Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/sX29vZTOZqZK9A94ZttQ5fFulxQ.roa
File: sX29vZTOZqZK9A94ZttQ5fFulxQ.roa (raw, json)
Hash identifier: AxI5qaF34gLRV9Di0G6vB/l+sHbVl6r8aQRL0ZEYCX8=
Subject key identifier: B1:7D:BD:BD:94:CE:66:A6:4A:F4:0F:78:66:DB:50:E5:F1:6E:97:14
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01856D13BCDBD50F46F80ECA2B95F2B27B52
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/sX29vZTOZqZK9A94ZttQ5fFulxQ.roa
Signing time: Sun 01 Jan 2023 11:24:47 +0000
ROA not before: Sun 01 Jan 2023 11:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15829
IP address blocks: 213.180.224.0/24 maxlen: 24
213.180.232.0/22 maxlen: 22
213.180.227.0/24 maxlen: 24
213.180.236.0/22 maxlen: 22
213.180.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:bc:db:d5:0f:46:f8:0e:ca:2b:95:f2:b2:7b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Jan 1 11:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b17dbdbd94ce66a64af40f7866db50e5f16e9714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:9e:ae:7e:b9:98:87:97:2f:3c:71:bb:15:
6f:a1:79:9c:e1:23:03:cc:0a:e6:7f:27:b4:0b:ed:
d8:72:e6:bb:8c:07:6b:da:30:40:4a:b5:18:59:2e:
0d:16:d9:a8:6b:2c:a8:6a:a0:32:3b:ab:68:3a:7e:
64:95:ff:59:f9:50:ac:f6:22:28:03:7d:bb:1f:d9:
ef:de:f2:59:58:57:14:35:b7:9e:25:d0:c0:31:63:
34:7a:12:61:b2:27:cd:06:01:af:1d:08:0c:c4:23:
c2:1c:64:d3:e3:55:a9:df:42:71:93:06:f8:12:cc:
d2:3a:86:82:6b:1d:e4:cd:c5:69:a4:f8:5f:8a:29:
b8:66:07:ef:94:ba:6d:8a:fd:e8:42:01:6c:33:c5:
5a:b2:d1:dd:56:2d:03:e0:24:de:74:f5:b4:83:ae:
84:4b:3d:b8:45:69:91:95:c3:ab:bc:11:14:7c:c8:
b8:a6:d9:3c:45:f6:39:7a:18:33:d2:9b:3b:e4:d8:
52:10:55:5d:af:2b:bf:bf:72:b5:6d:2f:78:74:df:
7b:69:6e:55:78:4e:cb:bb:ca:17:92:84:6b:ee:6b:
30:c8:c1:27:c1:1b:60:08:09:fd:65:89:fd:13:14:
f3:a7:db:63:2e:f5:f2:eb:e2:5e:4a:7e:4c:af:06:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7D:BD:BD:94:CE:66:A6:4A:F4:0F:78:66:DB:50:E5:F1:6E:97:14
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/sX29vZTOZqZK9A94ZttQ5fFulxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.180.224.0/24
213.180.227.0/24
213.180.232.0/21
213.180.248.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:92:84:3d:95:f4:df:6e:16:0d:72:8a:fe:4c:22:97:d7:03:
52:46:fd:43:7c:fd:be:cf:71:c3:cf:c3:8b:31:9f:16:84:ae:
d7:5b:b0:88:3d:e5:a3:26:d9:3c:be:98:6f:ee:f0:b6:03:09:
57:d7:e8:9e:00:3c:da:4e:38:c2:3e:d3:e1:6d:7d:12:66:48:
b5:ed:dd:ce:6f:c7:cb:d2:54:42:a6:bc:fc:19:66:ed:2b:eb:
38:b3:7e:50:ad:12:1b:c1:6c:a1:b4:69:fd:93:7f:78:da:2d:
fc:24:13:d8:a1:10:ce:82:9f:e7:06:38:29:18:b1:6f:0b:03:
34:f1:d8:e3:63:10:08:51:7c:3b:af:a1:2b:9d:49:c8:d4:fe:
bb:31:2f:12:a2:40:0b:8b:5b:dd:c4:8b:96:83:e5:7f:3b:25:
2b:71:04:61:64:59:93:ac:21:1d:52:81:83:2b:60:8d:56:3c:
92:6c:57:c0:7b:15:ff:81:46:41:a2:d2:db:a3:28:ee:70:71:
4f:e0:00:ed:e6:0c:83:28:85:3f:d4:d1:09:a2:89:bf:fa:92:
49:03:9b:3e:2b:91:df:62:66:24:49:28:c9:2b:d7:7d:ec:01:
d7:54:5a:f4:d4:14:d5:4f:4a:89:d4:6a:bc:60:ab:0f:18:4f:
44:90:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:54 2024 by rpki-client on console.sobornost.net