Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/Gi-eQdYqKUIAluuk8Zs893XAXxI.roa
File: Gi-eQdYqKUIAluuk8Zs893XAXxI.roa (raw, json)
Hash identifier: /KJ0tMqykwuvYXQfv73eqZSs/GjngOLMwbzTJ88ZJfc=
Subject key identifier: 1A:2F:9E:41:D6:2A:29:42:00:96:EB:A4:F1:9B:3C:F7:75:C0:5F:12
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 01856BB7DA115B20F0D90E73309D592D2EBD
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/Gi-eQdYqKUIAluuk8Zs893XAXxI.roa
Signing time: Sun 01 Jan 2023 05:04:49 +0000
ROA not before: Sun 01 Jan 2023 05:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18434
IP address blocks: 185.41.233.0/24 maxlen: 24
185.41.232.0/24 maxlen: 24
185.41.234.0/24 maxlen: 24
185.41.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:da:11:5b:20:f0:d9:0e:73:30:9d:59:2d:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jan 1 05:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a2f9e41d62a29420096eba4f19b3cf775c05f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:6e:65:85:8c:23:38:90:3b:4c:68:ea:20:
a8:be:28:7b:f3:b4:97:d5:66:97:76:cb:de:a7:8a:
49:65:0a:ba:ef:a5:58:71:10:b8:c5:38:55:c5:85:
cc:3a:58:6f:9c:54:02:d7:39:1f:d0:7f:79:12:1f:
ae:35:7a:a4:55:35:f7:be:20:3e:fc:c8:9e:09:93:
44:ba:2b:3c:07:04:b6:b8:ff:c5:e2:1d:cb:e0:66:
5f:dd:e9:4a:56:03:56:4d:d2:6b:9b:fe:60:13:32:
55:d7:41:48:01:99:b1:a6:30:b7:4a:82:68:ff:0c:
03:d9:01:73:72:bf:2e:db:0e:88:9d:47:e1:06:b7:
05:a9:38:f1:7e:e5:5a:b5:68:0c:92:22:71:52:b2:
cc:0d:8e:c2:9e:c8:34:11:2d:68:61:e7:a5:a7:ea:
fd:d4:a1:dc:3c:1b:4d:b5:e3:15:c0:f6:0c:17:e2:
3f:d7:34:6a:69:9b:3e:16:f5:0b:9e:96:d3:7f:23:
0b:3c:54:2d:ea:88:0d:a5:da:aa:92:44:91:16:34:
84:49:28:31:ac:a3:13:57:d6:da:1e:e0:9b:4e:86:
10:d1:04:40:4d:f5:e7:54:c5:fc:fd:ad:e0:5d:53:
88:92:64:1d:4a:03:ad:5b:0d:1a:19:82:3b:59:5f:
f7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:9E:41:D6:2A:29:42:00:96:EB:A4:F1:9B:3C:F7:75:C0:5F:12
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/Gi-eQdYqKUIAluuk8Zs893XAXxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.232.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:56:b0:e9:1f:8b:c3:94:ff:8a:10:13:e8:15:24:67:06:cf:
c6:19:d1:40:80:43:52:75:c7:65:1c:51:fa:d2:f4:61:1d:54:
17:9d:e0:c0:61:84:23:af:d3:60:9c:ae:b4:2b:8b:89:3d:5b:
98:8e:e7:47:41:e6:78:04:b7:26:2f:0d:1c:d3:9f:8f:94:cd:
fd:8c:7f:a2:b0:ae:8c:2b:02:de:d1:6b:c9:06:d7:65:26:2f:
d5:48:76:70:12:a3:53:2c:65:86:dd:ee:79:de:fa:ff:6d:b6:
3c:81:18:ab:7c:cd:b0:26:e5:4c:1a:60:c5:9a:14:f7:8f:c6:
2a:bf:a3:b9:b5:af:e7:92:fa:0c:58:e2:ea:5e:76:79:a5:74:
45:5f:f0:87:a3:17:ba:84:b2:0f:7d:31:72:a4:88:75:17:5a:
9b:65:e3:c8:bd:85:38:51:dc:4d:1a:65:0c:15:d6:52:ae:c7:
96:5e:4c:91:e2:b1:8f:6e:2e:2f:85:0d:e6:0b:05:97:a2:8f:
f6:dd:7f:9b:d2:90:92:80:d5:85:e0:d0:e6:7d:0a:d9:90:77:
a1:73:af:5a:a2:ab:99:59:b7:df:6e:bf:72:41:90:a7:0f:32:
5c:2e:99:88:59:16:10:d2:0d:ad:94:99:c5:18:a0:62:cc:83:
ff:99:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net