Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/mcz6KlNQ4dRyPR2ztTiR65voOpg.roa
File: mcz6KlNQ4dRyPR2ztTiR65voOpg.roa (raw, json)
Hash identifier: aAqKnEWqAxboYW0onLih7ZmqWDWhjjW6E62nMHbkU0s=
Subject key identifier: 99:CC:FA:2A:53:50:E1:D4:72:3D:1D:B3:B5:38:91:EB:9B:E8:3A:98
Certificate issuer: /CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Certificate serial: 018570F091889DC07892FD6B7066F951A353
Authority key identifier: 96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/mcz6KlNQ4dRyPR2ztTiR65voOpg.roa
Signing time: Mon 02 Jan 2023 05:24:52 +0000
ROA not before: Mon 02 Jan 2023 05:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49088
IP address blocks: 45.90.92.0/22 maxlen: 22
185.216.184.0/22 maxlen: 22
185.144.72.0/22 maxlen: 22
195.39.250.0/23 maxlen: 23
195.39.252.0/23 maxlen: 23
91.212.160.0/23 maxlen: 23
185.214.200.0/22 maxlen: 22
91.212.72.0/23 maxlen: 23
45.86.108.0/22 maxlen: 22
45.135.68.0/22 maxlen: 22
2a07:3d00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:91:88:9d:c0:78:92:fd:6b:70:66:f9:51:a3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ab4697a6a48f6c6c693e3839bfd5b3fb0e3bf1
Validity
Not Before: Jan 2 05:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99ccfa2a5350e1d4723d1db3b53891eb9be83a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:aa:14:be:5c:67:62:04:d4:f2:2d:a4:09:
6c:e9:28:81:4a:62:2d:f4:3f:d3:1b:11:9c:29:93:
1c:d3:20:81:ec:c7:c1:28:70:90:72:9d:55:2a:dc:
fc:15:84:e6:57:52:15:bf:b2:39:d0:55:2b:5b:4d:
9b:b1:93:2e:56:1b:b4:f0:1a:0c:8a:5c:75:6c:b9:
26:71:3d:35:92:98:d8:03:97:5c:de:42:8f:4f:7d:
a9:d2:be:a0:b3:4e:7d:89:9f:53:4e:6e:cb:95:82:
a2:49:66:a3:01:78:27:c7:58:9d:45:18:57:21:4a:
ce:a7:d9:e1:25:67:fc:75:79:7e:c1:df:c0:0d:d8:
38:8e:85:48:bd:54:56:98:42:cc:1a:69:78:23:4a:
34:7a:73:6a:6f:89:48:75:57:d1:83:94:be:f1:72:
41:20:bc:17:fe:b5:d0:fe:54:1e:f9:89:ef:77:ed:
a5:98:5d:d2:6e:c6:1c:dd:e7:5d:82:24:77:9a:9d:
9e:8c:01:e2:fb:34:02:7a:68:dc:cf:2a:93:ae:56:
f6:1c:ce:cd:a7:b6:a7:46:91:0c:fe:06:3f:b4:2c:
01:52:36:03:6d:0c:10:a6:ad:49:1e:a3:54:9f:4a:
b7:d1:34:a3:39:3f:b7:62:17:1d:c1:48:b8:ba:43:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CC:FA:2A:53:50:E1:D4:72:3D:1D:B3:B5:38:91:EB:9B:E8:3A:98
X509v3 Authority Key Identifier:
keyid:96:AB:46:97:A6:A4:8F:6C:6C:69:3E:38:39:BF:D5:B3:FB:0E:3B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqtGl6akj2xsaT44Ob_Vs_sOO_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/mcz6KlNQ4dRyPR2ztTiR65voOpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/371ca9-56ad-4d12-96f4-3b1e722a9dc8/1/lqtGl6akj2xsaT44Ob_Vs_sOO_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.108.0/22
45.90.92.0/22
45.135.68.0/22
91.212.72.0/23
91.212.160.0/23
185.144.72.0/22
185.214.200.0/22
185.216.184.0/22
195.39.250.0-195.39.253.255
IPv6:
2a07:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
16:dd:a2:c1:b8:df:5e:7e:d6:cb:11:7e:ef:0c:ca:88:c8:a5:
c6:70:46:44:b5:c3:4c:91:8b:41:df:8c:cb:4f:c5:00:d6:fd:
d4:2f:7e:2a:27:1a:eb:59:34:dd:55:c2:c9:70:cb:72:fd:6c:
cb:50:52:2c:fd:d8:c8:68:ac:40:4f:7d:85:4a:eb:33:db:73:
b5:ca:ab:cc:49:0b:95:b5:3c:2f:66:17:7c:1a:3f:f4:13:92:
d7:ea:73:31:d6:59:e5:f0:b5:00:7c:c3:52:47:25:85:1e:c0:
fe:46:38:14:39:b7:e6:58:20:73:c8:70:ef:73:32:bb:4a:69:
2e:41:13:fc:29:6d:0b:9c:f2:7f:23:e3:f3:4a:ba:30:c0:bb:
aa:56:93:72:d8:92:b7:32:7d:32:bf:ed:d7:6c:6d:da:b6:7b:
b0:6e:1d:1b:ae:f6:e0:46:ab:e6:95:11:54:43:e2:08:ce:aa:
42:1c:0a:dc:b9:50:e0:14:b7:5e:63:58:12:1a:99:8a:0b:c6:
2d:4b:d9:ad:7c:ec:82:17:73:20:f8:f9:de:8d:17:41:30:ad:
b6:54:22:89:e5:34:4b:b3:f5:33:5f:82:15:67:89:ee:dc:de:
6f:5e:55:f9:9f:3c:dc:6a:21:32:98:7f:d0:29:61:ad:a4:f4:
c0:8c:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:09 2024 by rpki-client on console.sobornost.net