Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/3G7z_QsExOV1YNvdK7BZ7H2F7TY.roa
File: 3G7z_QsExOV1YNvdK7BZ7H2F7TY.roa (raw, json)
Hash identifier: tFnktUv713mfoSpNwvKOgWgNFkSx8l5k2AXup76pJS4=
Subject key identifier: DC:6E:F3:FD:0B:04:C4:E5:75:60:DB:DD:2B:B0:59:EC:7D:85:ED:36
Certificate issuer: /CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Certificate serial: 0185724C6F82AF4AECCF1566A9F85E37BC8F
Authority key identifier: 2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/3G7z_QsExOV1YNvdK7BZ7H2F7TY.roa
Signing time: Mon 02 Jan 2023 11:44:49 +0000
ROA not before: Mon 02 Jan 2023 11:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204784
IP address blocks: 185.184.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:6f:82:af:4a:ec:cf:15:66:a9:f8:5e:37:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5664e02936cb5b5454d595c5382b7e7a0c7944
Validity
Not Before: Jan 2 11:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc6ef3fd0b04c4e57560dbdd2bb059ec7d85ed36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:e2:86:cd:b3:6a:69:b8:2e:60:a4:10:67:
41:02:ac:b6:66:58:97:ab:f2:d7:c5:06:b5:ff:17:
53:b6:7d:29:47:99:82:3b:73:52:dc:3f:8c:13:3e:
d9:fb:81:6f:17:c0:50:29:ee:78:8e:ae:3e:cf:19:
6d:e8:a6:95:2f:e5:93:7e:b3:aa:ec:7b:fb:b1:3a:
14:82:52:88:35:fb:a0:0f:3d:7c:cf:ad:91:51:a8:
bf:44:4a:e7:26:e6:ba:5b:93:1b:3b:70:77:0b:b2:
2b:30:01:e5:aa:25:fb:b9:e8:9b:27:41:36:b7:7f:
28:6c:06:6f:87:5e:41:35:85:93:51:2a:5a:1c:b9:
32:ae:60:23:9d:ab:ca:ef:64:a1:80:67:90:ce:e0:
1a:7a:54:25:c5:7a:04:72:8a:2d:7b:23:e3:af:5b:
95:69:48:8e:35:aa:97:af:87:83:3e:be:ff:83:48:
a3:74:6d:ad:db:b0:eb:e0:90:fd:dc:cc:6a:35:1b:
16:c9:9e:cc:09:03:56:57:df:c4:93:97:eb:4f:0e:
b6:dd:c6:87:9a:76:49:44:40:08:d0:0a:56:99:0f:
d4:f5:dc:68:26:a9:96:98:ab:fe:20:15:62:0e:1b:
5f:c1:3e:92:44:e9:4f:25:7f:8c:20:28:96:f5:06:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:F3:FD:0B:04:C4:E5:75:60:DB:DD:2B:B0:59:EC:7D:85:ED:36
X509v3 Authority Key Identifier:
keyid:2E:56:64:E0:29:36:CB:5B:54:54:D5:95:C5:38:2B:7E:7A:0C:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/3G7z_QsExOV1YNvdK7BZ7H2F7TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/27c919-ccce-46a9-84b3-ef81fca63029/1/LlZk4Ck2y1tUVNWVxTgrfnoMeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.61.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2a:cd:61:1a:22:dd:d4:e6:40:de:3f:fa:87:42:68:49:99:
67:95:1f:75:4d:d2:e2:42:e7:d4:4b:9d:2b:f9:b6:bc:5f:d5:
5a:51:b9:e8:b3:85:69:23:f5:d9:d7:8b:00:71:89:b0:70:27:
4b:90:ca:27:ec:43:0a:92:12:f3:d8:79:27:32:a4:b9:de:57:
54:7e:f5:f9:6d:cc:9e:46:ca:5b:a3:fd:4e:98:65:2a:de:47:
ce:96:42:24:6c:57:a5:0b:22:dc:f1:fb:7a:e3:2f:1e:6a:7f:
23:bf:0e:e8:ea:b9:3c:0b:a8:ff:7d:d0:31:6f:61:7c:bc:98:
e3:46:99:7f:7f:32:51:b2:49:82:1c:7b:ab:0d:71:a1:6e:a8:
2d:a9:96:27:83:28:56:e2:19:57:58:6d:83:60:23:8c:89:da:
5b:2d:07:53:7a:09:ad:82:72:0a:89:7e:1d:f3:e1:46:a1:81:
55:48:d9:ba:05:c2:75:62:f8:6c:e2:cb:05:d6:84:1b:83:40:
6f:97:07:b8:06:52:0d:4b:66:c1:57:82:3b:6b:26:62:ef:32:
a2:1b:b4:5f:b7:9e:c8:8c:08:eb:a6:ce:07:34:db:2b:2b:f6:
3e:42:ef:8d:ac:63:42:89:52:26:c4:49:3e:41:a0:a7:f0:e6:
9e:e5:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:51 2024 by rpki-client on console.sobornost.net