Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/3pvwUkSIm2O7m8DUJOA16mV_tx8.roa
File: 3pvwUkSIm2O7m8DUJOA16mV_tx8.roa (raw, json)
Hash identifier: cCg8hM8KvjwGjlTyg05CwwQdzA5kVCBss1jTGhY/8Hs=
Subject key identifier: DE:9B:F0:52:44:88:9B:63:BB:9B:C0:D4:24:E0:35:EA:65:7F:B7:1F
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 018CCA9999C0712458891EF0989482A9B74C
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/3pvwUkSIm2O7m8DUJOA16mV_tx8.roa
Signing time: Tue 02 Jan 2024 14:35:13 +0000
ROA not before: Tue 02 Jan 2024 14:35:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50231
IP address blocks: 81.30.136.0/23 maxlen: 23
81.30.140.0/22 maxlen: 22
193.150.44.0/22 maxlen: 22
193.150.42.0/23 maxlen: 23
109.95.232.0/21 maxlen: 21
193.34.220.0/22 maxlen: 22
193.17.54.0/24 maxlen: 24
109.196.48.0/20 maxlen: 20
193.27.210.0/23 maxlen: 23
91.123.208.0/20 maxlen: 20
213.5.136.0/21 maxlen: 21
80.65.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 10:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:99:c0:71:24:58:89:1e:f0:98:94:82:a9:b7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Jan 2 14:35:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de9bf05244889b63bb9bc0d424e035ea657fb71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:d1:97:c2:7d:fd:45:0f:b2:9b:56:8c:29:
01:5c:fc:68:2f:7f:bf:08:45:cf:3f:c6:53:94:22:
42:42:90:12:3b:64:5a:cb:c9:ca:f2:60:16:92:04:
42:a3:88:1a:62:e0:87:04:bd:c3:e8:e9:ad:de:8c:
d6:ca:f0:a3:8f:c9:75:2a:2e:ff:bf:96:9c:17:cc:
c5:ef:8d:51:fc:49:0b:72:2b:26:59:d4:bb:98:83:
47:0e:a1:b7:5c:d3:37:e6:31:c6:83:26:ec:43:de:
c2:60:5c:54:20:e2:bc:ca:c0:1c:b7:19:86:0d:a7:
a2:ae:fc:51:9a:56:4b:e9:1b:2f:13:20:4e:35:d1:
01:22:b3:e0:8c:e4:c3:58:ea:73:9c:08:58:39:06:
9b:37:bc:4b:b0:0f:97:16:71:ab:c9:85:80:9a:c3:
de:96:c7:b9:fa:53:89:bf:05:e4:e9:3c:88:d3:7b:
cc:cf:07:00:79:86:9a:44:11:9c:fe:b0:a8:8e:1c:
8b:fc:66:7a:f2:ff:d9:29:f0:5c:30:00:aa:15:1d:
26:18:30:a7:6b:5c:27:08:d4:aa:5e:23:27:fb:d2:
f2:2d:8e:4d:0d:00:dd:a9:2a:94:49:4c:43:57:0c:
4c:9e:a0:1f:a4:36:91:29:d7:19:43:f5:8b:30:4b:
bd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:F0:52:44:88:9B:63:BB:9B:C0:D4:24:E0:35:EA:65:7F:B7:1F
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/3pvwUkSIm2O7m8DUJOA16mV_tx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.212.0/22
81.30.136.0/23
81.30.140.0/22
91.123.208.0/20
109.95.232.0/21
109.196.48.0/20
193.17.54.0/24
193.27.210.0/23
193.34.220.0/22
193.150.42.0-193.150.47.255
213.5.136.0/21
Signature Algorithm: sha256WithRSAEncryption
22:b8:ed:ee:87:5f:36:f9:99:d5:48:7e:ed:48:28:d9:55:e8:
83:85:a5:6e:ed:18:45:c1:4c:a0:72:ea:a7:7c:61:1c:3b:80:
59:34:7e:95:c0:8f:be:59:31:89:53:d4:c0:4e:79:01:1e:9f:
5b:e7:97:23:ba:e8:75:5d:f1:c8:8c:07:70:15:1b:43:de:db:
2b:53:b1:b0:8d:9c:53:ca:76:04:92:5c:1f:80:42:66:97:17:
f5:0a:79:50:96:14:30:f9:4d:fa:6b:41:c8:cd:cd:f3:00:21:
4e:50:68:0e:11:1b:37:2c:ec:ae:45:2d:10:68:bb:b8:ec:4e:
91:c6:a1:af:95:c6:a7:7a:3e:29:55:91:cc:1a:40:26:be:26:
7e:5a:13:20:94:ed:5c:7d:48:99:10:47:73:f5:0c:1b:33:c0:
10:b3:48:b3:0d:92:88:d9:ed:ec:ab:2d:21:33:7a:80:85:ef:
4c:0a:39:87:cd:c3:d2:ed:4c:01:da:52:f0:52:a7:46:c7:11:
d8:52:27:2f:d8:95:6b:37:37:b3:e3:d1:4c:73:4a:3e:7b:da:
9c:3a:14:32:f3:96:08:50:08:1c:fe:20:01:53:87:fa:9b:4b:
c5:62:d2:bd:19:12:d4:7b:a4:b8:bc:9d:7b:7f:a4:ef:c9:92:
cc:38:4d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 14:44:30 2024 by rpki-client on console.sobornost.net