Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/Jrk0MzukIlBS-EALRt6OKHHZkRE.roa
File: Jrk0MzukIlBS-EALRt6OKHHZkRE.roa (raw, json)
Hash identifier: YFPmfIxZPSd+kgrFXwybHORhowKKVNocszrtAFypUio=
Subject key identifier: 26:B9:34:33:3B:A4:22:50:52:F8:40:0B:46:DE:8E:28:71:D9:91:11
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 01856E38DF4EEB763EACE8FAE28A0AC0963E
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/Jrk0MzukIlBS-EALRt6OKHHZkRE.roa
Signing time: Sun 01 Jan 2023 16:44:58 +0000
ROA not before: Sun 01 Jan 2023 16:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 185.118.228.0/24 maxlen: 24
185.118.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:df:4e:eb:76:3e:ac:e8:fa:e2:8a:0a:c0:96:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jan 1 16:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b934333ba4225052f8400b46de8e2871d99111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:32:21:f0:f5:2f:88:7c:f6:4b:e1:ab:43:21:
9f:fe:43:e9:df:46:f8:da:a7:b9:7f:48:6f:c3:77:
5d:c3:97:92:84:97:d3:1e:b0:5b:d9:29:d8:e7:84:
20:c1:1b:11:3f:fa:1d:5e:8d:72:b9:ed:86:55:ce:
8d:cf:54:fc:21:54:e5:c6:a9:07:a3:90:ac:38:f4:
88:46:e8:38:22:30:34:81:aa:52:e7:e3:a4:5d:2d:
ca:70:1a:e9:38:f9:86:76:c9:ab:5f:75:05:1b:f2:
5f:41:bf:df:f6:8e:bd:d9:b1:ad:03:00:74:24:08:
65:30:87:aa:7f:b4:a2:6f:af:61:4c:9d:14:18:ac:
0d:19:22:86:f4:80:e0:f0:8c:57:ab:02:02:ab:5f:
01:28:e8:42:58:1f:b9:50:5e:34:6f:bb:3a:4b:05:
19:ce:c7:1d:1b:6b:45:93:d9:6f:d0:ca:95:ca:fc:
ac:55:ea:2b:09:33:6b:32:2d:cb:7d:d9:b7:d2:1f:
90:68:c6:48:1d:58:92:9a:36:3d:3d:50:9f:c4:1c:
5d:d8:60:79:3e:9c:c4:66:45:ab:95:7c:a0:f7:7d:
e5:60:7d:ef:8a:1a:0f:60:8e:7b:a3:ad:17:83:78:
6c:31:e0:3c:3c:f2:38:1d:7f:5b:f5:ee:e5:65:19:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B9:34:33:3B:A4:22:50:52:F8:40:0B:46:DE:8E:28:71:D9:91:11
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/Jrk0MzukIlBS-EALRt6OKHHZkRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.228.0/24
185.118.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:99:a4:b6:30:ef:91:00:db:ce:96:a7:8b:2a:e3:74:f9:c8:
97:11:5a:d6:f6:8e:f5:cc:21:89:5c:3e:eb:37:bd:81:11:3e:
db:33:45:07:b7:1f:b5:d8:f1:88:a3:06:da:4a:af:b8:67:29:
8e:08:e9:a7:16:ec:22:64:93:84:9a:d5:0f:4b:b8:e2:ba:3a:
57:50:86:7b:c6:0f:36:30:98:81:b5:ab:ab:90:5b:86:58:b9:
18:17:06:87:2e:f6:50:64:60:25:dd:e9:d8:2e:1b:3f:8f:a3:
28:8c:fd:e0:53:5e:2f:18:02:8a:c5:d4:82:3b:54:b0:9e:62:
f3:c0:7c:70:ab:8d:99:ac:51:c1:3d:a5:1f:fc:f2:0c:bb:fe:
60:36:6d:14:00:80:02:17:dd:55:18:50:5e:18:75:2d:a6:bd:
e8:b0:3e:01:e5:ae:b2:5c:63:20:c9:92:e4:b2:0c:61:72:67:
81:cd:81:c1:f4:1f:84:9a:18:7e:62:e5:f8:19:bb:66:c2:e5:
e4:ba:d0:38:30:a0:7d:22:b3:7d:56:c9:c9:08:a9:4e:75:17:
bd:ce:f2:5c:64:7d:ea:32:3e:a8:2b:16:b9:0c:7c:eb:6a:da:
4d:11:f7:df:5c:f9:c1:93:67:9c:a5:26:76:b8:2f:02:9d:c4:
56:39:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net