Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/XjBBcfgW1xgQJi6Gq4b6Ky2NS6A.roa
File: XjBBcfgW1xgQJi6Gq4b6Ky2NS6A.roa (raw, json)
Hash identifier: pTud1b2EdZ6hiOCJEcOmoxEEANfaX7b7Ulg47kSHqT8=
Subject key identifier: 5E:30:41:71:F8:16:D7:18:10:26:2E:86:AB:86:FA:2B:2D:8D:4B:A0
Certificate issuer: /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial: 01856FC29224CD96F8EEAB974144ABC94BD5
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/XjBBcfgW1xgQJi6Gq4b6Ky2NS6A.roa
Signing time: Sun 01 Jan 2023 23:55:00 +0000
ROA not before: Sun 01 Jan 2023 23:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 194.146.187.0/24 maxlen: 24
194.146.184.0/24 maxlen: 24
194.146.185.0/24 maxlen: 24
194.146.186.0/24 maxlen: 24
2001:67c:2af4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:92:24:cd:96:f8:ee:ab:97:41:44:ab:c9:4b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Validity
Not Before: Jan 1 23:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e304171f816d71810262e86ab86fa2b2d8d4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:99:a3:ec:03:43:03:b8:4e:48:82:0e:0b:a7:
5d:c5:7b:1f:fa:d3:63:d3:f1:25:f0:a2:81:a3:ae:
04:87:d8:df:4c:df:65:f3:2e:23:11:aa:ee:55:f5:
5b:28:ae:35:76:d8:0b:e7:8b:95:cb:11:92:c3:f9:
71:dd:a2:9d:9c:51:34:74:63:2e:80:6a:39:39:36:
4f:0d:a7:81:90:d5:27:4b:cc:34:be:e9:ef:71:60:
e7:a6:fc:e4:34:ea:55:d7:65:a7:f4:5b:fa:f4:12:
36:61:57:89:47:c8:d3:14:1a:5e:9f:fd:bf:cd:3b:
c9:f8:34:10:27:61:d4:db:4e:6b:b3:12:56:0d:81:
bc:8b:68:eb:56:1d:ae:d8:d6:86:dc:1b:4c:ad:69:
ce:ab:8e:5b:e2:a5:7c:86:fa:40:f0:80:8e:a6:0c:
8f:f0:7e:f7:e3:0c:20:bb:10:46:24:ed:90:d7:bd:
55:37:07:7c:83:2c:6d:3f:98:33:19:59:b3:ac:45:
14:38:06:23:11:03:64:b2:46:b0:55:21:63:c4:9b:
3b:1b:7b:24:58:65:e2:ce:7e:19:bf:2f:87:fa:24:
0f:50:83:66:93:ea:7c:42:0b:5b:91:4e:6c:8c:13:
6d:36:bf:59:e6:c6:60:d7:7d:ab:45:9f:11:fb:09:
73:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:30:41:71:F8:16:D7:18:10:26:2E:86:AB:86:FA:2B:2D:8D:4B:A0
X509v3 Authority Key Identifier:
keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/XjBBcfgW1xgQJi6Gq4b6Ky2NS6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.184.0/22
IPv6:
2001:67c:2af4::/48
Signature Algorithm: sha256WithRSAEncryption
84:d0:2e:21:91:3d:ce:c0:4d:d1:c6:03:f1:34:0e:f9:02:cb:
24:df:d6:66:fd:a4:7b:4f:49:e0:d4:a7:61:1a:ce:9f:67:28:
f2:47:47:46:4c:4d:7a:0c:81:30:00:49:cf:97:f9:75:18:38:
2f:9c:cc:bd:29:f3:e8:ac:3e:af:ba:ab:65:f7:04:44:4b:d8:
d7:0b:31:d0:c4:80:b6:8c:91:f3:b3:f3:27:31:3c:e1:d6:13:
fc:26:4b:d3:91:1b:a3:25:94:50:57:ab:df:38:f4:fe:7a:c6:
35:d1:52:e5:8d:cb:4d:e6:41:92:ae:98:0a:0a:5d:5d:7a:68:
12:4e:cb:6c:4d:9d:c8:07:2d:85:33:af:cd:9e:2e:75:7c:87:
a3:40:bb:90:c3:57:2d:58:7e:3a:83:1b:20:1f:69:f1:9d:b1:
36:82:eb:99:c2:cb:58:0d:d7:c1:b3:08:cf:36:c4:c2:c8:59:
d3:d3:90:ce:e7:3f:a5:54:a2:78:67:f8:89:d7:68:fd:3a:1f:
a8:04:93:be:48:f3:96:01:c7:ed:d9:a4:d4:43:20:44:00:aa:
6b:dd:de:02:7a:22:5c:c0:c1:26:2d:08:9c:7c:4a:08:39:96:
17:db:53:b0:10:5e:7a:64:c7:1d:f7:6a:0f:16:2f:85:de:25:
f6:d9:06:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:03 2024 by rpki-client on console.sobornost.net