Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/p5qDTSKUq4-Wn30jZCzdsngcmDk.roa
File: p5qDTSKUq4-Wn30jZCzdsngcmDk.roa (raw, json)
Hash identifier: 31vnUKWoPCTrbgJKF8x05PY1AOndaIWVoNyY0+MxZpI=
Subject key identifier: A7:9A:83:4D:22:94:AB:8F:96:9F:7D:23:64:2C:DD:B2:78:1C:98:39
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0185E2B82015889B466AE3A2AFE55B8EA470
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/p5qDTSKUq4-Wn30jZCzdsngcmDk.roa
Signing time: Tue 24 Jan 2023 07:39:55 +0000
ROA not before: Tue 24 Jan 2023 07:39:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13289
IP address blocks: 82.212.224.0/19 maxlen: 19
185.111.34.0/23 maxlen: 23
2a00:cb0:8000::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:b8:20:15:88:9b:46:6a:e3:a2:af:e5:5b:8e:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Jan 24 07:39:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a79a834d2294ab8f969f7d23642cddb2781c9839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:6e:71:c4:bf:50:95:e3:46:04:ae:49:ba:
da:54:e4:1a:49:24:7b:a3:67:aa:72:c9:7d:a2:29:
9a:6c:22:b7:9e:e1:00:5c:bd:b2:54:0e:c4:61:f8:
b8:14:a1:ce:f8:50:54:48:a4:3c:da:9a:d8:6b:8e:
90:3a:3e:62:9f:dd:03:77:86:b0:ba:52:0c:89:f4:
22:13:5a:6d:89:da:37:da:b9:3a:75:aa:ce:bb:d5:
bf:53:6b:a2:59:9c:15:ee:32:0e:7f:85:70:77:78:
51:63:c1:fb:06:48:d1:b8:40:bb:af:7a:94:4a:bc:
64:ae:ca:02:c6:bf:30:06:e0:2a:db:6b:c1:e4:21:
20:ff:b6:89:5f:8e:29:95:cc:96:b0:d9:87:af:fb:
08:79:c2:cd:87:4f:5e:41:90:14:3b:6c:7b:0b:ef:
47:3c:71:b5:bf:de:fa:bc:71:c6:d9:2f:55:74:2e:
e3:75:b6:0e:fc:46:aa:ce:5e:fc:60:20:ae:47:08:
a9:bd:0a:43:08:f0:70:7d:a4:d6:49:f6:a2:57:de:
b8:e6:44:20:55:5f:d5:97:1d:86:f6:f6:23:1a:26:
a7:df:92:1a:d5:5f:d8:cf:66:93:c4:38:aa:8f:a7:
31:b1:bd:5e:13:2a:6d:d3:47:4d:3b:1b:40:49:6b:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9A:83:4D:22:94:AB:8F:96:9F:7D:23:64:2C:DD:B2:78:1C:98:39
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/p5qDTSKUq4-Wn30jZCzdsngcmDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.212.224.0/19
185.111.34.0/23
IPv6:
2a00:cb0:8000::/34
Signature Algorithm: sha256WithRSAEncryption
ae:57:8c:64:e8:05:c0:ce:1c:09:36:3b:a9:d6:6f:ad:b1:55:
04:93:fd:69:26:be:cb:88:5a:0c:99:1c:6f:ea:25:19:a8:c2:
f3:94:8d:2f:ed:93:0d:71:2f:92:97:1a:64:c0:14:9c:0b:96:
e9:9d:2c:de:6b:55:6c:29:b5:2d:a6:77:e0:79:51:83:cc:de:
15:64:fc:75:bf:e7:00:04:80:c3:50:c1:57:1e:c6:f8:23:f0:
a9:c0:7e:8c:e1:ce:ae:7b:3b:0e:dd:d5:1d:82:ef:6e:57:42:
62:f6:4b:43:3b:3b:d0:e9:92:89:d4:d1:dd:1c:9d:45:05:46:
9b:a6:45:0f:38:27:a3:80:2a:e5:d0:22:60:fb:0b:7b:d3:31:
01:9b:9c:18:53:ea:e5:9d:cd:79:da:43:dd:3e:f4:dc:ef:50:
04:30:37:2d:74:01:7e:b0:82:12:92:4d:e7:2c:4f:0f:32:c1:
f3:de:77:74:cc:63:27:03:9e:c3:0f:55:c3:41:27:1c:ee:da:
03:c7:c0:77:9c:67:73:15:91:e4:1b:f5:2f:51:49:22:7e:b1:
3c:8a:ce:e4:a2:36:96:8d:c0:03:2d:64:08:e4:76:1e:06:be:
c6:ce:cd:a3:f5:36:c7:b6:af:9a:ab:fc:88:8f:77:48:23:7d:
ce:ec:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:16 2024 by rpki-client on console.sobornost.net