Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/lyW5Cjnw6vWCG4VbD7Gep_59vQA.roa
File: lyW5Cjnw6vWCG4VbD7Gep_59vQA.roa (raw, json)
Hash identifier: 2ub/O5hvC/gakHu1Yg9Ix4wfTaWwTvMJHg02R3klGtQ=
Subject key identifier: 97:25:B9:0A:39:F0:EA:F5:82:1B:85:5B:0F:B1:9E:A7:FE:7D:BD:00
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 01856E790D55B483D5B565F2A2E256378A5A
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/lyW5Cjnw6vWCG4VbD7Gep_59vQA.roa
Signing time: Sun 01 Jan 2023 17:55:05 +0000
ROA not before: Sun 01 Jan 2023 17:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204139
IP address blocks: 185.129.22.0/23 maxlen: 23
185.129.20.0/23 maxlen: 23
185.128.178.0/23 maxlen: 23
185.128.176.0/23 maxlen: 23
185.122.124.0/23 maxlen: 23
185.122.128.0/23 maxlen: 23
185.122.126.0/23 maxlen: 23
185.116.174.0/24 maxlen: 24
185.128.132.0/23 maxlen: 23
185.128.134.0/23 maxlen: 23
185.123.240.0/23 maxlen: 23
185.123.242.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:79:0d:55:b4:83:d5:b5:65:f2:a2:e2:56:37:8a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 1 17:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9725b90a39f0eaf5821b855b0fb19ea7fe7dbd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:5a:1e:64:a1:df:2e:f6:b0:98:32:6c:0d:
0c:a6:b4:3b:34:9c:e9:33:fa:0d:5c:68:da:6f:39:
aa:95:94:2e:fa:f6:4c:5f:d9:6a:b6:ab:4d:4d:b0:
43:be:96:02:72:6c:f7:09:80:8d:e2:6c:a6:99:a1:
22:ec:bb:9f:4e:e5:cc:6e:ab:a9:d8:8f:0c:8c:86:
04:23:21:3b:30:ab:ac:97:63:00:ce:c8:aa:d4:7e:
dd:46:94:3f:8c:79:58:f3:5e:9d:df:6d:ec:59:71:
27:5c:db:15:b5:d9:11:ad:62:7a:8a:4f:c3:72:b2:
d9:ba:d6:e9:04:f0:cd:80:41:bc:14:d8:a8:f6:5f:
0e:79:19:10:c4:63:c2:6b:16:eb:ba:f0:08:14:f3:
64:15:e7:8d:2d:fe:31:22:75:3e:5c:6b:ab:fc:ec:
f1:bb:4b:1d:7e:f4:06:51:9b:be:14:63:a1:2b:7a:
e8:11:a9:b7:45:7f:de:15:be:81:99:fd:77:7d:d1:
31:e3:32:73:8d:95:6d:63:4c:14:3c:25:b6:01:d6:
86:40:29:34:1a:7c:35:7e:fc:89:2f:e4:94:75:34:
aa:5c:24:62:28:69:dd:a6:83:df:80:d5:6e:6e:e1:
45:a0:f0:b1:f6:0a:8e:4c:5d:b5:9e:ca:fe:a8:4d:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:25:B9:0A:39:F0:EA:F5:82:1B:85:5B:0F:B1:9E:A7:FE:7D:BD:00
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/lyW5Cjnw6vWCG4VbD7Gep_59vQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.174.0/24
185.122.124.0-185.122.129.255
185.123.240.0/22
185.128.132.0/22
185.128.176.0/22
185.129.20.0/22
Signature Algorithm: sha256WithRSAEncryption
12:97:63:12:08:db:57:60:45:90:1d:a6:bc:69:e8:ef:84:2e:
dc:1e:b7:dc:40:dc:8a:26:d1:dd:87:30:84:17:5b:10:57:48:
43:be:e9:a2:d9:2a:af:19:ff:21:5f:18:fc:5e:e0:c5:7c:6c:
ed:b4:36:cd:0a:7d:dd:ab:9f:11:bb:97:17:29:e7:3c:86:3d:
cb:36:eb:25:30:b4:34:ae:56:aa:98:e7:5c:b0:1e:14:f5:1d:
94:2a:39:c2:ac:1b:05:69:97:7b:fc:8a:8f:2f:91:f8:66:50:
85:3f:fd:3f:ed:1d:27:5b:d1:34:a8:74:2e:82:fd:d3:b5:70:
7f:b9:10:0f:8c:1e:e7:6d:ce:c0:49:77:65:1b:d8:9d:4e:f7:
92:2a:30:6f:b3:42:9a:8c:0a:1c:e7:19:9c:a6:fe:c9:c7:89:
fc:05:5b:5a:ff:88:8a:de:16:8f:b4:da:67:f8:2a:a9:7d:57:
f9:79:42:86:ea:f8:b5:9f:07:13:52:06:2a:fa:47:1c:22:38:
64:ca:c8:e2:2e:2d:6e:97:3c:bd:e0:88:e8:96:75:d8:6f:d8:
fd:dc:76:54:0b:bb:06:84:e2:fe:16:c7:d4:76:74:f2:9b:55:
f1:55:79:28:9d:da:02:07:c6:51:65:57:3d:e3:c8:31:60:ca:
3b:81:0e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:54 2023 by rpki-client on console.sobornost.net