Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/rgu-d33LFbYkWB37vhrBNbsS9Bc.roa
File: rgu-d33LFbYkWB37vhrBNbsS9Bc.roa (raw, json)
Hash identifier: UWLHPpXA3eMcx228hLDdrq9CQrg2dVWtlxmkMX6iXEI=
Subject key identifier: AE:0B:BE:77:7D:CB:15:B6:24:58:1D:FB:BE:1A:C1:35:BB:12:F4:17
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 018571308200F90F9F51779B211D3329736B
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/rgu-d33LFbYkWB37vhrBNbsS9Bc.roa
Signing time: Mon 02 Jan 2023 06:34:42 +0000
ROA not before: Mon 02 Jan 2023 06:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9167
IP address blocks: 213.150.32.0/19 maxlen: 19
195.184.96.0/19 maxlen: 19
213.173.224.0/19 maxlen: 19
85.235.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:82:00:f9:0f:9f:51:77:9b:21:1d:33:29:73:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Jan 2 06:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae0bbe777dcb15b624581dfbbe1ac135bb12f417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:36:cf:78:30:35:8b:65:6a:0f:00:21:8d:
c6:9c:78:98:0a:e4:22:3d:37:af:89:a3:14:41:10:
ce:57:96:6b:bb:d8:33:f9:b1:e3:fa:c9:95:eb:6d:
12:21:24:ec:4b:af:aa:be:69:4a:1b:07:ca:c3:09:
1b:e7:69:96:f0:0d:8f:38:ed:5c:64:59:3f:bf:e3:
77:86:19:b8:2c:22:1f:4f:35:f7:57:b2:f8:39:33:
4e:ea:72:37:af:08:02:b3:22:5c:a2:f8:04:02:6f:
a0:f3:c8:ad:80:db:22:15:71:98:9a:90:c9:2e:40:
15:df:7a:70:cf:be:93:9e:7c:38:0b:76:ad:97:d9:
b2:25:dc:45:78:86:df:cb:1a:0a:e0:fb:dc:d8:a8:
f7:48:ef:54:41:29:5c:58:ab:10:ce:5e:5b:7a:0b:
c1:83:4d:62:bb:57:9e:bc:04:b6:4e:c3:5a:0d:c1:
e5:8e:80:72:48:99:f1:59:90:18:30:eb:d1:3a:fd:
d2:b0:41:67:44:11:8c:69:bd:24:27:f8:5a:70:7d:
64:32:1c:e2:95:e5:cd:5e:ee:44:8e:57:51:9c:96:
03:e2:54:d2:26:b9:74:7f:43:49:57:7e:d2:f8:97:
dd:24:a2:82:2e:50:ec:ef:d0:db:66:48:cf:66:ba:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0B:BE:77:7D:CB:15:B6:24:58:1D:FB:BE:1A:C1:35:BB:12:F4:17
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/rgu-d33LFbYkWB37vhrBNbsS9Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.224.0/19
195.184.96.0/19
213.150.32.0/19
213.173.224.0/19
Signature Algorithm: sha256WithRSAEncryption
74:67:78:d2:1f:43:35:f6:f7:15:cc:19:f5:73:7a:00:b4:fd:
ce:f6:16:69:e9:3e:05:b1:03:21:b9:5c:ef:8d:45:ec:a3:de:
50:aa:62:75:0b:ea:be:70:be:18:57:9f:9a:7b:76:7b:78:fd:
c7:f3:15:c1:e9:e1:da:7d:d5:11:2d:5c:24:12:1b:46:bf:40:
3d:f2:27:a5:44:0f:07:e8:65:ef:5d:77:ff:e0:90:e4:18:da:
9d:ab:ab:bd:a8:94:9e:ba:41:4d:95:af:ec:22:db:1f:bd:aa:
f0:b5:4f:1d:36:91:43:10:2a:4f:0c:3f:e1:7a:65:89:b0:83:
f7:6d:ef:a8:c0:b5:e9:03:cf:b1:da:fe:b6:0d:91:7e:47:75:
a7:bb:9c:e7:3f:04:e6:72:e0:3c:a8:a7:26:99:80:51:4c:14:
3b:51:06:1e:4a:1f:3c:6b:36:7a:e7:9e:86:f3:82:43:18:2a:
4e:70:44:7c:22:50:ad:32:f0:3e:87:89:5c:d1:7a:f2:59:42:
ad:99:ae:8a:a9:08:1d:bd:49:0d:40:18:11:48:32:3a:bf:93:
ea:4c:bd:e8:70:74:93:48:c0:44:29:29:8e:bc:e0:5f:c8:3e:
23:e8:d3:da:9f:fd:69:dd:f6:80:fb:f8:c0:9d:06:b0:d7:73:
95:00:61:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:52 2024 by rpki-client on console.sobornost.net