Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/G6ubqFP5IRr8I3_5sZcYtwUIzvk.roa
File: G6ubqFP5IRr8I3_5sZcYtwUIzvk.roa (raw, json)
Hash identifier: /BtSa9iwD9lJKCFWQ1zatJ2K7GOrSFsH9RKO/hNYRnY=
Subject key identifier: 1B:AB:9B:A8:53:F9:21:1A:FC:23:7F:F9:B1:97:18:B7:05:08:CE:F9
Certificate issuer: /CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Certificate serial: 018A6C548A0D4CA3645E376D2B84D30EA87A
Authority key identifier: 44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/G6ubqFP5IRr8I3_5sZcYtwUIzvk.roa
Signing time: Wed 06 Sep 2023 21:09:54 +0000
ROA not before: Wed 06 Sep 2023 21:09:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199042
IP address blocks: 176.115.171.0/24 maxlen: 24
176.115.168.0/24 maxlen: 24
176.115.172.0/24 maxlen: 24
176.115.169.0/24 maxlen: 24
176.115.168.0/21 maxlen: 21
176.115.170.0/24 maxlen: 24
176.115.174.0/24 maxlen: 24
176.115.175.0/24 maxlen: 24
176.115.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:54:8a:0d:4c:a3:64:5e:37:6d:2b:84:d3:0e:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448331851b3559d3cc8299f6b020ef378e2e4b04
Validity
Not Before: Sep 6 21:09:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bab9ba853f9211afc237ff9b19718b70508cef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f1:b4:a8:d0:22:d1:be:90:03:b7:8e:36:8e:
83:4e:05:6a:4b:d7:5e:98:72:07:97:20:90:88:df:
f4:e8:b9:2b:45:cf:34:99:e5:90:9e:d6:05:47:e4:
5c:a2:00:fc:8f:3d:6c:75:a1:2e:4a:27:48:3e:cc:
19:a5:4c:f8:98:ea:9b:64:b3:35:7d:53:40:80:08:
20:50:1f:dd:27:46:d7:5e:3a:7f:ab:89:28:32:c6:
e3:d5:0d:84:a3:d8:39:f0:3b:8b:db:cc:c9:39:22:
28:3c:cc:aa:bf:59:31:f3:c3:dd:74:ad:93:6e:0e:
73:bb:b5:cc:19:55:38:83:4f:13:f0:db:a1:50:8e:
c9:44:91:0a:04:41:e3:f3:30:5a:71:4a:3b:e1:2c:
1b:bd:92:13:d2:08:db:31:35:73:d6:70:36:55:79:
e5:a0:25:78:67:06:a1:c0:83:07:f6:a6:3d:7b:a1:
e9:65:6d:8d:33:b4:c7:d4:34:a5:2a:56:f1:27:6c:
d9:6d:d7:a4:75:a8:b5:44:4f:97:3f:0e:74:9b:41:
19:52:e6:c0:30:0c:10:f0:7c:8b:f0:e9:b8:9e:cc:
1e:30:d5:db:91:83:da:ed:a2:86:18:b9:50:55:cd:
6e:21:fc:f6:e5:a1:f5:d3:6b:94:a8:36:2f:d2:4f:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:9B:A8:53:F9:21:1A:FC:23:7F:F9:B1:97:18:B7:05:08:CE:F9
X509v3 Authority Key Identifier:
keyid:44:83:31:85:1B:35:59:D3:CC:82:99:F6:B0:20:EF:37:8E:2E:4B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIMxhRs1WdPMgpn2sCDvN44uSwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/G6ubqFP5IRr8I3_5sZcYtwUIzvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2a9acf-2f1e-4c9c-b810-a047816d6283/1/RIMxhRs1WdPMgpn2sCDvN44uSwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:2e:d9:35:5a:aa:71:9e:32:03:fc:4e:b6:5a:12:15:31:79:
79:60:df:d7:66:58:bf:56:98:56:80:3a:a7:56:f1:a6:f8:2a:
7a:e1:01:47:46:fb:fa:81:68:95:06:97:7c:26:df:40:0c:4f:
c6:79:46:26:3f:f3:1d:91:6a:9c:74:06:55:db:55:0f:0e:1e:
c0:1d:89:df:5d:1a:c1:ff:4b:8a:d8:fa:ca:b4:27:9a:0c:42:
b4:74:5d:36:ad:85:af:7b:30:db:e9:7b:9b:8d:b4:50:a7:fd:
f4:b6:6f:ce:70:1c:97:ed:af:14:5a:13:22:c2:ec:a0:c7:ae:
1b:72:cb:47:52:84:b5:5d:52:59:d0:d5:8a:e0:e9:4d:0b:be:
5b:06:ab:df:ee:52:e5:ff:a2:f9:4e:75:f0:98:50:35:6c:ac:
09:bb:00:20:84:39:45:c0:c9:8b:af:f1:9e:b5:7e:a6:eb:87:
9f:0f:bf:a8:61:9b:ed:f4:7b:ac:ab:0b:ff:ce:db:3b:31:39:
e2:6a:19:78:b1:9c:32:3d:82:98:22:c2:10:aa:93:34:2d:19:
8d:bb:e8:b5:be:d4:1e:5a:fa:29:5b:7e:46:fa:c7:09:02:7f:
37:cf:04:f2:63:07:5a:f4:32:b6:a0:3e:b7:83:b1:6a:95:93:
d8:ba:1c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:07 2024 by rpki-client on console.sobornost.net