Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/3OetfH5kN8lZPTcUFaHZ43cUIy0.roa
File: 3OetfH5kN8lZPTcUFaHZ43cUIy0.roa (raw, json)
Hash identifier: 9ufcWj7U4OOaKARohHrzNOeyrkN56NfhxTUKJwISEvQ=
Subject key identifier: DC:E7:AD:7C:7E:64:37:C9:59:3D:37:14:15:A1:D9:E3:77:14:23:2D
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 018572B432BF8769EB25D701376DF490B496
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/3OetfH5kN8lZPTcUFaHZ43cUIy0.roa
Signing time: Mon 02 Jan 2023 13:38:10 +0000
ROA not before: Mon 02 Jan 2023 13:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205499
IP address blocks: 178.251.16.0/22 maxlen: 22
178.251.16.0/24 maxlen: 24
178.251.17.0/24 maxlen: 24
178.251.18.0/24 maxlen: 24
178.251.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:32:bf:87:69:eb:25:d7:01:37:6d:f4:90:b4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Jan 2 13:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dce7ad7c7e6437c9593d371415a1d9e37714232d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:00:d0:85:84:76:f7:88:ab:14:e8:ce:3c:
37:15:70:4b:57:49:3f:42:6a:25:8d:b1:80:2c:2b:
15:57:55:51:a8:8c:2c:2c:4d:1e:37:02:34:b3:ae:
aa:d1:a2:29:8a:40:cf:ea:4c:69:75:90:93:18:d8:
70:96:d2:ba:4c:fa:b2:6c:cd:72:e0:ec:0b:5a:02:
28:ad:a3:89:60:a0:24:e7:75:8f:d7:73:97:de:ff:
53:d1:4e:06:af:f2:f8:b1:be:8c:65:90:d9:82:4d:
c3:05:56:f0:3c:c6:cc:0f:eb:92:32:5f:e1:7d:80:
cb:10:32:5f:a0:05:f8:ef:a7:28:82:75:12:03:24:
3f:be:7e:ba:bf:6d:7b:a5:59:e1:2e:a0:b6:d4:61:
50:44:fb:ce:fa:0e:2e:3e:04:29:d7:0e:25:3b:40:
52:18:91:03:fe:a1:9f:5a:a2:5a:2a:7c:cc:d4:62:
9e:89:6b:ee:24:1e:b7:bf:81:de:d0:b6:1a:b6:97:
c1:c5:cf:48:6b:61:03:3d:d6:48:e8:34:ee:86:43:
5b:c0:6a:94:0b:53:28:b8:cd:e1:a6:83:0b:e2:ba:
61:13:44:f0:d4:44:c4:9b:ee:d5:c6:60:9e:68:21:
15:31:7c:7f:99:10:d7:aa:fe:f3:78:4d:69:ee:e9:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:AD:7C:7E:64:37:C9:59:3D:37:14:15:A1:D9:E3:77:14:23:2D
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/3OetfH5kN8lZPTcUFaHZ43cUIy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a7:3b:ae:de:6d:da:cc:bc:2f:71:04:ff:7d:50:fd:f0:93:
00:5f:47:05:65:83:2d:f8:50:10:42:aa:85:f8:39:79:c1:bc:
cf:96:f6:0a:b1:f2:8d:1e:13:f6:13:59:8b:2a:63:fc:5b:4f:
45:c5:78:fa:a5:d6:7d:a2:12:bc:5a:44:16:a9:b3:d2:d0:4d:
2c:1d:2c:c4:94:af:2b:80:d6:9f:67:4f:0e:87:d2:02:3c:1c:
21:2f:44:83:e3:bc:b0:e0:b0:e8:54:a9:3e:4e:bf:c9:a5:c6:
f9:fb:f1:b5:f6:6c:6f:5d:36:c1:36:9f:50:83:a4:d3:ae:31:
e5:23:1d:8c:c1:eb:7d:a6:41:7a:2f:7f:05:ac:d0:db:40:57:
45:4e:0d:ce:be:4c:f4:c2:11:f3:6b:f9:37:a2:05:e8:f1:ae:
09:2d:98:70:a4:f1:d1:71:9e:70:f5:af:1d:56:3a:b2:3c:fd:
fb:8f:78:cd:11:5b:74:40:22:a5:3c:c1:ed:80:b9:3a:ce:c0:
76:19:b4:02:19:0d:b5:ab:3d:1a:fa:27:a3:4d:ce:01:80:b1:
61:5c:d4:16:25:5f:02:2a:37:7f:7b:3d:55:13:21:c5:1a:3c:
b7:9c:c2:84:fe:a2:c6:59:b7:f2:95:aa:81:62:17:dc:36:25:
78:d6:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:38 2024 by rpki-client on console.sobornost.net