Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/81wJ4MlTUnI2NzcmBymgRSCyCe4.roa
File: 81wJ4MlTUnI2NzcmBymgRSCyCe4.roa (raw, json)
Hash identifier: pSSrk1J5Pi67dua1NJd5gray70Qtc6PAAC4gbm6fuqs=
Subject key identifier: F3:5C:09:E0:C9:53:52:72:36:37:37:26:07:29:A0:45:20:B2:09:EE
Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial: 0185711E83375D29AF9EB182601E55AAD4B2
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/81wJ4MlTUnI2NzcmBymgRSCyCe4.roa
Signing time: Mon 02 Jan 2023 06:15:03 +0000
ROA not before: Mon 02 Jan 2023 06:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48797
IP address blocks: 185.130.16.0/22 maxlen: 22
95.128.232.0/22 maxlen: 22
95.128.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:83:37:5d:29:af:9e:b1:82:60:1e:55:aa:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Validity
Not Before: Jan 2 06:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f35c09e0c9535272363737260729a04520b209ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e4:a7:95:e5:16:5d:34:36:6a:87:c7:ec:51:
5f:b8:01:df:28:64:1e:93:17:42:5e:fc:9f:50:9e:
b5:94:84:4d:19:43:e6:31:e6:4d:fb:d4:bd:aa:61:
c3:4b:fb:04:ec:10:6d:02:4e:47:b1:59:db:85:c5:
55:d9:73:1d:0b:49:d6:a2:09:a8:3b:4d:f3:52:c6:
78:39:94:e8:e5:8f:c1:83:82:ed:7b:c5:45:09:8c:
8b:e5:c5:75:23:0a:95:3e:b0:39:0f:c8:3d:cb:0e:
ff:2c:2e:de:da:df:27:9e:a5:f2:29:15:61:6c:c7:
73:7f:a9:fd:c5:50:c7:19:e2:5c:76:01:61:9f:55:
f8:23:de:01:6c:08:f5:52:bf:04:c9:26:6b:84:ea:
6f:53:cc:02:b1:81:94:fe:6a:03:8d:2e:be:33:fd:
95:4e:4e:30:9d:df:a2:0b:e6:aa:43:6a:c3:7c:2d:
1a:8e:93:0c:d7:87:35:67:67:d1:5c:c1:97:c4:32:
9d:55:5b:03:17:b7:1f:6a:44:6d:be:dd:ce:21:d6:
a6:c1:c0:f5:69:39:c9:c8:d6:eb:f2:d4:b3:50:79:
9a:24:79:1c:95:1b:82:cd:46:2c:d3:17:f6:68:0e:
1b:7e:3e:a3:3d:b6:8a:af:d8:d7:3f:8d:55:67:48:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:09:E0:C9:53:52:72:36:37:37:26:07:29:A0:45:20:B2:09:EE
X509v3 Authority Key Identifier:
keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/81wJ4MlTUnI2NzcmBymgRSCyCe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.232.0/21
185.130.16.0/22
Signature Algorithm: sha256WithRSAEncryption
02:17:20:f4:ff:c8:14:31:81:b8:70:c7:32:5a:fb:d8:49:04:
cd:c4:77:42:d7:54:17:38:49:7c:aa:f7:27:f8:9e:6d:31:b6:
93:ca:79:87:dd:dd:bb:50:ce:57:97:c4:b7:8d:25:61:4f:a9:
a1:e8:b4:de:34:a8:24:b0:2f:cb:60:7d:53:a8:51:73:49:5f:
e3:8e:56:f6:57:ca:74:0d:a1:0b:c7:31:f4:65:6e:27:a2:66:
56:b7:3a:16:f4:06:67:4e:c2:9f:c3:c2:a3:7f:d2:bb:22:da:
02:92:c9:29:e3:28:08:fb:cf:0c:bc:7a:fe:5a:15:e4:ee:02:
02:0e:0b:d0:51:b4:86:eb:bc:fb:74:d4:ca:11:23:76:f6:ea:
71:7d:42:e2:1c:6c:ec:4f:30:38:cf:a2:d4:85:26:e4:a0:f3:
57:b0:4b:52:78:0e:59:88:4f:d3:25:eb:e4:3e:c7:52:76:43:
32:05:12:30:51:84:3f:2f:6b:b9:49:84:2e:60:ca:7a:d6:c1:
c9:12:38:5c:25:86:72:2a:ae:ce:55:c2:d2:6d:d7:d5:7c:17:
4c:7d:4b:75:6f:bc:24:0a:19:dd:9f:81:8c:fd:06:83:d4:16:
58:98:06:f8:bb:83:2e:e9:c6:5e:91:84:c1:98:11:95:00:06:
43:f2:f4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:37:11 2024 by rpki-client on console.sobornost.net