Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/2-NEU2cdhqA9f7ldklj7nRCuA-s.roa
File: 2-NEU2cdhqA9f7ldklj7nRCuA-s.roa (raw, json)
Hash identifier: vl3hhPBdIM3yGEklgttlaiaMtrQb0nqlCUG+QflPuEA=
Subject key identifier: DB:E3:44:53:67:1D:86:A0:3D:7F:B9:5D:92:58:FB:9D:10:AE:03:EB
Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial: 01857203456A4543EA2A4E580F3BDA45F098
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/2-NEU2cdhqA9f7ldklj7nRCuA-s.roa
Signing time: Mon 02 Jan 2023 10:24:55 +0000
ROA not before: Mon 02 Jan 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202625
IP address blocks: 185.158.196.0/22 maxlen: 22
2a07:af00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:45:6a:45:43:ea:2a:4e:58:0f:3b:da:45:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Validity
Not Before: Jan 2 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbe34453671d86a03d7fb95d9258fb9d10ae03eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:d3:8f:12:72:8c:cd:10:2a:e1:33:8b:50:
a8:28:c5:4e:60:99:fb:83:fb:b8:d2:39:43:2c:34:
d3:0a:7c:9d:19:99:1a:de:42:d3:13:bc:bb:02:4b:
b9:49:5f:7a:9c:98:10:e1:45:ff:f3:2c:90:f6:ee:
05:44:82:65:de:bf:cb:9b:e8:7c:15:51:a2:ab:c9:
7a:39:60:fc:ea:4c:a8:a5:27:d7:8e:ec:0b:c8:d8:
fd:08:3f:2c:7a:6a:e9:68:e9:9d:66:4c:a6:c8:42:
6a:8e:2b:44:4d:eb:45:f2:44:04:bb:64:60:b6:1a:
03:a0:ae:db:96:6b:0b:14:c1:2f:f7:1e:f3:91:97:
b7:04:51:7b:dc:fb:ef:d1:ce:93:af:2a:0c:d8:b4:
28:d5:78:c4:bf:8c:94:36:e8:a8:bc:0c:e6:5d:0e:
a3:de:5d:f3:40:8d:d5:50:ad:fa:56:ab:76:91:ed:
a6:7d:da:1a:7b:7a:e0:9a:f2:24:e4:b2:ab:04:72:
bc:69:5d:0a:62:3d:7d:94:10:f5:44:f1:75:28:4f:
c2:72:e0:38:a6:e3:c0:93:a6:c3:b3:9a:84:b9:b1:
1b:07:fe:0b:f7:1f:f7:50:a4:9d:67:73:f7:74:bd:
1f:98:26:2f:4b:c8:69:42:15:09:0d:62:9a:9f:3e:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E3:44:53:67:1D:86:A0:3D:7F:B9:5D:92:58:FB:9D:10:AE:03:EB
X509v3 Authority Key Identifier:
keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/2-NEU2cdhqA9f7ldklj7nRCuA-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.196.0/22
IPv6:
2a07:af00::/29
Signature Algorithm: sha256WithRSAEncryption
0f:f0:6f:82:ec:5c:09:1b:34:5f:29:ee:81:6c:50:fd:3e:d9:
a2:64:ba:12:c4:9d:1b:12:ba:8f:4d:32:9a:dc:40:34:08:eb:
35:45:e3:9d:11:56:fd:3b:05:af:77:de:ed:61:75:fa:33:51:
41:e2:01:e3:82:4d:9f:30:83:5b:c1:cc:7d:0e:94:91:0f:64:
d1:43:e0:28:75:b9:ce:f9:0c:77:0a:8f:78:79:83:19:7f:a6:
b2:28:7d:01:5d:ee:3b:35:cc:36:ae:d0:b9:b6:77:57:d1:0a:
91:d1:53:ab:bc:1c:42:e0:66:71:11:3d:d7:90:80:eb:3b:77:
51:62:57:35:2b:f4:51:e2:7b:f2:c3:19:24:70:56:0a:9d:42:
d9:3e:f3:94:00:ef:a9:5a:df:e7:1c:13:79:71:92:94:ef:18:
d1:3a:ec:a7:b7:b1:f3:c5:a1:bb:e4:ec:7b:77:e4:6c:90:90:
e6:11:17:8d:78:26:54:f9:d4:f4:de:e9:3b:c6:40:1a:a3:d0:
c8:26:2f:94:e0:d1:05:35:eb:88:e6:20:92:04:ab:7b:89:1a:
21:3c:5a:5f:8b:b5:8d:a0:4e:9b:20:b4:26:f3:6f:53:a6:71:
4d:a0:bd:21:71:87:3b:79:f6:ab:ea:88:b4:8c:63:68:91:49:
8d:e2:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:15 2024 by rpki-client on console.sobornost.net