Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/edcpf5oZrfOEvVPWbN-Zlw-v4Vc.roa
File: edcpf5oZrfOEvVPWbN-Zlw-v4Vc.roa (raw, json)
Hash identifier: c5UVJnMbD5PH7lFXOwQmG8QWMhIiB32Yir/TD4bbMwM=
Subject key identifier: 79:D7:29:7F:9A:19:AD:F3:84:BD:53:D6:6C:DF:99:97:0F:AF:E1:57
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BBD1478265CDED869C8859255FC47835F
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/edcpf5oZrfOEvVPWbN-Zlw-v4Vc.roa
Signing time: Sat 11 Nov 2023 06:31:57 +0000
ROA not before: Sat 11 Nov 2023 06:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 194.116.237.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:14:78:26:5c:de:d8:69:c8:85:92:55:fc:47:83:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 11 06:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79d7297f9a19adf384bd53d66cdf99970fafe157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:9d:8e:93:47:e3:28:6c:0b:64:67:50:bd:
ca:bd:48:55:ba:01:3d:18:5b:84:c5:1f:ef:5a:81:
6a:fa:1d:98:1b:b2:02:36:9b:c0:47:91:2d:a8:b0:
45:d8:97:1a:9b:48:4d:14:7d:61:a7:51:da:55:4c:
0a:6b:3a:a1:17:c7:b8:80:93:2d:82:2a:44:72:27:
64:2b:95:4b:e2:dc:cb:55:95:1d:52:71:cc:22:ed:
b6:a5:79:ff:7c:6c:5b:36:21:f1:05:03:62:0e:7c:
d8:3a:54:af:cd:92:97:d2:c3:7d:5c:70:94:cb:90:
dc:bd:ab:03:85:0f:a5:1d:69:18:bf:b3:e1:8b:e3:
86:4d:97:28:59:e5:b7:a3:68:0b:03:ff:05:fb:84:
20:7a:d6:81:03:f3:17:b3:dd:dc:db:46:4e:c1:75:
b6:e7:85:e7:6d:c1:b1:89:15:52:c4:af:ee:ea:40:
5f:99:8d:8e:30:f0:a8:d4:0b:28:b1:51:4a:37:89:
a3:f2:53:86:3f:ac:32:58:2e:5f:0c:3f:f2:07:60:
a6:28:af:29:48:06:e2:a6:c3:fe:28:80:13:7e:09:
19:41:68:72:2f:d9:dd:89:03:e1:c7:ed:10:05:45:
ec:cc:5e:ba:61:05:e4:f2:10:98:14:d9:e5:da:da:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:29:7F:9A:19:AD:F3:84:BD:53:D6:6C:DF:99:97:0F:AF:E1:57
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/edcpf5oZrfOEvVPWbN-Zlw-v4Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.236.0/23
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
Signature Algorithm: sha256WithRSAEncryption
a0:69:05:2b:a8:f8:8c:43:4a:11:d7:cc:82:75:cc:0d:a0:88:
e6:d5:ca:5d:0f:41:ed:d2:e0:4c:27:e6:62:17:27:4a:48:b4:
3c:fc:33:54:3f:77:73:07:87:b3:c6:18:77:a5:da:f6:ab:0c:
16:1a:51:44:22:db:7b:1f:f0:74:b7:6c:16:5c:13:e8:49:5c:
2f:79:ea:c5:e5:e1:9c:cc:2e:79:29:ba:49:af:23:1a:b6:76:
b5:fb:53:9c:ca:30:39:e3:f0:96:03:f0:93:3f:a0:4c:7c:c2:
a6:db:42:fe:5d:b4:32:67:ae:36:52:65:44:1c:71:b8:6e:09:
78:a2:df:8f:c6:64:54:9f:84:9c:3c:a5:b5:09:13:55:96:b0:
51:29:14:56:20:db:f7:8f:02:f6:99:f4:48:4b:87:c7:9b:8b:
81:a7:6d:75:d7:6d:3a:26:83:91:d1:e3:e4:1b:45:bc:8b:6e:
31:97:ca:00:52:e0:39:98:f1:fc:6a:be:cf:9c:7c:ef:11:5f:
4d:8a:36:34:7e:03:96:f1:c9:19:e9:38:81:38:23:7c:59:89:
86:f9:9a:b0:58:87:d3:dc:19:fb:e1:00:d2:37:aa:c9:2d:70:
c7:7f:24:c0:54:b2:04:82:01:20:3e:72:74:9c:7b:43:8b:a9:
42:e1:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net