Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/byO6tevoDgVXcl2jmIMWZU_Or_o.roa
File: byO6tevoDgVXcl2jmIMWZU_Or_o.roa (raw, json)
Hash identifier: Xyflk6kSq0KVtV1YZ+Y3AGqCITEiUCopG+2r7ftRPyk=
Subject key identifier: 6F:23:BA:B5:EB:E8:0E:05:57:72:5D:A3:98:83:16:65:4F:CE:AF:FA
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 018A8E7903BF8D59342A1E54AA506C23EB90
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/byO6tevoDgVXcl2jmIMWZU_Or_o.roa
Signing time: Wed 13 Sep 2023 12:16:50 +0000
ROA not before: Wed 13 Sep 2023 12:16:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29104
IP address blocks: 192.54.144.0/24 maxlen: 24
185.116.132.0/22 maxlen: 22
185.116.134.0/24 maxlen: 24
37.35.0.0/21 maxlen: 21
193.56.125.0/24 maxlen: 24
37.35.6.0/24 maxlen: 24
193.56.130.0/23 maxlen: 23
193.56.130.0/24 maxlen: 24
193.56.131.0/24 maxlen: 24
2a00:4f40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:79:03:bf:8d:59:34:2a:1e:54:aa:50:6c:23:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Sep 13 12:16:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f23bab5ebe80e0557725da3988316654fceaffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:78:06:71:77:47:64:e4:3d:29:a8:cd:e4:
85:33:96:89:8e:8e:82:7c:cf:4f:9a:f2:01:65:5e:
ef:32:54:65:54:60:bf:30:e8:b5:e9:30:45:c1:b3:
d3:4e:81:cb:c9:1c:52:60:86:85:d6:1c:fb:34:8e:
d3:b0:4f:d2:3f:e9:62:38:b5:23:6f:1a:af:39:f8:
44:0a:b7:c9:3a:a3:d0:4f:27:06:e5:31:80:5c:81:
69:fc:9b:07:e0:96:c1:b6:40:de:07:f7:9d:33:91:
0f:9d:8c:6f:47:d7:e0:11:ed:a1:2b:15:7d:27:59:
01:21:c8:d8:24:98:f7:29:87:95:eb:7c:eb:90:ff:
54:8c:cc:b3:09:ab:ce:8b:95:6e:f1:a3:5e:1d:f7:
9f:fc:8a:f7:c8:db:55:68:57:21:eb:52:87:98:9b:
ec:a5:04:36:42:86:09:be:ec:42:7e:1b:a5:c4:7a:
35:61:3c:14:ad:d0:3d:9c:12:f0:9b:50:fe:e3:35:
78:69:01:e8:4b:36:2b:8e:b3:f3:a0:27:96:ea:49:
bc:da:44:70:83:fa:88:e2:96:89:fb:31:ed:38:69:
52:7a:da:fb:8c:d0:1c:c7:fc:7d:4f:fa:e4:f2:4a:
7a:e0:15:88:b3:f2:8e:5f:57:1a:1b:5b:b7:e0:02:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:BA:B5:EB:E8:0E:05:57:72:5D:A3:98:83:16:65:4F:CE:AF:FA
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/byO6tevoDgVXcl2jmIMWZU_Or_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.0.0/21
185.116.132.0/22
192.54.144.0/24
193.56.125.0/24
193.56.130.0/23
IPv6:
2a00:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
3b:5f:b0:26:c1:fb:19:c3:28:fb:ab:e6:b3:3b:03:bf:65:da:
19:8a:c5:ea:5f:44:a3:a7:14:19:4f:74:04:b6:7e:45:7e:b3:
35:59:df:04:c4:8e:7a:0d:05:d5:39:bc:50:28:d8:23:74:80:
17:5b:2a:f9:44:e6:09:e7:dd:66:ab:21:10:61:80:91:90:a7:
bd:6c:00:9d:17:1d:08:50:0e:c8:97:08:6a:30:fd:5b:b1:5c:
9b:be:47:14:4d:5c:30:dc:8d:34:80:7b:69:cc:37:7f:d5:00:
9f:48:c4:05:35:59:40:b3:86:c9:1a:48:78:4d:f6:b5:2f:a4:
fe:09:fe:23:f0:7c:51:4d:2a:ee:42:58:d6:a6:77:67:33:eb:
8a:dc:90:f4:9d:62:62:99:e9:d7:dd:aa:38:18:29:da:7f:d3:
65:d2:07:ad:b6:59:ca:37:bd:bf:73:47:66:ec:60:fd:26:0d:
c8:51:24:c8:2f:5a:de:8d:99:fe:d7:1e:12:a9:b1:09:b8:0e:
94:14:ec:81:6b:78:c7:bd:a8:ab:7c:e9:95:37:5a:40:9f:4d:
28:4d:f5:e9:a6:0d:19:bb:86:7b:cb:e1:2f:65:bd:52:67:ff:
47:a0:fd:cf:23:17:fa:5c:cf:1a:7e:80:9e:76:2a:a2:df:cb:
dc:2e:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:28 2024 by rpki-client on console.sobornost.net