Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/m6cUgSOlg7cnMwbXmQGfGLz2_C8.roa
File: m6cUgSOlg7cnMwbXmQGfGLz2_C8.roa (raw, json)
Hash identifier: JLkibRhuW1lY6b+uACfW37WpVKJm4qA8LfXKsynpE9c=
Subject key identifier: 9B:A7:14:81:23:A5:83:B7:27:33:06:D7:99:01:9F:18:BC:F6:FC:2F
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01856C9CAF09B578DFA04975C16726E62D43
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/m6cUgSOlg7cnMwbXmQGfGLz2_C8.roa
Signing time: Sun 01 Jan 2023 09:14:45 +0000
ROA not before: Sun 01 Jan 2023 09:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200818
IP address blocks: 185.95.52.0/24 maxlen: 24
185.95.53.0/24 maxlen: 24
185.95.54.0/24 maxlen: 24
185.95.55.0/24 maxlen: 24
185.95.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:af:09:b5:78:df:a0:49:75:c1:67:26:e6:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jan 1 09:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba7148123a583b7273306d799019f18bcf6fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:03:74:80:82:77:7c:4f:93:5f:2e:8b:64:d5:
64:20:66:03:f0:0e:9e:e9:d0:f6:82:da:57:6e:cd:
61:68:d2:8c:ed:ab:8f:01:31:85:20:3f:d7:20:31:
63:df:3f:35:b6:0e:83:87:c3:d8:19:3b:03:49:f1:
8a:41:00:f6:39:b3:96:b1:d1:07:fb:f4:2f:5d:ff:
28:30:3f:86:2e:3f:c0:ac:7d:be:02:c7:8d:b5:31:
a4:4b:5f:e7:a1:49:1a:d0:fc:81:ea:71:77:a7:7f:
4f:2b:9d:f6:cc:b9:f4:cf:37:2d:a5:91:3a:c2:3d:
fa:1c:87:cb:51:4d:f2:cb:7b:63:51:5e:4a:e4:80:
c8:c8:68:b9:42:82:fc:f6:8e:ac:73:0c:98:1b:ac:
3d:f6:9b:0e:af:90:f7:70:8b:83:1d:7d:36:18:c4:
a6:16:48:2f:c6:b0:24:37:ed:1e:d3:0b:5e:fa:ea:
7d:8b:49:b2:46:0d:84:d3:71:9d:01:bf:29:68:91:
35:fb:8e:08:fa:9b:28:77:91:bf:8a:30:d3:b7:c7:
ff:71:96:78:fa:8f:b4:33:08:ed:b7:4b:09:39:2f:
f2:14:4c:86:ff:c4:e9:ca:69:cf:84:3a:b1:c2:5e:
a0:b8:5a:c1:b3:4c:d9:e3:4d:85:78:0b:2e:2e:12:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:14:81:23:A5:83:B7:27:33:06:D7:99:01:9F:18:BC:F6:FC:2F
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/m6cUgSOlg7cnMwbXmQGfGLz2_C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.52.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:24:2e:c8:10:c1:1f:42:c2:63:d5:cd:74:a6:c1:f4:dd:97:
22:88:b3:fd:90:63:d8:ea:b9:2b:6f:d9:c1:b7:0b:93:da:28:
cd:fc:07:4b:07:0a:4a:d1:51:3d:e0:bb:02:96:e0:43:39:c1:
f1:8c:12:8b:56:e0:f9:94:0c:e3:6a:21:49:ec:3d:46:d8:6d:
0a:28:d8:08:0b:dd:3c:cd:f2:75:1c:66:a3:0e:6e:eb:fb:3e:
49:82:df:cb:cd:60:9f:39:d4:b7:2c:ec:95:eb:c6:dd:55:8c:
f9:ca:1d:f6:86:e1:df:80:99:b9:2a:36:ea:a0:c2:c2:47:c1:
24:32:11:23:ca:61:17:bb:84:85:ab:6a:85:cb:e1:01:5f:e1:
61:9e:04:87:d7:f1:cf:d3:73:5a:db:7a:75:6c:15:2a:85:9b:
d4:eb:95:46:62:43:9e:18:f2:81:68:6b:84:1a:f4:21:dc:ac:
65:43:60:f2:9a:ef:c6:3b:d5:ac:ae:ef:45:b7:e5:3a:b2:92:
25:ca:7c:fe:7c:3a:09:10:d5:c9:dc:f8:a8:68:0c:4d:d2:4a:
08:c7:36:0f:16:6d:38:f3:82:44:e4:98:fc:61:aa:87:2f:8b:
32:d9:ce:92:a9:47:48:a6:88:74:4c:be:63:96:36:47:e0:39:
da:8e:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net