Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/eULrxCyiaOv0BFNDbuMUoVeQpN4.roa
File: eULrxCyiaOv0BFNDbuMUoVeQpN4.roa (raw, json)
Hash identifier: lJfNwhW5Bkg9nBNkoo2nMLScppz8axTOXyrj9x/B+7A=
Subject key identifier: 79:42:EB:C4:2C:A2:68:EB:F4:04:53:43:6E:E3:14:A1:57:90:A4:DE
Certificate issuer: /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial: 01857321EDBDBBC644A48EA728D31DBE1507
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/eULrxCyiaOv0BFNDbuMUoVeQpN4.roa
Signing time: Mon 02 Jan 2023 15:38:01 +0000
ROA not before: Mon 02 Jan 2023 15:38:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 89.252.182.0/24 maxlen: 24
89.252.186.0/24 maxlen: 24
89.252.185.0/24 maxlen: 24
89.252.184.0/24 maxlen: 24
89.252.183.0/24 maxlen: 24
89.252.187.0/24 maxlen: 24
45.84.189.0/24 maxlen: 24
2a0f:e80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:ed:bd:bb:c6:44:a4:8e:a7:28:d3:1d:be:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Validity
Not Before: Jan 2 15:38:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7942ebc42ca268ebf40453436ee314a15790a4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:dc:bf:29:0a:13:5b:67:ee:1e:72:aa:f7:
98:9a:cb:ee:ad:8d:a9:71:fe:8b:b2:74:09:77:55:
79:d1:cf:aa:93:a1:20:8c:81:10:af:22:0c:26:ed:
6b:97:a6:0e:29:b5:52:4b:a8:5e:c0:20:35:7e:7a:
e6:98:c2:1d:86:13:64:f8:e8:99:80:3b:4c:78:d4:
8a:3b:c5:1f:84:26:9e:8f:65:09:dc:f0:44:5d:16:
5d:9b:ad:fe:b7:a4:88:32:9c:b0:1e:f1:c4:33:4c:
9a:65:fd:2d:56:26:71:87:13:a1:f3:61:5c:05:a0:
af:8d:bc:dd:ab:12:61:59:52:69:86:4e:31:36:69:
e5:25:c4:12:8a:dd:3b:22:f0:c7:46:95:8f:0b:ba:
95:7d:69:f3:f7:3b:93:cd:d7:f1:46:18:67:1f:3f:
38:46:ea:8c:03:98:23:8d:5f:d8:4a:b1:c5:56:6d:
41:53:ee:35:39:2d:e3:6a:2d:ba:b3:aa:8d:5a:d4:
12:7d:c9:eb:c9:29:c1:bf:76:b5:4c:66:b1:5d:d0:
46:0b:da:ab:b5:ea:0f:34:fa:f1:5e:be:be:f0:b6:
5d:e1:a2:9c:65:99:9c:e4:56:85:45:e0:c7:52:77:
ac:74:cf:55:42:3b:c2:02:11:da:f1:52:76:15:eb:
89:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:EB:C4:2C:A2:68:EB:F4:04:53:43:6E:E3:14:A1:57:90:A4:DE
X509v3 Authority Key Identifier:
keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/eULrxCyiaOv0BFNDbuMUoVeQpN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.189.0/24
89.252.182.0-89.252.187.255
IPv6:
2a0f:e80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:e8:66:07:61:bb:b2:5a:12:88:8f:50:66:d4:96:c6:bb:a6:
1f:ee:75:3c:a1:13:d1:a6:b7:6a:e9:4c:23:d0:24:c9:9d:ec:
c4:24:15:54:60:96:54:b1:6b:d0:49:65:29:f0:f2:05:c9:23:
31:f1:d8:e8:0d:2b:0c:75:25:b5:14:71:1c:f8:fe:d1:c3:48:
b3:d8:d7:e6:ae:34:11:68:cd:98:de:4e:27:28:fc:00:5c:d3:
59:d3:e3:a2:76:f9:2c:c4:41:45:72:d1:90:b0:a0:98:90:36:
5a:81:e1:1e:bd:1d:f5:b0:fe:1c:2e:4e:7a:e2:81:91:54:44:
fe:df:86:6e:49:76:ca:0d:5c:e9:01:6b:04:94:a8:fd:51:6a:
28:ec:d4:16:ec:f3:3e:b3:e5:4b:ae:b1:18:cd:c2:72:2d:ad:
a3:d0:83:fd:63:6b:9d:24:b6:d4:a7:6b:5d:d8:fe:ae:6b:00:
b7:4e:7e:2b:e5:56:1d:7c:67:54:9c:67:b8:b1:02:ec:28:72:
44:f8:c9:2e:f6:54:24:e6:31:9b:98:8e:97:c7:cf:4f:31:fa:
27:93:88:be:59:d6:e3:d3:ba:f5:c4:3e:f9:30:e0:1b:76:11:
c6:c6:63:e2:8c:c8:f3:15:5a:52:0a:b8:6f:da:e2:2e:eb:47:
cb:c9:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net