Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/f_i9TZ-u100kvi_jpJbBqH9ENNo.roa
File: f_i9TZ-u100kvi_jpJbBqH9ENNo.roa (raw, json)
Hash identifier: YpBKb6NJIQ3/1O9re8+CwBEOCDTqKr5N5AGuS43hoew=
Subject key identifier: 7F:F8:BD:4D:9F:AE:D7:4D:24:BE:2F:E3:A4:96:C1:A8:7F:44:34:DA
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 018570CBD87C6E26505CD77CE941156C2011
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/f_i9TZ-u100kvi_jpJbBqH9ENNo.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206611
IP address blocks: 185.98.157.0/24 maxlen: 24
185.181.52.0/24 maxlen: 24
185.181.52.0/22 maxlen: 24
185.181.55.0/24 maxlen: 24
185.181.53.0/24 maxlen: 24
185.181.54.0/24 maxlen: 24
192.161.6.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d8:7c:6e:26:50:5c:d7:7c:e9:41:15:6c:20:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff8bd4d9faed74d24be2fe3a496c1a87f4434da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:5d:06:bf:9e:af:2a:de:ec:3a:83:eb:62:
79:66:57:1d:92:4a:6c:4c:db:42:0c:b9:e0:03:d7:
76:87:c3:3b:52:ca:b8:88:b8:72:b6:00:b9:80:c9:
1e:ab:dd:88:91:20:fc:f7:60:37:61:5d:3f:3f:b6:
70:ca:88:f7:b8:ce:c4:86:57:59:7a:f5:fe:05:db:
1b:db:91:a4:3c:7a:58:87:b1:84:d8:d9:b8:ef:ba:
96:6f:87:73:0a:af:e4:9b:7e:b2:c0:15:c9:9d:08:
fa:e4:7f:a4:c7:0b:05:b6:1f:8b:60:14:f5:20:4e:
2f:9d:aa:60:ee:9d:86:3b:e8:f4:48:1e:5c:c7:d4:
79:8b:f9:54:fb:25:c9:4b:2f:5a:a0:21:77:9d:06:
03:ea:bd:3f:8d:f7:2d:80:df:a7:cf:e0:9a:31:07:
b7:67:97:1b:3d:70:fe:15:15:df:52:b5:44:26:70:
66:37:6d:88:6a:84:d7:2a:28:e5:f5:31:c2:b3:0f:
86:42:9f:96:a4:a9:16:68:b3:dc:11:f1:22:39:52:
ba:cd:a7:ab:54:92:45:83:6b:8a:16:63:27:26:73:
cc:d8:d1:32:36:51:73:8e:ae:6a:98:ce:91:45:8f:
1a:2b:21:63:ce:8b:f7:1a:bb:24:a7:50:cd:2e:32:
93:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:BD:4D:9F:AE:D7:4D:24:BE:2F:E3:A4:96:C1:A8:7F:44:34:DA
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/f_i9TZ-u100kvi_jpJbBqH9ENNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.157.0/24
185.181.52.0/22
192.161.6.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:73:b4:c4:b5:f7:c0:a7:fb:70:41:54:e7:eb:fc:c7:a1:e5:
7a:b3:f6:9e:96:0f:90:81:aa:7d:02:d9:20:79:93:d1:00:b1:
0a:9e:14:42:85:f3:7b:c3:78:9f:11:a6:a1:26:98:1b:37:2b:
88:e4:11:40:c8:1e:36:b0:cd:02:50:ad:6b:82:37:05:0e:f5:
c5:f6:46:b4:57:7a:8d:76:b5:0b:f0:cd:f1:2c:b4:c4:d7:55:
0d:b3:6c:a1:86:a9:8e:76:b8:57:09:bb:0a:81:3e:23:b0:29:
16:26:49:fd:0b:51:c3:3a:7e:0e:de:5e:9a:9b:77:d3:f3:ca:
63:cb:7f:33:a8:a1:43:11:ee:03:50:84:ce:8a:72:5e:66:65:
da:54:07:d8:00:32:73:7d:dc:2a:c9:75:68:f8:f1:f7:b0:c6:
57:26:2b:32:9c:b8:60:87:8d:c5:d8:6a:a0:24:bd:53:30:80:
9e:ef:43:fe:35:50:c4:b1:87:20:a3:ce:84:91:8f:b9:bb:76:
4f:ee:35:85:94:9a:ae:e6:66:40:d2:21:18:1d:4f:17:34:2d:
f1:d6:e3:c6:fe:ac:b2:94:91:21:da:b6:b6:df:ef:6b:61:e7:
ac:6d:dd:33:54:15:bb:20:a2:60:87:cc:d8:47:80:f8:91:a3:
d8:5b:63:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net