Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/n_bB1pTaAwUmy7CBwJd2a8HjEHI.roa
File: n_bB1pTaAwUmy7CBwJd2a8HjEHI.roa (raw, json)
Hash identifier: Pkl8/jsiP3SLqVNXRPl9Lc71diXTvqYMppMWs8yDGP8=
Subject key identifier: 9F:F6:C1:D6:94:DA:03:05:26:CB:B0:81:C0:97:76:6B:C1:E3:10:72
Certificate issuer: /CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Certificate serial: 018994A1C83766B488A402000D9CD55A2C95
Authority key identifier: 8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/n_bB1pTaAwUmy7CBwJd2a8HjEHI.roa
Signing time: Wed 26 Jul 2023 23:56:17 +0000
ROA not before: Wed 26 Jul 2023 23:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203201
IP address blocks: 185.142.152.0/24 maxlen: 24
185.142.152.0/22 maxlen: 22
185.142.152.0/23 maxlen: 23
185.142.153.0/24 maxlen: 24
185.142.154.0/23 maxlen: 23
185.142.154.0/24 maxlen: 24
185.142.155.0/24 maxlen: 24
185.145.192.0/24 maxlen: 24
185.145.192.0/22 maxlen: 24
185.145.192.0/23 maxlen: 23
185.145.194.0/23 maxlen: 23
80.80.239.0/24 maxlen: 24
185.145.193.0/24 maxlen: 24
185.145.194.0/24 maxlen: 24
185.145.195.0/24 maxlen: 24
78.142.240.0/24 maxlen: 24
2a07:2e80::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:a1:c8:37:66:b4:88:a4:02:00:0d:9c:d5:5a:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e55ca00bb616fdc4747cbfa4b54456c23f37284
Validity
Not Before: Jul 26 23:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ff6c1d694da030526cbb081c097766bc1e31072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:17:4d:60:f1:d3:11:6c:56:9b:83:68:39:65:
53:d4:d0:19:75:82:14:3c:3c:45:20:e9:7d:1a:ff:
b8:e1:cc:5a:15:32:60:e6:1e:aa:60:4f:48:10:1e:
2d:e9:6b:af:d3:70:71:e3:2b:2a:c3:7e:a2:75:16:
9a:ba:32:8d:a2:ff:96:aa:a2:b2:98:c3:40:76:b0:
2b:55:81:3f:fb:35:ca:3a:90:a0:90:35:70:2f:d2:
c5:f7:81:d9:bb:29:42:d8:d7:69:30:61:3e:54:69:
85:25:90:32:c9:c7:91:d5:c0:39:98:6f:92:b4:37:
0b:41:ef:3a:b8:32:21:af:6d:e4:63:fe:30:4e:17:
66:d0:1e:67:17:2f:a4:c3:dd:71:d4:2c:87:05:a0:
ad:f0:36:2d:86:c8:03:15:c4:dc:70:32:27:73:13:
75:60:41:78:b1:65:dd:07:73:9f:f8:ec:34:44:81:
e3:d4:e6:3b:86:39:52:24:ce:9d:0d:8f:66:9d:4c:
78:e6:8f:a6:66:8b:26:2c:ba:8f:40:96:46:2b:2a:
b1:75:9b:5f:da:46:8d:a8:26:84:bf:b9:2d:d7:3a:
46:d5:8a:91:8b:94:52:b3:f6:84:25:49:f7:87:0d:
8e:e5:c5:e9:4e:87:6f:d2:d9:68:40:cb:97:93:56:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:C1:D6:94:DA:03:05:26:CB:B0:81:C0:97:76:6B:C1:E3:10:72
X509v3 Authority Key Identifier:
keyid:8E:55:CA:00:BB:61:6F:DC:47:47:CB:FA:4B:54:45:6C:23:F3:72:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlXKALthb9xHR8v6S1RFbCPzcoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/n_bB1pTaAwUmy7CBwJd2a8HjEHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f14ddb-db59-485c-9944-e7115ba4208f/1/jlXKALthb9xHR8v6S1RFbCPzcoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.240.0/24
80.80.239.0/24
185.142.152.0/22
185.145.192.0/22
IPv6:
2a07:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
18:31:d7:4c:3a:69:56:81:d2:81:11:98:1b:34:b8:31:1f:00:
4a:07:1a:52:8f:62:70:e2:a1:83:7b:31:de:bd:5d:f2:68:f5:
5a:5e:42:22:cf:c3:25:4e:41:3a:3c:49:4a:48:92:31:33:1a:
17:05:a9:58:f0:7a:b2:62:b6:58:5a:0c:89:64:32:b5:1a:a9:
45:0a:d8:74:2c:52:e0:8d:cc:11:3b:9e:30:d1:f9:a3:6e:b1:
02:8e:e8:da:c6:27:06:9b:67:ff:e5:76:28:05:47:4c:ea:bc:
ec:b9:39:1f:71:d4:ed:2c:51:27:17:cd:09:d9:2c:1b:87:d5:
6c:1d:9c:64:58:0e:f0:f0:fc:dc:d9:12:11:3c:a1:da:c9:ae:
8c:c5:3f:8b:2a:8b:51:3f:2b:69:60:fe:4a:f1:2a:7c:15:d6:
fe:bf:d4:a7:08:a1:6b:ed:b4:b7:9d:77:71:00:7e:f4:cb:f5:
44:29:bb:3b:cd:9c:e7:61:7d:93:bb:61:bb:d2:21:60:88:38:
e1:35:05:49:27:3a:36:d5:c8:cd:91:ad:f6:5b:8f:84:ed:d8:
e0:e3:e5:27:cc:70:11:78:5d:16:70:85:2e:bd:d7:11:8e:2c:
3a:a4:54:12:76:8d:02:60:25:3c:d1:5d:f7:85:9b:32:26:ef:
ae:04:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net