Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/tx-MAsbKWH90K2tR5WpMMqKyI-Q.roa
File: tx-MAsbKWH90K2tR5WpMMqKyI-Q.roa (raw, json)
Hash identifier: SviK5t4rQX7Elkx4pD0WtNeIEDuRRXsgvRF8j0XnwG8=
Subject key identifier: B7:1F:8C:02:C6:CA:58:7F:74:2B:6B:51:E5:6A:4C:32:A2:B2:23:E4
Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial: 018915A05DD68CF3D8B0AF713C5D68CCD604
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/tx-MAsbKWH90K2tR5WpMMqKyI-Q.roa
Signing time: Sun 02 Jul 2023 08:02:58 +0000
ROA not before: Sun 02 Jul 2023 08:02:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206561
IP address blocks: 185.173.188.0/24 maxlen: 24
185.173.189.0/24 maxlen: 24
185.173.189.128/26 maxlen: 26
185.173.189.0/25 maxlen: 25
2a0f:46c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:15:a0:5d:d6:8c:f3:d8:b0:af:71:3c:5d:68:cc:d6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Validity
Not Before: Jul 2 08:02:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71f8c02c6ca587f742b6b51e56a4c32a2b223e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:4d:78:17:8f:00:1f:72:84:fb:22:97:3d:
c6:1d:a0:0a:1b:f3:59:5a:ae:c8:2d:eb:a3:0f:e1:
fa:43:ef:d2:56:7c:c9:32:28:31:dd:d8:61:7f:ca:
a8:ed:45:01:d9:7f:31:f5:d0:ec:a0:fd:c9:9f:a0:
f5:a1:40:78:fd:95:22:03:b8:39:f7:25:1b:fb:a4:
c9:94:29:da:1c:26:cb:f3:93:fd:17:36:bf:f1:b5:
96:b1:27:cb:3c:b7:09:f5:dc:d0:b9:56:5c:8e:8e:
f0:e6:5f:c3:e7:9a:3d:ca:ec:9a:17:1a:64:4c:2e:
b0:79:29:6d:ff:4b:3e:cb:85:c5:c4:b9:ba:8b:0b:
97:12:bf:98:de:12:de:e4:16:0a:a5:95:ba:e5:33:
e9:44:ff:cb:1e:2f:1a:a0:f1:a7:ad:df:29:64:34:
60:35:b4:02:8e:b3:d5:bd:07:64:b2:38:68:b5:69:
f2:8d:b5:ee:37:6c:57:59:4d:53:84:49:d5:fc:a6:
ef:50:73:3e:fd:56:4d:e9:d3:3a:e0:6c:e0:00:20:
fb:48:11:51:c0:13:f0:d0:5a:ef:82:77:f0:6b:5b:
f7:b1:9d:76:9c:3d:a7:3d:5d:5a:54:53:27:1d:d7:
42:c4:ae:fa:aa:fb:df:72:4c:25:e7:fa:c4:a5:e5:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1F:8C:02:C6:CA:58:7F:74:2B:6B:51:E5:6A:4C:32:A2:B2:23:E4
X509v3 Authority Key Identifier:
keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/tx-MAsbKWH90K2tR5WpMMqKyI-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.188.0/23
IPv6:
2a0f:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:ce:8b:a9:07:da:0c:a6:c8:fd:cd:4b:f7:3d:de:ac:03:0b:
14:03:6a:fb:4c:bb:01:67:77:65:ca:8f:2e:50:19:e6:b5:9f:
c4:16:11:aa:ce:1d:cd:c4:bd:b6:34:ac:f0:59:2e:6f:93:10:
ee:65:b9:78:95:05:ee:f5:59:a6:be:97:20:18:20:6d:1a:45:
8d:30:e3:fb:bb:c6:93:de:4b:b4:9e:48:87:cc:0a:5c:2c:3c:
4a:c7:30:3f:9b:15:f5:7e:ff:b5:cc:c5:ce:cf:93:a2:a7:57:
e4:df:65:30:38:f7:b1:68:bb:6e:67:1b:8e:eb:ee:cf:89:a3:
72:f8:20:31:41:26:d2:a9:20:4a:c7:e2:18:6d:e7:ed:f7:0e:
45:b3:a1:ac:3d:75:03:13:ed:7e:67:78:76:09:6f:cd:87:f8:
b3:45:ab:f3:98:35:6c:a3:90:79:60:d9:71:73:4e:d1:f7:e8:
43:3f:2f:cf:99:f4:df:e6:ea:48:93:7c:d2:30:a3:59:7a:3e:
a1:12:d6:04:34:13:14:ee:bb:7e:c8:be:c5:e0:f0:f8:e8:ad:
5e:a4:56:9d:75:de:be:ac:da:00:be:b2:5a:0d:8a:df:e4:e6:
6e:20:10:58:18:92:a3:93:02:f2:3e:ff:0e:9f:48:d5:00:d2:
2c:eb:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net