Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/izLUnYGgYCkzw1xQSRAMjP37c-Q.roa
File: izLUnYGgYCkzw1xQSRAMjP37c-Q.roa (raw, json)
Hash identifier: x6RThqtJarR+Cr0YvTrAm0KtGVB7L65C2K+cD5OrE7Y=
Subject key identifier: 8B:32:D4:9D:81:A0:60:29:33:C3:5C:50:49:10:0C:8C:FD:FB:73:E4
Certificate issuer: /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial: 018AFF8FB9C94237659321730B29735D7926
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/izLUnYGgYCkzw1xQSRAMjP37c-Q.roa
Signing time: Thu 05 Oct 2023 11:18:43 +0000
ROA not before: Thu 05 Oct 2023 11:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202315
IP address blocks: 194.49.83.0/24 maxlen: 24
194.49.80.0/24 maxlen: 24
194.49.81.0/24 maxlen: 24
194.49.82.0/24 maxlen: 24
2a0c:c8c0:1::/48 maxlen: 48
2a0c:c8c0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:8f:b9:c9:42:37:65:93:21:73:0b:29:73:5d:79:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
Validity
Not Before: Oct 5 11:18:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b32d49d81a0602933c35c5049100c8cfdfb73e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:35:d2:c8:50:b1:8a:9a:71:68:90:b5:1f:
1b:e8:ef:79:f7:ad:8f:36:d8:e1:4b:57:26:ed:a0:
75:d7:b3:c6:29:f4:08:8f:7f:be:cf:56:2a:6e:05:
f6:bb:02:61:8e:84:90:2b:a6:8a:2a:44:82:02:14:
ce:aa:fa:49:26:2e:2a:89:b6:49:a4:23:5d:4e:72:
1e:6e:c5:ed:f0:a7:2d:84:56:70:54:e9:5d:da:a3:
46:84:86:55:71:a4:71:f8:07:16:ce:5b:63:a4:f1:
ae:a4:c5:b2:48:06:de:26:eb:e8:86:92:f2:0f:f1:
8e:5a:91:ef:b8:9a:cb:1f:a8:6c:7e:2d:61:12:4d:
4e:fe:e1:8a:79:3b:23:53:dc:2f:b1:93:7d:2e:e8:
93:20:66:ee:ab:64:e0:46:b2:2a:72:1b:08:5b:e1:
b2:c1:f8:a9:05:d8:31:41:e4:ba:43:07:ad:2c:dc:
7c:74:d6:27:9d:b4:54:f3:8f:7d:ab:ee:ab:bb:06:
12:b3:15:84:de:8f:27:4a:c1:d9:0d:0a:88:bf:70:
6b:17:1c:f0:90:6d:e4:8c:7e:54:29:20:17:cc:ac:
90:74:71:16:b5:27:a1:66:29:fb:0f:23:45:fc:0a:
70:db:91:5d:f8:db:e1:0b:1c:02:87:25:aa:aa:71:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:D4:9D:81:A0:60:29:33:C3:5C:50:49:10:0C:8C:FD:FB:73:E4
X509v3 Authority Key Identifier:
keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/izLUnYGgYCkzw1xQSRAMjP37c-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.80.0/22
IPv6:
2a0c:c8c0::/47
Signature Algorithm: sha256WithRSAEncryption
bb:2c:f0:40:39:53:25:0e:93:83:63:ff:aa:9f:0f:af:53:d4:
a0:7a:72:5f:17:0c:e1:99:c0:1b:e7:81:8c:21:2c:c9:29:5d:
e9:b9:77:86:03:96:bf:a0:48:fd:b9:b8:bc:d8:7d:52:56:27:
d5:d2:f6:9f:a8:14:91:b6:53:65:5a:2c:0d:16:16:7d:0b:06:
77:ae:27:7f:a3:d8:1b:cf:76:8a:87:d4:04:f7:99:5e:35:15:
c8:f5:13:22:45:3d:41:77:e2:5b:00:82:e7:38:2f:7c:c3:74:
dc:2f:7c:c9:d5:4c:6d:95:fc:7d:c7:39:f4:a6:47:68:26:6a:
d8:7d:75:63:2a:40:27:f3:65:e4:9f:64:17:77:75:03:1e:4b:
ee:23:d1:45:da:50:6e:13:e2:0d:19:d3:24:0c:3d:1c:33:ce:
a3:60:5c:84:4b:0c:8d:8b:8d:46:94:b9:8e:ee:75:9f:b7:1c:
a0:f8:f0:ac:f0:4d:d9:e2:25:1d:f5:9d:22:e9:f7:94:b0:01:
93:68:35:c5:ef:d6:03:cf:a8:6f:db:1e:c9:53:91:cc:2b:46:
15:34:e8:ef:94:21:cc:ec:47:d1:fa:af:52:cb:e3:da:74:e8:
d4:8e:1a:22:22:32:56:d9:b0:41:a5:81:52:5b:7b:35:3c:ff:
2e:21:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net