Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/JMRqiosUCebAMhgaf4eRSHndyuU.roa
File: JMRqiosUCebAMhgaf4eRSHndyuU.roa (raw, json)
Hash identifier: H5hy697zMIoLl8IZ5sKzpKP65E+0+1PJQUG3gvF5ejU=
Subject key identifier: 24:C4:6A:8A:8B:14:09:E6:C0:32:18:1A:7F:87:91:48:79:DD:CA:E5
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 01856B258C38DBDEB802AA63E8F8C7991DFA
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/JMRqiosUCebAMhgaf4eRSHndyuU.roa
Signing time: Sun 01 Jan 2023 02:25:00 +0000
ROA not before: Sun 01 Jan 2023 02:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199881
IP address blocks: 185.22.131.0/24 maxlen: 24
2a00:6060:b000::/48 maxlen: 48
2a00:6060:8000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:8c:38:db:de:b8:02:aa:63:e8:f8:c7:99:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: Jan 1 02:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c46a8a8b1409e6c032181a7f87914879ddcae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:c0:7f:d6:07:4c:6c:7e:be:4d:53:9e:f8:
1d:1b:95:81:72:ce:44:e2:e8:1a:21:f4:17:cc:d3:
bf:28:71:9d:d6:42:12:18:46:3c:01:f0:42:03:8f:
fb:52:8c:70:ed:62:13:e4:c7:e7:e4:7a:ff:bf:cf:
82:8d:76:4a:23:a4:fa:61:bc:b8:a7:ab:9b:30:30:
cb:a6:7d:05:48:a7:b3:28:33:fe:61:db:3a:19:fb:
1e:81:0d:d3:59:25:b3:e0:ae:bc:bb:ad:dc:4c:d7:
c0:82:a4:26:3b:48:ae:d7:c8:cc:3c:0b:79:d7:e8:
b2:3c:13:21:51:f9:35:80:64:f8:38:78:fa:f3:d1:
e6:e6:60:f6:87:6e:9b:85:f6:1d:39:b5:ff:22:5c:
59:a0:fc:b5:10:4f:28:cf:0c:cd:aa:3a:ae:8d:7a:
59:0f:b7:78:a6:fb:5d:e9:31:c5:81:e5:f5:04:b0:
96:07:46:8f:f9:ca:a9:ae:c2:1e:0a:6b:4d:10:d0:
6f:27:4b:82:15:92:71:01:df:40:2f:20:3b:bd:9f:
7b:33:dc:91:6f:e1:eb:10:33:d6:e9:5f:9e:f7:1d:
62:81:49:9a:ab:87:ff:84:9f:9b:3e:9c:b5:31:a5:
38:cf:3f:2f:0f:c4:84:f2:8a:d5:9d:aa:29:84:1e:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C4:6A:8A:8B:14:09:E6:C0:32:18:1A:7F:87:91:48:79:DD:CA:E5
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/JMRqiosUCebAMhgaf4eRSHndyuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.131.0/24
IPv6:
2a00:6060:8000::/48
2a00:6060:b000::/48
Signature Algorithm: sha256WithRSAEncryption
1e:c1:28:b0:21:76:00:71:aa:7c:87:a0:ac:6a:0a:bb:8e:11:
f5:2c:b5:a3:aa:4e:7e:64:a4:76:b5:44:fa:19:56:15:12:50:
4e:98:5c:75:c2:b7:2c:5d:e8:19:6c:62:25:a9:e0:ad:ed:5b:
e5:62:56:62:25:cf:12:b7:64:68:2d:7a:5d:9c:58:72:23:a3:
d0:35:77:14:50:e8:17:46:26:ec:74:90:3a:46:37:38:39:5e:
fa:5f:02:a2:3d:bc:ba:ae:fb:7e:fa:ce:42:c8:41:16:67:67:
3d:9a:f4:b7:68:69:64:e0:e9:5f:13:d0:45:ea:9d:33:ed:f9:
fe:52:a1:93:51:22:db:38:53:42:e5:e0:a7:97:a2:af:09:da:
ca:89:b2:29:ab:46:18:84:df:a4:94:ae:5c:e1:27:de:66:85:
6d:a6:1e:b1:ba:ad:77:0b:94:aa:c2:0d:d2:3e:81:f6:9a:13:
09:18:75:02:ae:e0:22:90:86:b0:fc:60:6c:d6:e8:16:9a:e3:
42:84:9a:fa:91:9e:e8:73:b6:e0:e3:6a:6f:8a:c3:11:48:11:
44:e9:99:6a:7d:ff:86:f7:9b:70:2f:1e:dd:ea:21:54:74:96:
a2:20:c3:58:5d:ce:a5:83:1f:a0:11:c8:b1:75:0b:bb:14:54:
fd:88:92:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:00 2024 by rpki-client on console.sobornost.net