Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/gfUNWBnmtuNIy3ZvzxAEZsvBy0A.roa
File: gfUNWBnmtuNIy3ZvzxAEZsvBy0A.roa (raw, json)
Hash identifier: e5oo1ILysdOnMD7HNzqcrw5oGJNBygwIU282pk8hLW4=
Subject key identifier: 81:F5:0D:58:19:E6:B6:E3:48:CB:76:6F:CF:10:04:66:CB:C1:CB:40
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 01891FF0ED7BEBA5118DF285D1CB62796B77
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/gfUNWBnmtuNIy3ZvzxAEZsvBy0A.roa
Signing time: Tue 04 Jul 2023 08:07:10 +0000
ROA not before: Tue 04 Jul 2023 08:07:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.206.56.0/24 maxlen: 24
178.159.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:f0:ed:7b:eb:a5:11:8d:f2:85:d1:cb:62:79:6b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jul 4 08:07:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f50d5819e6b6e348cb766fcf100466cbc1cb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:e0:0a:6f:5d:f4:72:f5:48:8c:cf:93:2e:
f0:91:61:1c:67:3e:ce:4d:0b:18:4a:17:1e:24:2f:
37:49:57:c2:7b:b3:7b:19:48:76:14:06:fb:e3:2a:
f6:b1:9a:d4:f5:4d:3c:31:e8:37:e4:aa:32:01:c7:
84:99:d3:6f:10:12:cd:e0:e2:17:0b:29:f6:fc:23:
1d:d8:e2:b8:11:0a:ff:ab:61:f1:36:cb:54:4e:e4:
0f:1a:e8:52:af:33:77:f1:b0:22:76:f9:20:8b:de:
a7:29:63:31:ee:46:90:d0:98:9c:99:ed:8e:2f:db:
99:fb:8e:f7:fc:f2:28:a3:dd:17:5b:22:fb:0f:16:
73:f8:0c:68:33:22:75:b6:20:12:56:14:c1:32:83:
bd:36:12:c2:cd:f7:f1:9e:c9:d2:9b:b1:de:b2:bf:
3c:e3:16:72:c4:12:ae:61:14:11:ae:d3:2f:e7:9f:
0c:62:f1:2f:d1:a8:6a:da:31:a4:8c:9f:2b:c2:20:
8e:73:74:f5:d8:b0:b9:db:74:ee:ce:5d:8f:4e:26:
7a:28:f1:c6:23:70:e2:e7:1d:64:59:d1:50:10:07:
02:59:87:39:92:93:aa:69:d3:46:0d:ca:cd:fc:f4:
86:5a:13:b4:20:43:35:77:aa:52:b7:12:83:42:c0:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:0D:58:19:E6:B6:E3:48:CB:76:6F:CF:10:04:66:CB:C1:CB:40
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/gfUNWBnmtuNIy3ZvzxAEZsvBy0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.65.0/24
185.206.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:08:a1:92:2f:6a:c9:68:2e:db:29:5c:31:69:2f:9c:b7:64:
d5:1e:ad:2d:ce:7e:43:bd:29:29:48:c8:1b:b6:ea:cd:ad:07:
f7:1b:0e:36:04:58:3b:1b:fe:22:e5:f5:57:72:ff:fd:b8:2a:
d3:63:ae:98:b7:1c:f7:5b:85:0e:a6:3c:28:b1:e6:13:73:b9:
88:12:73:b2:fb:95:6c:b8:5c:82:af:a7:0b:5b:a8:5d:f6:02:
46:a6:5d:97:e3:68:6a:cf:f9:5a:a1:50:73:93:0c:17:e8:f8:
24:29:8a:19:d9:c4:83:a8:f1:6e:af:fe:ce:ff:d3:f8:60:cc:
fa:e7:95:29:51:ca:23:92:ca:a8:2c:cb:d3:78:4e:21:ec:6f:
1d:d6:40:39:bb:4d:9e:ab:95:88:84:49:81:9e:87:c2:1f:bc:
cd:ce:a9:aa:60:27:fa:7b:ff:e7:e9:63:b0:ee:9f:4a:c3:63:
5d:f3:89:6a:e5:7c:7c:6d:0d:ac:6d:f3:8c:92:9a:cf:a4:7d:
28:0b:4e:84:38:8e:95:0f:13:ba:11:b2:1d:7e:a6:db:61:e6:
20:22:05:36:33:de:3d:20:aa:5d:f1:b5:85:c9:81:c6:63:6b:
10:61:e8:d5:32:41:72:c7:df:94:36:be:3e:c2:1c:8e:28:f0:
60:46:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:06 2023 by rpki-client on console.sobornost.net