Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/_g3qiUZFi1Jtvje1Z-jnGx7zsM8.roa
File: _g3qiUZFi1Jtvje1Z-jnGx7zsM8.roa (raw, json)
Hash identifier: BJmJrs3s7OwM6B4uoVSjW5h3qHMdbDOrGWUGN/gL9fY=
Subject key identifier: FE:0D:EA:89:46:45:8B:52:6D:BE:37:B5:67:E8:E7:1B:1E:F3:B0:CF
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 018B29519AE9176059574313FF8E72DDFF5B
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/_g3qiUZFi1Jtvje1Z-jnGx7zsM8.roa
Signing time: Fri 13 Oct 2023 13:54:55 +0000
ROA not before: Fri 13 Oct 2023 13:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 212.68.164.0/24 maxlen: 24
212.68.165.0/24 maxlen: 24
212.68.166.0/24 maxlen: 24
212.68.172.0/24 maxlen: 24
212.68.167.0/24 maxlen: 24
212.68.178.0/24 maxlen: 24
212.68.177.0/24 maxlen: 24
212.68.179.0/24 maxlen: 24
212.68.174.0/24 maxlen: 24
212.68.173.0/24 maxlen: 24
212.68.176.0/24 maxlen: 24
212.68.175.0/24 maxlen: 24
212.68.184.0/24 maxlen: 24
212.68.186.0/24 maxlen: 24
212.68.185.0/24 maxlen: 24
212.68.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:51:9a:e9:17:60:59:57:43:13:ff:8e:72:dd:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Oct 13 13:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe0dea8946458b526dbe37b567e8e71b1ef3b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:93:1c:a6:94:6c:65:8c:6e:dd:7d:a7:a1:
19:d5:55:54:b5:25:e0:24:2a:1c:48:5e:35:ac:ef:
4d:5b:2d:69:1e:bf:dd:90:ac:4b:62:d9:00:ba:b3:
8a:38:19:b0:cc:5c:a4:ee:e5:df:5d:36:6f:55:ac:
11:d4:39:a8:47:ed:39:d6:ec:1c:59:cc:af:bb:41:
d2:ae:25:1b:de:0b:18:bd:82:ad:1d:af:7f:14:ce:
e2:21:0c:5a:cb:cf:a9:73:a0:5c:92:eb:1e:f4:1b:
de:89:4d:b7:69:48:93:d3:bf:2c:16:35:c2:d2:4c:
8c:ba:59:80:46:e1:a2:22:0c:c8:ac:a0:e7:0b:bf:
7e:1a:c6:2c:73:d0:7b:5a:a4:d7:ea:f2:6e:a2:7f:
29:c2:04:1c:76:1d:eb:6d:c6:7e:97:9e:53:82:9f:
64:de:33:3d:87:28:44:e1:df:57:7b:49:58:31:bc:
ca:a0:9a:06:70:7b:2c:7b:ee:ca:c5:e4:36:bf:9c:
b2:88:f1:c5:08:8e:93:62:f2:ca:5c:27:2f:dc:59:
6f:81:ae:25:d9:b5:23:f4:bb:a9:bf:89:8c:bd:2d:
8a:e5:f5:31:82:7f:2a:46:24:b7:d6:59:2f:15:0c:
23:85:72:24:c9:12:81:36:ba:9d:18:e9:06:d6:8c:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:EA:89:46:45:8B:52:6D:BE:37:B5:67:E8:E7:1B:1E:F3:B0:CF
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/_g3qiUZFi1Jtvje1Z-jnGx7zsM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.164.0/22
212.68.172.0-212.68.179.255
212.68.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:4d:3c:75:42:d6:9c:60:54:e6:8a:96:e4:12:ac:03:8c:3d:
c1:09:fa:52:d7:4e:0a:12:d2:c1:b6:fd:ec:5a:b5:33:6b:14:
47:55:5b:5d:74:50:15:a0:2e:c1:00:2e:0c:5c:23:0e:22:54:
06:c4:29:89:b0:d5:0f:99:73:17:5d:ef:bd:e0:37:0c:22:58:
8d:8c:31:91:86:77:69:e7:cf:00:fb:2a:d4:f2:93:ee:40:15:
79:6a:05:bc:35:61:1c:09:ed:86:57:10:00:91:5f:d4:2f:7e:
e6:d2:69:a7:03:ca:de:c9:ad:79:c0:ce:c3:95:5a:ac:fe:67:
26:db:26:94:03:89:34:72:18:a2:62:bd:ca:a0:b2:9a:b4:b8:
50:ae:00:61:46:1b:f2:5b:1d:c4:0c:53:bb:61:30:24:16:1d:
fd:40:c1:c8:44:56:05:81:bc:ca:f1:ad:fc:e3:b7:9a:b2:cf:
cb:b0:22:02:ac:d4:b1:d2:4c:12:4c:ce:b5:dd:e6:ab:4d:72:
ba:c7:78:82:12:23:24:af:ef:71:9b:8a:30:5e:12:8f:3e:37:
a4:be:e4:42:5a:ca:fd:7c:28:d6:d7:c1:79:bd:b6:7a:ae:15:
ef:37:1a:de:de:bc:7f:dd:7b:4a:5c:cb:04:6e:27:91:45:a0:
3a:ea:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net