Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/gxw1vVysBd0qXXFnQoi3OyDhHJQ.roa
File: gxw1vVysBd0qXXFnQoi3OyDhHJQ.roa (raw, json)
Hash identifier: OkgxlWS1RgflmWdgdULly1g4T+1H6Uyvp+WozWy7XLE=
Subject key identifier: 83:1C:35:BD:5C:AC:05:DD:2A:5D:71:67:42:88:B7:3B:20:E1:1C:94
Certificate issuer: /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial: 01856F8B801D618BB1BE3A933BE14445E3B8
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/gxw1vVysBd0qXXFnQoi3OyDhHJQ.roa
Signing time: Sun 01 Jan 2023 22:54:51 +0000
ROA not before: Sun 01 Jan 2023 22:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60717
IP address blocks: 176.111.206.0/23 maxlen: 23
185.55.104.0/22 maxlen: 22
185.80.183.0/24 maxlen: 24
2a04:d340::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:80:1d:61:8b:b1:be:3a:93:3b:e1:44:45:e3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Validity
Not Before: Jan 1 22:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=831c35bd5cac05dd2a5d71674288b73b20e11c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:a4:3b:b1:2e:00:f6:de:15:ef:db:24:fe:
85:87:a0:6a:b7:11:3d:3a:3c:94:4b:65:7a:ed:53:
2f:0d:01:da:80:72:80:01:a8:64:af:66:07:ad:8a:
32:6f:93:f9:18:fb:87:dc:1d:f4:c0:a3:0b:b3:16:
53:03:c0:02:cd:b6:6e:18:4f:b3:5d:d7:70:59:c8:
c3:f8:38:6c:3d:c1:ac:48:75:f5:66:7c:35:75:62:
7b:39:22:29:29:f1:25:6e:6d:4a:09:44:17:61:00:
b4:1e:28:71:b0:7c:95:d5:33:34:8f:52:a3:70:79:
f7:0b:ea:a8:be:db:c1:b3:e3:fd:e4:43:6d:9d:55:
3d:bc:26:72:3f:45:56:c6:0c:73:61:4c:0b:08:f5:
c8:bd:70:2e:34:16:60:64:70:c2:94:24:66:13:b1:
a6:b3:20:e0:64:41:15:17:96:f5:e8:37:8c:e9:4c:
1a:ff:d6:40:3b:f1:59:33:2d:86:89:36:cc:65:62:
78:1a:8c:c3:04:fd:af:4b:d5:13:90:11:61:6d:19:
98:0d:4f:db:49:a3:c6:c3:34:f3:8a:a8:93:34:d6:
28:29:65:a5:77:cf:19:6b:89:7f:25:83:92:98:22:
59:56:d5:5a:32:db:64:3b:57:43:04:44:88:74:31:
c4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:35:BD:5C:AC:05:DD:2A:5D:71:67:42:88:B7:3B:20:E1:1C:94
X509v3 Authority Key Identifier:
keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/gxw1vVysBd0qXXFnQoi3OyDhHJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.206.0/23
185.55.104.0/22
185.80.183.0/24
IPv6:
2a04:d340::/29
Signature Algorithm: sha256WithRSAEncryption
4f:34:dd:2e:28:61:7b:fa:a9:3f:33:42:69:31:19:c0:d5:ba:
1a:48:a2:a4:69:64:05:7b:8e:28:17:03:d9:d3:a3:74:63:9a:
c0:af:4a:79:a0:67:5c:12:08:b3:7e:ce:1a:9f:c2:ce:7b:c9:
cc:63:d0:76:3e:b3:58:86:d6:b8:01:cc:ea:38:ee:70:f7:ae:
43:b6:93:ff:4c:8d:fc:3b:08:6d:2e:5b:03:b3:92:e7:dd:86:
77:56:c4:37:07:9a:b1:f9:71:08:d4:fb:22:10:a0:72:99:1a:
58:e3:ae:c9:0a:70:9c:23:e8:e7:31:32:6c:fe:73:29:a9:f0:
a6:47:42:bf:f4:89:ae:b4:f2:ff:bd:47:c7:57:e6:0e:d4:26:
6a:42:a1:7c:d2:d1:02:65:b9:81:db:d0:84:a8:39:55:5e:ed:
60:9b:db:73:03:fd:be:d5:67:aa:5a:8f:9c:04:7a:d4:c7:8e:
ce:0f:6e:a7:53:bd:b7:cc:61:fa:75:5a:e4:d6:c2:79:65:da:
c0:31:8f:73:64:70:2f:fd:3a:4f:80:94:6c:6c:1c:26:6d:6e:
68:59:3a:f4:be:61:6e:7d:70:dd:f4:a7:de:d6:6b:6c:95:88:
a2:ed:3b:cc:b8:2a:ea:d0:20:4a:02:e5:ca:bb:15:e3:0c:25:
ec:a1:b5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:08 2024 by rpki-client on console.sobornost.net