Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/mVGFT44MmTfRerJFpHQoAHDhveY.roa
File: mVGFT44MmTfRerJFpHQoAHDhveY.roa (raw, json)
Hash identifier: 5wHhhrowqbFnyOQURmj5e+t47eBw30n0ZOhn72E9fK4=
Subject key identifier: 99:51:85:4F:8E:0C:99:37:D1:7A:B2:45:A4:74:28:00:70:E1:BD:E6
Certificate issuer: /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial: 018570B0917A2E85878ECE0DAEB860608582
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/mVGFT44MmTfRerJFpHQoAHDhveY.roa
Signing time: Mon 02 Jan 2023 04:14:57 +0000
ROA not before: Mon 02 Jan 2023 04:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201531
IP address blocks: 185.243.228.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:91:7a:2e:85:87:8e:ce:0d:ae:b8:60:60:85:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
Validity
Not Before: Jan 2 04:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9951854f8e0c9937d17ab245a474280070e1bde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:ee:1f:1d:3b:85:08:21:a2:96:c3:2e:39:
59:5d:5e:a1:e0:9e:10:79:55:3e:5a:fd:6d:88:9d:
fe:22:63:f7:e6:c1:82:91:ec:37:c4:2c:78:e9:be:
b9:a8:e7:96:19:64:a9:cd:8f:38:61:5d:ca:4a:c3:
1a:23:19:40:31:4a:0c:6b:df:9d:c9:d3:c7:09:63:
d8:e9:17:7d:1f:57:04:dd:8c:1a:12:6e:75:5e:a4:
cc:18:41:f4:0a:63:ad:e3:e1:a1:03:87:5c:4f:29:
04:de:6d:e4:61:e5:75:4a:04:d1:b2:08:de:f7:49:
3a:57:88:e8:ea:5a:6f:63:87:28:4a:f9:90:d7:2d:
9d:b2:e4:22:b4:16:8e:ff:80:08:a0:84:46:af:36:
d6:82:7d:31:86:50:f5:c5:00:4f:c2:51:83:2a:18:
2e:c5:f5:dd:78:76:cd:0c:71:bc:d2:ed:ae:6b:20:
dd:7f:f3:0c:ed:3e:3f:7e:3c:a5:ef:d1:3d:9c:84:
b9:d0:2d:98:eb:52:04:44:d5:26:46:64:69:7b:77:
62:1f:ca:b8:27:2b:02:dd:1a:ec:19:d3:46:5c:a9:
20:bf:11:c6:21:db:2f:c4:6f:62:39:fb:ee:38:7b:
81:c4:b4:f3:3c:3b:22:b3:fc:72:b8:54:d9:a1:f7:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:51:85:4F:8E:0C:99:37:D1:7A:B2:45:A4:74:28:00:70:E1:BD:E6
X509v3 Authority Key Identifier:
keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/mVGFT44MmTfRerJFpHQoAHDhveY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.228.0/22
Signature Algorithm: sha256WithRSAEncryption
46:8e:35:26:44:8e:44:67:c5:e8:4a:95:10:75:da:d2:63:45:
56:74:9a:9c:a6:a5:a2:9a:ac:44:c7:d3:ec:15:55:b2:cc:87:
53:ca:af:39:54:0a:33:06:fd:2e:b9:ef:2f:bd:a1:82:cb:86:
47:65:45:a4:13:72:9d:cc:bc:9d:09:44:54:25:75:a5:cd:1a:
e3:8b:1f:a8:59:97:6a:ea:75:c7:70:35:59:5b:88:6b:a9:5c:
e0:6e:75:13:4e:38:c3:b0:87:97:57:42:d8:5a:8b:dc:12:21:
1a:35:29:e8:e6:c1:d9:77:05:be:c6:85:40:2b:94:af:e9:ae:
70:29:73:2e:17:e4:56:bf:81:0c:fc:57:cd:96:85:74:10:b9:
bc:19:2a:7f:33:ab:28:da:0d:44:64:87:21:f0:4c:fb:fa:b4:
ba:4c:40:ac:e3:08:bb:c7:bd:d9:62:8c:67:02:b6:98:3c:a5:
b9:88:ea:e7:6b:5c:0e:d1:52:1d:bc:de:11:a2:90:d8:32:a6:
00:80:09:e5:34:d1:54:fb:51:20:f9:93:f9:89:06:ca:b4:52:
c3:e9:ef:02:7c:ba:38:82:12:9e:7a:16:7b:77:e0:33:15:0e:
5c:c1:fb:d8:b7:0d:d9:14:87:20:41:3c:ba:36:d3:75:9b:6e:
47:28:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:16 2024 by rpki-client on console.sobornost.net