Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/SSAH4_ivWdOSZrc7WjEdBHaLBA4.roa
File: SSAH4_ivWdOSZrc7WjEdBHaLBA4.roa (raw, json)
Hash identifier: Ir2TZRiQYXzJH+qEBeXhWEenRoOoIaDDH9unaNdWRVg=
Subject key identifier: 49:20:07:E3:F8:AF:59:D3:92:66:B7:3B:5A:31:1D:04:76:8B:04:0E
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 018570708876FE8EB86A613BB03843F96527
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/SSAH4_ivWdOSZrc7WjEdBHaLBA4.roa
Signing time: Mon 02 Jan 2023 03:05:01 +0000
ROA not before: Mon 02 Jan 2023 03:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16243
IP address blocks: 217.114.96.0/20 maxlen: 24
185.76.16.0/22 maxlen: 24
77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
2001:1540::/32 maxlen: 48
2001:1541:4100::/40 maxlen: 44
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:88:76:fe:8e:b8:6a:61:3b:b0:38:43:f9:65:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 2 03:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492007e3f8af59d39266b73b5a311d04768b040e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:16:69:81:5a:ae:0d:8b:8e:64:14:06:86:67:
15:7f:0c:d0:d1:7f:28:f2:24:b2:97:a0:b8:52:93:
c2:f3:29:90:0b:8b:0a:dd:9f:8c:36:0e:f7:e5:3c:
4f:f2:c3:53:e0:e0:0c:b6:ac:05:32:b5:62:82:3c:
b7:41:7b:5e:06:40:a1:04:07:22:1a:89:4d:3b:64:
9b:b4:4c:be:24:7b:ba:c8:c3:b2:bf:20:f6:52:82:
09:e3:41:fa:fd:fa:85:7a:6b:79:c6:61:fe:0a:bf:
fa:d5:42:c7:26:f0:b5:c5:2e:fe:ef:d6:a1:d0:c6:
81:08:17:94:0c:e7:27:11:23:f3:89:6f:b8:50:df:
bc:e9:72:bc:84:02:1a:87:a2:dd:60:2c:16:0a:d5:
37:8e:89:18:d4:e9:b4:40:2e:4d:e1:3e:b9:70:74:
1a:90:5c:c6:cd:fc:ca:14:06:f2:e9:f0:2c:a1:5a:
48:b1:04:fa:e9:e3:92:fc:99:62:b6:f3:69:d2:1d:
4a:0b:a3:52:fa:93:f4:d8:61:ac:93:bc:77:d6:0c:
af:e3:b7:f9:3d:59:89:f5:1d:3e:68:f0:3c:dc:0d:
db:53:de:c7:4d:6e:5a:ab:0f:d3:f8:0f:b5:0e:3a:
67:de:eb:6c:28:8c:36:73:c3:98:ec:c4:36:28:53:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:07:E3:F8:AF:59:D3:92:66:B7:3B:5A:31:1D:04:76:8B:04:0E
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/SSAH4_ivWdOSZrc7WjEdBHaLBA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
2001:1541:4100::/40
Signature Algorithm: sha256WithRSAEncryption
03:e7:1b:5b:4a:01:70:47:34:a3:05:ed:9d:3c:ad:5d:63:f1:
d8:9b:15:04:17:92:9a:8e:d2:11:eb:31:b9:04:b0:bc:04:6b:
3f:23:a3:a4:8d:b8:37:8c:b2:3c:69:a8:55:7a:57:91:4f:30:
8e:12:56:d5:36:04:e2:f1:33:68:25:6b:ea:f6:03:4e:02:df:
bb:1d:d6:0f:22:3d:a9:30:05:ed:d0:9e:67:16:70:ad:94:41:
fe:99:22:8b:c1:1f:7f:19:27:70:5d:dc:f9:ce:fd:56:f4:27:
db:16:16:2c:61:36:47:56:6a:91:ba:d7:a5:4c:90:c1:03:04:
55:35:c7:08:28:f0:3e:65:c0:e7:8f:6d:5d:f9:e4:1c:dd:37:
7f:46:e4:b4:fb:81:4d:53:45:82:d1:9a:bd:77:98:c3:d5:a4:
a3:b9:8a:fe:3f:3c:62:d7:02:92:41:4e:36:81:d9:44:42:f3:
a5:ba:93:50:8e:42:a8:8f:e3:79:1e:6d:d3:f5:7d:cf:67:1b:
e7:ad:d8:40:c6:42:4a:1b:8a:b9:2d:c2:91:56:06:ad:e9:0a:
d5:8c:50:dd:23:ce:5d:96:1e:93:d0:78:63:cb:41:2a:52:3d:
45:04:a4:23:37:35:23:40:f8:87:ea:19:bf:f1:c2:25:d9:e5:
19:b4:ed:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:28 2024 by rpki-client on console.sobornost.net