Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/b6BGQ3Vm5ngZnHT9W_7lZQjFahk.roa
File: b6BGQ3Vm5ngZnHT9W_7lZQjFahk.roa (raw, json)
Hash identifier: b3UEuIscFenEtQbuZ9GKyX9XLUwk1mS/qyOK6mBxoSE=
Subject key identifier: 6F:A0:46:43:75:66:E6:78:19:9C:74:FD:5B:FE:E5:65:08:C5:6A:19
Certificate issuer: /CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Certificate serial: 018AF038536F003853C486A74B1902290E98
Authority key identifier: 0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/b6BGQ3Vm5ngZnHT9W_7lZQjFahk.roa
Signing time: Mon 02 Oct 2023 11:48:57 +0000
ROA not before: Mon 02 Oct 2023 11:48:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206360
IP address blocks: 185.220.136.0/30 maxlen: 30
185.220.136.0/24 maxlen: 24
185.220.139.0/24 maxlen: 24
185.220.138.0/24 maxlen: 24
185.220.137.0/24 maxlen: 24
185.220.136.32/28 maxlen: 28
185.220.137.4/30 maxlen: 30
185.220.136.16/29 maxlen: 29
185.220.137.8/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:38:53:6f:00:38:53:c4:86:a7:4b:19:02:29:0e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b42fb4831c1daf2d963c47638d703086eeca8de
Validity
Not Before: Oct 2 11:48:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa046437566e678199c74fd5bfee56508c56a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:7d:bc:ab:86:59:bc:a6:81:0d:10:66:98:
95:bb:5a:e2:f5:93:6d:43:b0:ae:73:28:26:bb:83:
05:bb:61:d2:ed:f3:b9:80:e0:44:10:11:27:f1:de:
9b:e7:3c:c7:5f:3a:42:2e:4a:f3:4b:1b:3d:04:e4:
70:65:9c:74:96:39:27:4c:24:be:92:cb:08:1d:a7:
a6:3a:12:21:32:37:6f:41:e5:21:b4:a5:9b:90:2c:
d0:15:02:42:83:9e:09:6c:87:43:98:a7:7d:7a:a6:
94:e0:a1:f1:0e:2d:6e:a1:6a:9a:ee:ad:c8:b5:9e:
1b:14:9a:6e:b9:06:c5:c5:62:1d:40:b6:f6:2e:b0:
61:33:e2:6c:3e:7c:2a:1d:01:25:1c:f8:39:29:d9:
ad:60:e1:3b:bf:93:a8:36:e9:cd:d2:70:71:a9:71:
9c:2a:3b:51:56:3f:45:cf:21:bf:17:86:08:85:54:
14:57:f8:0d:b1:8b:0a:6f:2b:9f:e6:aa:95:2c:a3:
e4:a4:ea:44:57:92:06:1f:37:06:f1:d2:b1:6f:d1:
ba:6c:6e:54:65:eb:10:c7:87:1e:1d:28:d4:78:c6:
58:0f:8f:fb:d6:7b:64:de:2a:9a:e7:7b:c9:9d:5d:
10:d3:f3:2a:d9:6e:47:b5:98:08:ed:98:e1:5a:cf:
fd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A0:46:43:75:66:E6:78:19:9C:74:FD:5B:FE:E5:65:08:C5:6A:19
X509v3 Authority Key Identifier:
keyid:0B:42:FB:48:31:C1:DA:F2:D9:63:C4:76:38:D7:03:08:6E:EC:A8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0L7SDHB2vLZY8R2ONcDCG7sqN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/b6BGQ3Vm5ngZnHT9W_7lZQjFahk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f6743-0b22-4312-9c1a-b3663a345518/1/C0L7SDHB2vLZY8R2ONcDCG7sqN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.136.0/22
Signature Algorithm: sha256WithRSAEncryption
af:70:60:89:ee:1b:d2:c3:f4:3a:f0:9d:3b:84:b1:45:3c:43:
aa:3f:57:b4:8a:4f:51:36:a8:bb:3d:9c:1b:7e:f2:db:3d:0d:
90:d0:e9:b8:fe:d7:26:67:09:1c:5f:86:ee:ea:3b:8f:48:44:
a1:4a:4d:48:ef:34:1b:e6:50:a8:a4:70:38:47:ba:ef:38:b5:
9a:20:ca:a2:91:85:96:07:f7:dd:79:24:17:20:08:b7:da:59:
59:21:50:4e:89:91:56:72:30:4a:ca:f3:74:e1:2e:de:1f:bc:
42:2e:73:cf:dd:f4:03:bd:d1:ef:d7:75:90:2b:9e:ca:87:2b:
7b:9d:e6:35:39:69:43:7c:08:4f:9a:e7:b0:8c:e4:dd:23:11:
52:30:de:68:3f:58:40:78:29:33:ea:ba:12:99:5d:be:55:6c:
e7:62:2a:60:7b:7a:3d:2f:66:9d:7b:23:ca:1b:40:f8:60:bf:
73:da:7d:8f:99:c9:2e:b8:98:9a:77:f8:a1:56:60:40:a8:05:
e4:41:95:12:54:39:82:d8:b4:3d:86:30:cd:94:45:93:ba:f8:
61:25:90:06:0d:a0:fd:96:b4:9a:3e:2a:70:4e:df:44:2c:7b:
c8:bf:67:c8:e8:b4:e8:f2:54:55:16:45:e4:56:ff:02:47:ca:
e4:04:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net