Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/g2QnMNvE5Whw0MjzZl8pBql7oWU.roa
File: g2QnMNvE5Whw0MjzZl8pBql7oWU.roa (raw, json)
Hash identifier: 3e4Lvto53Vz6rBuEF9wlsjzBcKye84Qu9vVuFeO0M30=
Subject key identifier: 83:64:27:30:DB:C4:E5:68:70:D0:C8:F3:66:5F:29:06:A9:7B:A1:65
Certificate issuer: /CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Certificate serial: 01857246D018C3903B4A9C2FEC3535825F95
Authority key identifier: 2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/g2QnMNvE5Whw0MjzZl8pBql7oWU.roa
Signing time: Mon 02 Jan 2023 11:38:41 +0000
ROA not before: Mon 02 Jan 2023 11:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203951
IP address blocks: 185.119.4.0/24 maxlen: 24
185.119.4.0/22 maxlen: 22
185.119.6.0/24 maxlen: 24
185.119.5.0/24 maxlen: 24
185.119.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d0:18:c3:90:3b:4a:9c:2f:ec:35:35:82:5f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4f94e40c99e19a3223a2935d8ec94e3d9270bb
Validity
Not Before: Jan 2 11:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83642730dbc4e56870d0c8f3665f2906a97ba165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:4a:fd:5d:e8:f3:0f:8a:4a:cc:d1:11:d1:
2a:c5:93:16:1e:79:b5:7e:5a:91:af:c2:22:49:52:
3b:8d:dd:64:15:42:00:4e:49:2c:6e:a2:99:35:9b:
0a:1d:e8:9c:25:1e:7f:50:46:77:de:77:ea:3a:91:
fe:e0:56:c1:c5:eb:82:c4:07:11:72:d2:e4:2c:d0:
0c:0d:34:04:4c:25:ba:eb:25:cd:c6:7a:66:56:60:
54:c2:1f:8a:1a:fd:1d:e3:cc:26:22:70:f7:a9:40:
25:fb:6b:ae:e9:05:f0:2f:93:50:3f:3f:04:c8:ba:
2b:b6:48:47:a0:78:bf:65:cd:f3:41:5f:9a:c6:da:
4e:62:3f:b5:7c:a5:22:7b:4d:1e:58:e2:03:70:e7:
72:cd:9d:c1:b9:53:ae:36:42:5b:29:cb:42:6d:51:
68:c9:0f:b6:8f:c5:3f:66:51:52:c6:1b:cc:19:6d:
3a:5c:79:ea:b2:ac:b7:52:1c:9c:57:fb:f4:be:32:
75:63:b3:b8:1d:61:c1:f9:72:f6:69:ba:d0:2f:20:
5a:49:e7:94:0b:48:ed:54:69:e4:cc:0e:9e:df:5c:
7a:8d:30:9f:37:e3:69:0a:80:87:9b:0b:67:48:6b:
68:3e:5c:af:3d:3a:ec:0d:c9:64:ae:f8:52:bd:05:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:27:30:DB:C4:E5:68:70:D0:C8:F3:66:5F:29:06:A9:7B:A1:65
X509v3 Authority Key Identifier:
keyid:2F:4F:94:E4:0C:99:E1:9A:32:23:A2:93:5D:8E:C9:4E:3D:92:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/g2QnMNvE5Whw0MjzZl8pBql7oWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/504a0e-5ca2-4317-a8ad-08e00da40444/1/L0-U5AyZ4ZoyI6KTXY7JTj2ScLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:1a:10:84:5d:6c:6b:a4:7f:7a:1d:81:55:3a:53:30:dd:a8:
30:f6:0d:74:d8:e2:7c:a1:b5:67:0f:36:0f:af:61:4a:aa:f5:
72:bf:fd:f9:38:32:98:0b:52:93:22:56:0a:f0:ed:62:4d:16:
1d:e0:82:88:b1:08:8c:8c:32:7c:ef:07:4f:a1:d4:c8:96:fc:
56:06:81:2b:fe:a1:03:27:2d:ba:62:b0:48:c9:34:c6:85:42:
c1:4d:72:9b:f6:dd:c2:bc:f6:32:f2:5f:98:3d:31:3a:a5:9f:
e2:ce:54:04:49:4e:b6:a4:e9:81:cc:3f:59:67:d2:fe:9a:15:
f0:8f:2f:0a:79:78:67:47:d3:8a:fb:81:b3:3d:e9:92:a6:fc:
7a:74:36:c8:e7:95:ab:53:05:15:32:6d:35:e4:ad:c6:6d:50:
f0:8b:96:06:20:64:48:1e:72:a0:d4:4f:9a:93:f3:d2:90:9a:
6f:b1:2f:56:a4:fc:39:f2:2f:8a:ae:47:ea:61:cb:03:d9:ca:
1b:7d:e9:c9:c4:f4:21:8c:17:43:a1:8d:9e:6c:9f:80:2b:47:
bf:c0:f8:f0:bd:37:68:c1:c1:15:30:b0:d5:73:fd:41:8f:a0:
5d:4a:e1:e0:aa:be:7b:34:09:03:c9:3a:d1:0c:78:81:c5:56:
3e:73:a5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:08 2024 by rpki-client on console.sobornost.net