Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/qu1f02nIHciNmAT2HBfTdjQpkBA.roa
File: qu1f02nIHciNmAT2HBfTdjQpkBA.roa (raw, json)
Hash identifier: UASr1d9sBCaZHasxITVGKC3TuBLACsUfSXcgZf2f9vg=
Subject key identifier: AA:ED:5F:D3:69:C8:1D:C8:8D:98:04:F6:1C:17:D3:76:34:29:90:10
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 01856BD37C0F5BDAD46C3A4105F7EDDF62A3
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/qu1f02nIHciNmAT2HBfTdjQpkBA.roa
Signing time: Sun 01 Jan 2023 05:34:59 +0000
ROA not before: Sun 01 Jan 2023 05:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204386
IP address blocks: 185.250.159.0/24 maxlen: 24
185.250.156.0/24 maxlen: 24
185.250.157.0/24 maxlen: 24
185.250.158.0/24 maxlen: 24
185.250.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:7c:0f:5b:da:d4:6c:3a:41:05:f7:ed:df:62:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Jan 1 05:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaed5fd369c81dc88d9804f61c17d37634299010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:2e:5f:95:fe:18:55:4c:7b:19:9f:94:01:
5a:5b:32:dd:86:b1:65:b1:78:9f:d1:55:c3:cc:87:
83:43:4c:14:e9:70:4a:19:ef:3c:89:01:04:ab:80:
56:76:54:49:d0:23:90:31:88:5f:e3:f5:ce:69:d7:
b3:7a:84:cf:42:c6:26:f2:ec:58:a5:cc:3d:16:76:
f9:14:d9:6e:de:79:34:40:37:f5:84:ed:3e:e8:20:
89:e0:94:13:71:40:42:24:de:16:11:f8:af:ef:52:
f8:9e:6f:56:cd:85:8f:40:6f:d5:51:63:97:ea:ab:
13:53:a5:68:17:9a:0b:6c:35:85:23:b3:0a:3e:19:
b4:c1:5d:dd:88:a2:86:c3:de:5b:b5:b3:65:8a:90:
f1:03:58:03:4c:fb:83:f9:33:09:34:bc:3c:f8:1a:
43:e5:4a:57:73:6c:87:b5:1a:17:5e:b6:50:19:c6:
fb:27:91:8e:cc:a4:20:cd:de:39:3f:c6:fa:9b:7f:
48:ba:37:38:23:66:52:a7:f2:00:25:8f:c4:a2:44:
9e:fc:85:cd:78:f6:57:21:9e:32:fc:d4:93:a8:80:
7f:d0:01:f2:89:2e:82:d4:cc:83:a7:8f:a5:f4:3e:
a3:19:05:06:ef:4a:34:d2:08:1c:dd:e2:f0:de:51:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:5F:D3:69:C8:1D:C8:8D:98:04:F6:1C:17:D3:76:34:29:90:10
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/qu1f02nIHciNmAT2HBfTdjQpkBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.156.0/22
Signature Algorithm: sha256WithRSAEncryption
20:b6:22:4d:8b:85:4b:d2:37:84:56:fa:f3:6c:40:a3:1c:46:
ee:a8:95:40:66:63:42:4b:c8:29:47:8a:a7:69:f3:9a:b8:b8:
20:9e:c1:8f:ec:17:bb:c8:bd:69:f8:1e:0a:15:19:1b:c4:97:
b0:5e:f9:97:5c:a3:65:94:95:b1:a8:dd:22:21:f3:a6:d4:64:
7c:dd:9f:c5:26:90:4a:4e:f8:05:ca:b4:35:33:27:db:10:64:
12:5a:7f:cb:7e:94:3d:15:88:3f:4e:b3:21:64:29:66:01:42:
5b:5f:3c:eb:ac:cb:a7:a6:13:d9:7a:ce:6e:70:91:07:89:e8:
fe:87:52:47:23:51:c2:e5:ff:ac:0f:c9:3d:7d:96:63:45:69:
97:03:f3:99:8d:d7:42:a8:38:66:f8:69:c5:21:65:54:30:4e:
48:a8:4d:64:e7:87:f4:9b:3b:93:47:3c:f0:b2:63:b5:91:5c:
d9:f0:0c:e8:fd:dc:44:be:b1:75:52:a1:39:fc:70:83:fc:1b:
85:b3:ae:dd:fb:84:8a:17:11:21:85:2c:1e:7a:b5:01:ac:f8:
a3:18:5d:d3:b8:b7:27:e1:ff:9c:97:67:94:40:c2:f7:22:5f:
62:0e:bc:e9:3d:e0:ad:b0:73:62:48:8b:85:87:2b:37:f2:06:
e9:76:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:00 2023 by rpki-client on console.sobornost.net