Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/KipvHXEMxUi_-uC23BiZhp8Oeqs.roa
File: KipvHXEMxUi_-uC23BiZhp8Oeqs.roa (raw, json)
Hash identifier: eH2eZLZedC25reucTCcRebJZW8+ODd1scDRLBeoPGdM=
Subject key identifier: 2A:2A:6F:1D:71:0C:C5:48:BF:FA:E0:B6:DC:18:99:86:9F:0E:7A:AB
Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial: 0189072DEE7EDDC36C69C9CEFC974ECB2353
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/KipvHXEMxUi_-uC23BiZhp8Oeqs.roa
Signing time: Thu 29 Jun 2023 12:43:17 +0000
ROA not before: Thu 29 Jun 2023 12:43:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198279
IP address blocks: 37.26.85.0/24 maxlen: 24
37.26.80.0/21 maxlen: 21
37.26.82.0/24 maxlen: 24
37.26.84.0/24 maxlen: 24
37.26.83.0/24 maxlen: 24
37.26.86.0/24 maxlen: 24
37.26.87.0/24 maxlen: 24
185.89.156.0/24 maxlen: 24
185.89.156.0/22 maxlen: 22
185.89.157.0/24 maxlen: 24
185.89.159.0/24 maxlen: 24
185.89.158.0/24 maxlen: 24
2a00:4940::/32 maxlen: 32
2a00:4940::/29 maxlen: 32
2a00:4940::/48 maxlen: 48
2a00:4940:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:2d:ee:7e:dd:c3:6c:69:c9:ce:fc:97:4e:cb:23:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Validity
Not Before: Jun 29 12:43:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a2a6f1d710cc548bffae0b6dc1899869f0e7aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:8a:14:74:24:fb:dc:70:38:2f:59:d0:75:
d8:bb:9c:5e:c6:87:d1:a2:54:53:ec:fb:1a:38:7a:
69:25:c3:9e:6d:e8:1d:53:ed:19:52:cd:d0:58:18:
96:b0:87:74:ed:2d:ba:17:02:f7:68:d0:b5:4c:03:
88:d3:a0:04:ac:80:4b:1f:c5:c6:be:42:55:03:6e:
b6:eb:d8:8b:4e:e5:5c:85:93:48:dc:4f:23:3b:68:
1f:28:b0:48:39:9d:d2:21:ce:5d:7d:79:35:e7:bc:
89:18:86:77:36:6b:fc:ce:09:e1:45:d8:95:bb:06:
9d:ae:a1:cf:de:51:8f:c7:d2:c0:58:4b:75:2a:7c:
bb:b0:24:5f:93:4c:34:39:0a:0f:43:76:ce:b2:a2:
25:35:28:bf:e4:f2:ae:31:02:85:c9:1f:ce:33:68:
7d:1c:3c:22:c6:9d:f0:3d:67:51:ef:48:77:02:a9:
90:78:1b:4e:6d:45:40:b8:aa:3d:c8:36:db:a7:50:
ea:52:52:8a:96:ba:bd:41:6d:eb:38:a2:ae:8b:00:
53:07:ae:a0:56:e8:a7:04:c8:0f:da:f8:6a:b7:7f:
21:55:7c:b6:5f:51:3e:aa:6d:b0:aa:b9:c4:0d:f7:
12:70:ba:55:4f:83:7b:24:ad:54:40:4f:09:61:40:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:6F:1D:71:0C:C5:48:BF:FA:E0:B6:DC:18:99:86:9F:0E:7A:AB
X509v3 Authority Key Identifier:
keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/KipvHXEMxUi_-uC23BiZhp8Oeqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.80.0/21
185.89.156.0/22
IPv6:
2a00:4940::/29
Signature Algorithm: sha256WithRSAEncryption
82:31:04:74:e0:0a:70:1e:9c:e9:ae:32:44:00:84:d1:3d:29:
aa:09:d2:fe:f8:fc:13:80:1c:84:e2:91:8d:18:c3:08:df:e6:
a9:38:09:5d:81:55:e4:0f:9d:2a:2e:b9:38:da:81:b0:b2:f7:
70:33:af:87:e2:68:23:92:71:44:3f:8d:03:86:32:0a:2d:e9:
06:57:58:a5:de:b3:07:b6:ab:9e:60:cb:b5:48:49:70:5c:ed:
ce:45:8f:52:e9:d3:fe:83:33:85:da:9d:26:17:1c:c8:42:c3:
f7:eb:c1:c3:d3:e6:cd:b2:a1:8e:86:9e:5c:26:42:a3:44:17:
d9:ea:0f:e8:d0:3c:26:0c:99:b3:b3:94:df:e6:47:af:b7:ee:
8e:11:e9:b1:5d:d2:0a:3b:e8:c3:60:44:4d:cb:22:ec:3d:28:
53:13:22:16:22:be:50:e8:73:54:7a:98:d9:b9:63:d1:65:1d:
ca:7e:45:cb:be:73:75:82:af:7a:b8:69:e5:29:38:65:3b:b7:
1c:7b:85:39:37:bc:05:09:0a:b7:35:a4:2b:fa:da:86:f6:d2:
8d:6f:a2:8a:34:3d:fa:f7:23:46:d9:bc:ff:31:d9:d0:60:49:
70:e4:5d:9e:ff:c9:dc:f1:11:76:e2:b6:03:15:b8:aa:76:f0:
ca:86:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:39 2024 by rpki-client on console.sobornost.net