Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/6vR-BF35fAMezqIBsGgVwgrEIJM.roa
File: 6vR-BF35fAMezqIBsGgVwgrEIJM.roa (raw, json)
Hash identifier: LV6WtYMQ6qSuznA3GjfuHOYlRgwrLCA3ZQXTMf16Mx0=
Subject key identifier: EA:F4:7E:04:5D:F9:7C:03:1E:CE:A2:01:B0:68:15:C2:0A:C4:20:93
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 01856B9C6EDEDBBC350F7B0C2B8797A3BB84
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/6vR-BF35fAMezqIBsGgVwgrEIJM.roa
Signing time: Sun 01 Jan 2023 04:34:52 +0000
ROA not before: Sun 01 Jan 2023 04:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42334
IP address blocks: 185.236.205.0/24 maxlen: 24
185.236.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:9c:6e:de:db:bc:35:0f:7b:0c:2b:87:97:a3:bb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jan 1 04:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf47e045df97c031ecea201b06815c20ac42093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0c:85:0e:94:03:14:9b:4e:d5:57:1f:46:b5:
72:ab:80:db:bc:2e:fd:4a:01:d2:06:a1:28:20:76:
34:e0:a6:bb:09:96:7a:fc:40:61:f8:15:af:7d:85:
ed:99:04:3d:10:ea:a5:48:4f:e2:73:eb:40:ce:cc:
bf:fd:28:c5:a0:03:75:c4:7f:88:49:64:2c:73:27:
f6:e6:78:47:2f:29:9c:8e:89:0e:8f:a7:36:76:b9:
f4:29:c0:dd:79:da:9d:38:e6:96:bd:15:03:1b:79:
e9:60:76:54:df:5f:04:c1:b4:6b:ad:d2:82:6e:0d:
4c:06:2b:8a:b8:99:b0:61:53:03:e9:f2:cb:fc:09:
2d:2b:5d:a7:00:e2:52:54:96:55:66:6f:29:7f:82:
4d:b8:90:a1:00:bc:3a:ba:40:a2:2e:d3:a3:56:92:
68:3f:d0:e8:5f:e9:fe:35:35:d8:82:e2:3e:2a:89:
13:39:b4:2c:a8:0a:99:6d:6b:31:4c:20:fc:1c:f7:
33:84:e6:bc:e4:9c:dc:36:88:8d:c3:9b:90:e7:8c:
80:9d:1f:de:0e:f7:1e:8b:1b:b7:ce:14:89:65:cb:
90:12:0b:1f:7e:68:2a:3f:7a:95:31:52:e3:a3:89:
c2:8b:3a:07:b9:43:09:09:47:20:7f:c3:80:1c:86:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:7E:04:5D:F9:7C:03:1E:CE:A2:01:B0:68:15:C2:0A:C4:20:93
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/6vR-BF35fAMezqIBsGgVwgrEIJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.204.0/23
Signature Algorithm: sha256WithRSAEncryption
34:ba:a5:a8:86:eb:84:9e:14:57:48:e5:83:27:89:88:ca:66:
0b:f5:32:48:a9:b0:83:a4:15:37:98:41:3a:af:95:08:cd:21:
1b:a7:ce:9f:2c:0e:07:ff:d3:42:fb:5f:ee:54:2e:95:e0:33:
1a:b4:cf:88:b9:9d:12:08:1f:53:36:ad:09:33:e0:a4:82:e2:
66:1c:33:a2:be:54:20:70:5d:95:95:b3:c3:54:71:bc:34:d5:
ff:d9:f3:75:2f:b9:3c:b9:8a:dd:69:78:d7:eb:cf:8f:f9:73:
1b:40:31:12:6d:ee:79:e5:51:1d:bf:bf:56:48:db:c3:2f:c7:
cf:18:ca:f9:ff:4b:aa:b9:6e:28:97:bd:e7:84:d8:cc:83:00:
8f:6d:b4:40:0e:42:0e:dc:89:54:d3:2e:3f:9b:3d:29:0a:8e:
7c:3b:4b:53:63:cc:2e:da:df:90:8c:df:cc:9c:6b:70:b1:a7:
41:17:ad:ea:e9:b4:7f:53:17:34:71:1c:ed:cc:ae:e1:23:a1:
e1:5f:01:ca:84:f5:41:fc:24:1a:91:8c:2c:80:df:d9:1e:1a:
66:13:3d:59:5c:e3:b8:82:eb:eb:d2:50:d1:b8:dd:06:37:3d:
1e:6b:1a:8a:f0:1b:e4:52:a2:93:2c:37:be:6c:05:65:6e:da:
e3:0c:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:52 2024 by rpki-client on console.sobornost.net