Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/PD8fBXo1bFDMNgZaTeL9qZjmvps.roa
File: PD8fBXo1bFDMNgZaTeL9qZjmvps.roa (raw, json)
Hash identifier: 2NEbE23mXEt0XeM53WEgtDhh8hJAk8iANszP6OpCkKs=
Subject key identifier: 3C:3F:1F:05:7A:35:6C:50:CC:36:06:5A:4D:E2:FD:A9:98:E6:BE:9B
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 018BCD86FC85510D79C50E7AB36A624B514E
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/PD8fBXo1bFDMNgZaTeL9qZjmvps.roa
Signing time: Tue 14 Nov 2023 11:10:57 +0000
ROA not before: Tue 14 Nov 2023 11:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 185.238.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:86:fc:85:51:0d:79:c5:0e:7a:b3:6a:62:4b:51:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Nov 14 11:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3f1f057a356c50cc36065a4de2fda998e6be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:13:3d:cf:fc:d1:b5:c4:84:ab:b5:18:16:
17:ee:0c:5c:91:aa:d5:28:63:5d:ca:c5:3a:42:20:
d6:e3:80:84:9f:42:6f:5f:5c:7f:ff:02:51:99:6f:
87:6e:cd:32:86:19:34:42:60:fb:35:03:aa:3b:31:
ee:5c:37:4d:79:c5:cf:ce:4c:2d:bb:29:f7:03:38:
bb:a7:11:6a:63:a8:18:13:af:77:c8:83:72:4c:0a:
b0:bd:b4:8b:08:59:2a:02:0e:59:63:24:1c:fc:13:
89:98:c7:3a:c0:44:8b:c4:bc:de:db:38:bf:b0:87:
16:0b:e2:1e:a2:1d:77:0a:d7:3e:1a:91:78:46:2b:
9a:5a:0e:79:d5:98:af:6f:16:93:63:12:7d:3c:ea:
8e:56:31:2f:52:80:a2:91:d2:0e:15:fb:07:a6:08:
e1:85:68:21:14:10:72:b9:f8:b7:21:dd:d1:e5:5c:
4c:fd:27:d8:20:6f:12:df:08:2b:44:55:8b:33:82:
71:41:17:2c:28:8d:76:fa:47:0d:57:6a:0b:16:ce:
8c:14:16:f7:1e:44:79:0a:9f:1e:d9:ea:1a:14:cf:
86:27:ab:47:fb:97:25:a2:f7:c2:f4:30:8c:8c:53:
62:f5:f2:92:eb:20:8c:48:17:35:63:5e:9a:25:7b:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3F:1F:05:7A:35:6C:50:CC:36:06:5A:4D:E2:FD:A9:98:E6:BE:9B
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/PD8fBXo1bFDMNgZaTeL9qZjmvps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d0:c0:e2:18:2c:4c:fb:52:36:91:59:24:9f:f4:01:0b:4f:
87:a4:e7:a3:27:1b:11:58:76:37:f8:3c:f4:f3:5b:3f:79:1a:
11:93:49:15:85:3c:ff:34:65:49:09:17:49:cd:cc:25:4a:98:
97:d5:a9:f2:ae:99:e1:08:91:3c:8a:75:f4:52:4b:d3:d5:2e:
f2:ef:93:e8:a4:4a:84:4f:0c:27:20:d4:58:dd:81:34:04:8f:
c6:9d:f0:e2:6c:63:79:83:9b:54:35:6a:7d:35:88:95:99:15:
d6:a3:f2:cc:d3:b5:64:49:ed:27:06:1b:f3:74:97:4c:56:4a:
51:11:0c:f2:d1:be:e9:f9:01:0c:9a:70:b2:e6:85:5c:38:c2:
35:5c:3e:a8:c7:5c:c1:85:82:ae:83:42:31:e6:e2:17:ca:f0:
71:0b:f7:58:c2:22:90:0a:1b:38:7b:64:be:84:7f:b5:27:5b:
10:4b:63:39:e6:38:d6:1e:87:00:22:e9:7f:53:54:a9:a7:fa:
49:cd:19:03:0b:b6:b3:99:eb:ca:18:e0:5b:70:cb:52:ed:61:
32:36:65:14:f1:9f:8e:2a:02:93:94:a0:66:13:8f:3b:fa:b6:
9d:56:45:6a:38:b5:2a:0a:3f:5b:22:53:5f:45:a5:06:81:3c:
22:d5:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net