Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/GQ_PpQz7jJ1zW6uhfL5e-s_EDKI.roa
File: GQ_PpQz7jJ1zW6uhfL5e-s_EDKI.roa (raw, json)
Hash identifier: eFA70zdMOJtCZkjJBGR+jXIS9JFYu9meS8ym1/gsdVQ=
Subject key identifier: 19:0F:CF:A5:0C:FB:8C:9D:73:5B:AB:A1:7C:BE:5E:FA:CF:C4:0C:A2
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA4049740CAE9ACD1BAAD0ECB3D14D
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/GQ_PpQz7jJ1zW6uhfL5e-s_EDKI.roa
Signing time: Mon 02 Jan 2023 13:44:46 +0000
ROA not before: Mon 02 Jan 2023 13:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8253
IP address blocks: 83.212.128.0/19 maxlen: 19
83.212.160.0/21 maxlen: 21
2001:648:2e80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:40:49:74:0c:ae:9a:cd:1b:aa:d0:ec:b3:d1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=190fcfa50cfb8c9d735baba17cbe5efacfc40ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:05:eb:83:2a:56:a8:3f:b2:9e:f5:fc:33:99:
2d:ea:90:f7:f0:03:bf:bd:b8:97:da:07:2e:a6:ac:
b3:87:ff:c9:a3:01:a7:20:7a:43:99:44:a5:99:ac:
17:04:08:eb:5a:1a:3b:1d:51:24:ae:27:3f:19:e9:
72:cb:71:9d:15:8d:d9:88:b3:e0:a1:dd:45:36:86:
44:98:99:c3:c9:eb:26:3f:2e:73:39:b2:4d:1a:2b:
09:8d:18:13:64:e0:f9:05:8c:14:7a:71:ed:06:b6:
40:ad:07:9f:33:28:22:12:a4:ca:c2:5c:da:79:4b:
e9:1f:b3:92:63:36:d6:a0:ef:6b:b5:8f:3d:d4:51:
a7:50:14:c1:3e:9c:fd:07:cf:1c:45:48:76:d1:8d:
0f:f2:86:41:fd:ce:03:59:bf:ae:61:14:83:86:29:
dd:c4:d4:88:fd:df:b6:d4:e2:96:07:7c:ba:18:84:
c9:d3:97:b9:70:a8:3f:a5:db:4e:88:9c:9a:be:4e:
d3:fe:ab:be:8b:dd:5c:21:fb:b1:d1:6b:11:5e:80:
a9:40:d4:25:ce:47:99:35:6e:fb:32:ec:a8:93:73:
62:09:0d:c0:d6:1c:ae:77:59:ee:04:5e:40:f2:a5:
83:4d:45:06:28:cf:68:2a:9b:88:5b:ab:ca:85:98:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0F:CF:A5:0C:FB:8C:9D:73:5B:AB:A1:7C:BE:5E:FA:CF:C4:0C:A2
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/GQ_PpQz7jJ1zW6uhfL5e-s_EDKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.128.0-83.212.167.255
IPv6:
2001:648:2e80::/48
Signature Algorithm: sha256WithRSAEncryption
4c:7d:f5:22:f9:1c:0b:9f:db:d8:e2:df:f1:30:f8:29:82:62:
b4:5d:2c:51:0f:82:34:6b:b4:7a:07:7c:db:f3:c2:54:1e:6c:
8d:24:b5:5c:74:2a:f7:4c:7f:e6:85:58:e0:af:d0:9e:87:79:
00:e1:00:3e:08:f9:74:a7:6e:53:4b:71:f3:68:30:73:1e:a8:
d5:9a:42:90:16:eb:54:d5:87:b7:52:7a:66:7a:13:b4:9f:ce:
8f:62:5a:69:ef:5b:57:99:08:86:12:47:e0:53:30:96:6c:cc:
02:76:9d:df:8c:91:72:91:4a:dc:0c:5c:c0:af:d5:79:01:09:
52:65:51:66:49:81:cd:80:a7:01:8d:ee:a9:88:a1:46:90:58:
4e:27:19:fb:1f:ce:68:da:72:47:28:cf:8d:a4:de:f6:a4:16:
1d:5f:a0:36:0c:d7:14:f2:0d:e0:79:9b:f1:9d:90:e1:2c:b1:
3c:23:3b:5e:37:6d:cc:f9:a6:61:26:f8:46:16:df:8f:d1:15:
99:fe:3f:c9:02:48:3b:3f:f6:5c:b0:23:cd:d3:58:46:37:44:
af:08:75:4a:9d:77:ec:e5:f6:9f:61:c8:6a:95:58:f0:e9:5d:
69:cc:81:37:03:b5:02:b1:91:4f:bf:be:59:d9:90:33:bf:cb:
ef:00:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:09 2024 by rpki-client on console.sobornost.net