Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/eDsybxJYRYNASFId2u5epmDozKQ.roa
File: eDsybxJYRYNASFId2u5epmDozKQ.roa (raw, json)
Hash identifier: THPNNqFAzp61isTwdysswsXivhXzCWoliQMfyhBaXK4=
Subject key identifier: 78:3B:32:6F:12:58:45:83:40:48:52:1D:DA:EE:5E:A6:60:E8:CC:A4
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 0189CF397B84D54A50998A957FA8B7E86CD9
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/eDsybxJYRYNASFId2u5epmDozKQ.roa
Signing time: Mon 07 Aug 2023 08:59:58 +0000
ROA not before: Mon 07 Aug 2023 08:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51871
IP address blocks: 185.239.22.0/24 maxlen: 24
185.239.21.0/24 maxlen: 24
185.239.20.0/24 maxlen: 24
185.239.20.0/22 maxlen: 22
185.239.23.0/24 maxlen: 24
193.34.31.0/24 maxlen: 24
193.34.30.0/24 maxlen: 24
193.34.29.0/24 maxlen: 24
193.34.28.0/22 maxlen: 22
193.34.28.0/24 maxlen: 24
2a13:9141::/32 maxlen: 32
2a13:9142::/32 maxlen: 32
2a13:9140::/29 maxlen: 29
2a13:9140::/32 maxlen: 32
2001:67c:21b0::/48 maxlen: 48
2a13:9143::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:39:7b:84:d5:4a:50:99:8a:95:7f:a8:b7:e8:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Aug 7 08:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=783b326f125845834048521ddaee5ea660e8cca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:e0:ab:dc:d4:59:ca:91:22:62:c9:ea:d0:
0b:7d:b5:a9:6a:86:5e:1d:8e:b3:2b:ca:88:a1:61:
16:98:c2:01:34:de:d8:9f:88:ce:c8:57:5e:c0:75:
bf:07:9d:c5:1e:24:e9:32:79:b7:f8:17:fe:d7:b0:
c9:e3:d2:d4:3c:e0:79:fa:e7:5a:20:fe:d5:72:7f:
44:b6:39:df:a4:9e:f5:8f:48:e5:8a:52:9b:f6:52:
4e:81:31:e9:32:e6:8d:b3:10:87:ba:bf:fb:45:1b:
54:aa:11:d4:28:0b:d4:ea:96:e5:67:81:ad:5e:33:
01:07:e0:0e:94:d7:77:b8:74:7d:b9:d2:14:a0:9a:
8f:35:c8:d2:bb:e6:91:a8:b5:08:12:c4:5f:1d:ce:
ef:79:ff:07:f3:02:0a:74:29:7c:87:50:90:b9:92:
69:25:c3:e1:37:46:e7:ec:c2:b2:22:23:a3:bf:13:
1b:63:da:cb:bc:62:53:e4:a3:a7:4d:06:0a:ab:95:
19:70:26:c3:a7:ab:96:92:fa:9d:06:1a:42:fd:bc:
8a:61:ac:1d:8f:d8:5e:21:44:0c:88:04:c9:72:5d:
20:a9:76:39:97:ea:e7:5e:e7:31:57:56:dc:52:1a:
34:99:73:29:87:41:a0:33:3e:4b:67:ab:3b:7e:d6:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3B:32:6F:12:58:45:83:40:48:52:1D:DA:EE:5E:A6:60:E8:CC:A4
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/eDsybxJYRYNASFId2u5epmDozKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.20.0/22
193.34.28.0/22
IPv6:
2001:67c:21b0::/48
2a13:9140::/29
Signature Algorithm: sha256WithRSAEncryption
3b:dc:fe:e1:0c:bd:c5:d9:72:8b:da:a6:89:65:3f:a2:14:26:
f0:5b:ea:73:6f:77:b2:76:dc:9b:30:9a:14:ae:e5:f3:be:56:
4c:37:42:7f:f4:28:0a:50:ce:6b:37:93:ec:67:85:41:b8:80:
0e:d0:d3:9e:6d:d2:57:ba:99:d8:af:ac:33:74:82:c4:91:b0:
1e:82:ff:81:18:6a:75:5f:67:04:3e:8b:5f:4f:4d:48:1d:9a:
0a:de:ae:46:e5:50:6e:e9:ea:71:cf:17:32:6b:6d:8f:b9:de:
57:2e:b6:da:97:5a:8f:4c:19:79:5b:c3:c1:67:21:7c:6b:14:
a8:fc:5e:30:9b:1c:e3:e3:28:6d:b5:43:e1:4b:49:88:0d:6f:
57:d3:7c:e9:12:1d:cb:37:9c:a3:8b:62:d3:c7:f5:55:44:95:
aa:5f:8d:e9:6c:af:96:b7:d7:9a:76:5f:45:f3:f1:3e:73:82:
53:f2:56:30:a2:48:75:c7:f9:3c:2f:86:45:ac:66:41:2b:82:
fd:e4:b0:ca:76:2a:28:20:87:4d:8c:46:82:9a:fc:42:49:96:
d0:8c:93:43:ed:d5:12:16:b7:0b:12:72:d5:89:02:f0:dd:a5:
27:0e:ad:47:f1:e9:73:ee:fa:d3:6d:f3:fb:16:cc:7f:cf:99:
cc:d6:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:55 2024 by rpki-client on console.sobornost.net