Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/eaUBygZ-93SFAtm_CLNZdn3NrnQ.roa
File: eaUBygZ-93SFAtm_CLNZdn3NrnQ.roa (raw, json)
Hash identifier: 4z94WUcakA4mEKgcdKQ4h79IlcOlLDDVXYKd31icFlU=
Subject key identifier: 79:A5:01:CA:06:7E:F7:74:85:02:D9:BF:08:B3:59:76:7D:CD:AE:74
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 01856ED49BE07DFA93682ACB742CC09AB329
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/eaUBygZ-93SFAtm_CLNZdn3NrnQ.roa
Signing time: Sun 01 Jan 2023 19:35:05 +0000
ROA not before: Sun 01 Jan 2023 19:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56472
IP address blocks: 185.22.36.0/22 maxlen: 24
80.86.48.0/20 maxlen: 24
2a02:29a0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:9b:e0:7d:fa:93:68:2a:cb:74:2c:c0:9a:b3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Jan 1 19:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79a501ca067ef7748502d9bf08b359767dcdae74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:80:18:89:ed:52:4e:1a:45:07:28:a2:a7:
75:72:40:34:6b:0c:6c:60:fc:ff:2b:ab:d9:61:c2:
4e:b7:cc:d1:81:5b:b6:fc:4c:18:f4:db:ac:f7:ea:
ce:5a:68:39:49:78:e7:b8:62:d9:02:d9:ff:2a:52:
24:a4:ae:50:50:85:5f:7c:23:5c:49:5a:02:8f:f4:
eb:43:a2:0e:47:60:b3:06:a7:7e:08:89:7d:1e:aa:
78:f2:cc:02:83:4a:5e:12:c9:9a:2f:0d:58:eb:43:
9d:be:4b:6b:7c:9f:2f:0a:18:5a:84:ee:fe:03:8c:
4f:45:a4:6a:8d:42:dd:c9:13:00:62:db:6d:4b:41:
24:a9:37:dc:a7:5b:57:e2:a3:c2:4d:a6:d9:85:41:
cc:15:6b:37:22:89:3b:b1:14:76:3d:69:16:fd:fe:
52:5d:c0:89:f5:a2:04:15:fd:66:35:ef:0e:13:39:
5d:75:4f:4d:ad:d2:4d:a0:d3:b8:9f:6b:88:ba:e5:
1d:d3:47:76:77:3d:d4:27:56:ea:26:30:44:28:e2:
23:b4:ee:47:c4:5f:52:f3:67:0c:16:c7:91:86:62:
c6:91:86:98:b2:a4:8a:00:61:fb:f4:50:7b:e3:ca:
c4:5d:2a:b8:2f:db:75:77:f6:5b:83:9a:e0:dd:36:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:01:CA:06:7E:F7:74:85:02:D9:BF:08:B3:59:76:7D:CD:AE:74
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/eaUBygZ-93SFAtm_CLNZdn3NrnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.48.0/20
185.22.36.0/22
IPv6:
2a02:29a0::/32
Signature Algorithm: sha256WithRSAEncryption
9d:6d:75:d3:bb:6c:87:68:99:fc:3c:4c:2e:f7:27:a9:ec:e1:
89:fd:ac:4b:bc:54:05:8f:da:dd:a1:46:12:6c:7d:f8:8f:e5:
0c:68:4a:3f:f2:76:a6:d5:44:de:49:0e:0c:eb:91:79:f7:d3:
c5:dc:fc:51:a7:f5:2a:6e:ad:c6:26:92:bf:db:66:c3:75:72:
8a:2b:d7:c2:2a:f3:e2:c4:1a:0b:db:65:2d:9e:e2:c6:58:88:
fa:b7:38:79:56:0e:06:3f:71:2b:16:72:cb:e9:8e:bf:f7:3b:
d2:ae:8a:ce:9c:b7:02:c5:1f:bd:b9:19:24:97:57:a1:d5:b3:
78:19:43:6f:f2:88:52:f8:e8:1c:d1:cd:83:5d:e8:94:ce:c6:
9a:ba:ca:88:bb:5b:71:af:76:d4:8a:74:d5:e8:24:88:2d:a0:
fe:67:f7:a3:ba:a3:6c:b1:ce:a1:67:3b:0b:a6:26:78:7f:da:
1e:e5:f3:7b:d3:7e:9c:39:e6:f3:b6:71:c1:33:15:46:73:ca:
fc:eb:ad:fe:c6:9c:e8:75:34:62:3c:e3:fc:a2:29:78:80:48:
af:4f:ee:6a:ee:e8:63:8d:6e:a1:a1:b6:c1:9e:a6:0b:e0:8e:
6e:50:7e:46:83:92:8d:89:eb:dc:d0:17:ed:e2:5e:93:94:1f:
ea:33:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:18 2024 by rpki-client on console.sobornost.net