/24 maxlen: 24
80.76.165.0/24 maxlen: 24
80.76.167.0/24 maxlen: 24
80.76.168.0/23 maxlen: 23
80.76.166.0/23 maxlen: 23
37.186.60.0/22 maxlen: 22
37.186.60.0/24 maxlen: 24
212.70.104.0/24 maxlen: 24
212.70.105.0/24 maxlen: 24
212.70.101.0/24 maxlen: 24
212.70.100.0/24 maxlen: 24
212.70.103.0/24 maxlen: 24
212.70.102.0/24 maxlen: 24
103.14.208.0/22 maxlen: 22
212.70.123.0/24 maxlen: 24
212.70.120.0/24 maxlen: 24
212.70.124.0/24 maxlen: 24
185.247.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b7:ce:99:d4:10:78:51:2e:bc:5b:ee:d0:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 2 02:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e8a6e38fc5d2a40a9e1bf83de8dcc132e43c7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:96:e2:01:a3:ef:6e:fc:7e:18:be:df:3e:
d8:44:6d:d0:d7:34:8b:ba:04:dd:79:fc:f3:ad:b5:
e6:74:2b:34:58:f2:56:3d:20:5f:88:2b:77:2d:25:
25:3e:c9:82:da:d4:e3:81:2a:cb:5e:8e:fa:b8:d0:
38:36:4e:d8:3b:9a:40:47:ce:47:94:25:a8:79:ea:
65:0f:42:3a:60:61:3a:b2:b6:0a:9e:a8:b3:9d:d4:
52:bc:81:cb:21:45:62:34:a8:55:fb:67:15:46:55:
42:37:58:a7:93:f4:a1:93:a8:1a:ba:87:9e:76:3f:
21:20:16:5d:d3:6f:d5:cb:0b:43:82:9c:47:58:8e:
bf:c2:6f:f9:1c:04:8b:f2:76:e4:6d:c7:1b:dd:c5:
45:5e:00:18:58:c2:08:c8:a8:30:88:40:17:93:b4:
cc:d0:46:5a:5a:05:87:4c:e2:e8:0b:8f:1f:f4:c3:
9d:08:4c:1a:be:47:1c:f7:b5:cf:d6:68:1a:13:d4:
dd:5f:b8:80:50:fb:4e:e1:ce:c7:f8:9f:f8:f1:e5:
89:60:02:0e:38:5c:e2:c9:e6:8a:fb:8f:9c:b5:ae:
64:3e:a7:df:a8:37:ec:b6:ba:51:8b:ba:7a:4a:5c:
a3:a4:d9:b9:40:a9:c4:25:68:f5:8f:13:8a:16:4e:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8A:6E:38:FC:5D:2A:40:A9:E1:BF:83:DE:8D:CC:13:2E:43:C7:C6
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/LopuOPxdKkCp4b-D3o3MEy5Dx8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.48.0/21
37.186.60.0/22
80.76.165.0-80.76.169.255
103.14.208.0/22
185.247.88.0/22
212.70.100.0-212.70.105.255
212.70.120.0/24
212.70.123.0-212.70.124.255
Signature Algorithm: sha256WithRSAEncryption
a8:f2:b0:51:fa:74:51:11:5e:89:af:23:74:00:70:00:ba:ce:
1a:49:0a:03:4b:35:12:1a:ba:b7:32:68:1d:9a:86:84:a6:ce:
90:17:28:3e:68:c4:58:51:8e:89:0c:f3:85:1a:15:93:86:22:
4b:ae:04:8a:be:a2:f5:fb:af:0b:c7:94:88:27:92:3e:d1:84:
8f:0e:cf:ab:ee:5e:a3:44:cd:21:f0:88:1e:36:56:68:e9:0f:
78:8e:8c:25:18:eb:e6:49:5b:38:e4:4a:c5:8c:79:d0:06:f1:
00:2b:2e:ae:d3:5b:ea:f2:18:49:f5:05:89:f5:b9:02:b0:39:
6c:3d:02:dc:a2:42:50:c5:30:cd:2e:3a:f4:8b:a0:b5:93:12:
c5:5e:ff:d1:a4:87:fa:ff:49:6f:25:f3:05:7c:60:f9:f6:c5:
2c:3b:ab:c8:32:9d:b0:d7:8e:8e:0a:c0:af:a7:8d:bb:28:47:
18:34:c7:d8:bb:d8:0c:24:40:e1:64:eb:a2:ff:74:76:56:5e:
a6:90:e5:6d:5a:b1:b7:af:d2:d3:ef:f9:2c:52:9e:08:94:d9:
81:26:8c:33:01:0c:8c:52:c6:5a:c8:fc:8d:ed:f6:19:bd:91:
0a:bd:5c:57:27:be:72:13:80:f8:4f:f0:85:74:4f:55:d9:27:
29:e6:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:16 2023 by rpki-client on console.sobornost.net