Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/M57ebYqRf4jMsz2A4k3J49MrTrc.roa
File: M57ebYqRf4jMsz2A4k3J49MrTrc.roa (raw, json)
Hash identifier: c0CdcAVpd461Nn5UNVGQ+gIuRliTEQEN4a7tJslYKoA=
Subject key identifier: 33:9E:DE:6D:8A:91:7F:88:CC:B3:3D:80:E2:4D:C9:E3:D3:2B:4E:B7
Certificate issuer: /CN=102a93b92f5845be62a6241f23cfadb14cb16994
Certificate serial: 01856F7973F08102F417DC82083583AECDD5
Authority key identifier: 10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/M57ebYqRf4jMsz2A4k3J49MrTrc.roa
Signing time: Sun 01 Jan 2023 22:35:08 +0000
ROA not before: Sun 01 Jan 2023 22:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57507
IP address blocks: 158.255.192.0/20 maxlen: 24
185.152.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:73:f0:81:02:f4:17:dc:82:08:35:83:ae:cd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=102a93b92f5845be62a6241f23cfadb14cb16994
Validity
Not Before: Jan 1 22:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=339ede6d8a917f88ccb33d80e24dc9e3d32b4eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:f2:56:35:f5:6f:85:85:f3:4e:b8:49:d6:
7a:ac:24:60:64:5b:6d:05:6f:ad:6a:6a:7f:b6:c4:
8c:04:1d:e0:a0:29:26:ae:15:d5:89:5f:f0:0b:b6:
a7:ce:4a:e1:d1:59:bc:f2:cd:7e:4c:e1:40:9d:0f:
ae:34:d6:f1:8e:d7:8f:22:21:38:1b:34:63:b2:e0:
11:6b:da:11:f3:e3:cd:53:ab:73:6f:85:a1:03:4d:
83:30:f1:31:7a:c2:d6:50:43:0e:f9:9e:63:b6:f5:
ff:62:49:d4:6a:85:5b:e2:93:99:03:82:49:5c:09:
d5:f7:ea:14:d2:d0:32:1d:6c:a0:e2:10:77:05:e0:
17:11:9a:d7:20:18:de:78:d2:79:fc:8d:c5:7d:85:
70:0b:29:7a:45:1d:52:d4:83:08:e9:a8:e0:1b:5c:
48:26:14:ae:81:7c:7f:06:f0:b1:8b:97:18:72:fc:
4e:26:2e:16:5c:55:a6:db:7f:33:af:df:ab:43:35:
28:15:f2:34:e8:c0:a2:e4:f1:c2:fb:86:8a:67:67:
fb:36:80:79:c6:9b:7f:3e:e7:6e:c3:63:cd:f5:34:
a9:e4:a9:61:da:f4:a4:c5:13:27:25:3d:99:81:29:
33:f2:cc:c8:29:12:6f:49:8d:5c:98:25:45:25:ec:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:DE:6D:8A:91:7F:88:CC:B3:3D:80:E2:4D:C9:E3:D3:2B:4E:B7
X509v3 Authority Key Identifier:
keyid:10:2A:93:B9:2F:58:45:BE:62:A6:24:1F:23:CF:AD:B1:4C:B1:69:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/M57ebYqRf4jMsz2A4k3J49MrTrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f1b41f-a44c-44e1-b8d2-37cb8a57087b/1/ECqTuS9YRb5ipiQfI8-tsUyxaZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.255.192.0/20
185.152.40.0/22
Signature Algorithm: sha256WithRSAEncryption
78:4d:04:9d:dd:92:64:c1:df:37:54:f0:52:0e:2b:9a:9d:02:
52:b4:20:dc:dc:e9:62:a4:b7:98:52:04:77:74:64:cb:04:d2:
07:e3:1b:0e:e9:81:bb:7c:33:90:86:42:6c:65:97:9c:ff:c8:
50:12:8a:2f:3e:3d:ff:41:0a:a0:bc:cd:21:f4:8a:08:5c:60:
92:90:cc:7a:e1:e9:1a:b4:ab:7e:17:1a:31:7e:94:e2:a6:1c:
13:98:82:d1:66:1a:dc:f4:31:44:9f:8e:4c:01:37:a4:2a:2b:
56:ce:43:5d:a6:a8:8a:7b:f4:cc:e6:47:c5:c0:ee:7b:fc:ae:
94:47:e9:18:53:52:bf:74:62:0a:c8:79:92:12:93:e2:41:de:
ee:c3:ab:f9:bd:c6:a3:c4:ed:22:44:a1:88:7e:64:e3:cd:42:
dc:aa:4d:eb:d4:97:b8:28:09:84:f4:66:b0:fb:de:9e:81:3e:
eb:b8:e1:29:c8:c7:08:e0:d3:b0:5d:6f:ca:f4:e3:42:3a:97:
16:c1:3d:d9:09:ee:cd:93:79:9a:6d:9d:7a:ec:7f:35:4c:6c:
18:74:6c:a6:6d:68:f1:a6:d1:9b:c5:10:44:c9:ee:54:f0:55:
2e:25:e2:fd:66:36:57:bc:a3:f8:ad:29:fa:ce:c6:98:52:08:
9f:86:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:07 2024 by rpki-client on console.sobornost.net