Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/0meAji0ADFC_rE_UC4pB6bDTqAw.roa
File: 0meAji0ADFC_rE_UC4pB6bDTqAw.roa (raw, json)
Hash identifier: 5nrQNt92KrKPHVYZVbCUYd5QsYqo7QVKeT/ga+FAhSk=
Subject key identifier: D2:67:80:8E:2D:00:0C:50:BF:AC:4F:D4:0B:8A:41:E9:B0:D3:A8:0C
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018AACFFF56B5E5E9DDAC4BD03AC95CC2ED5
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/0meAji0ADFC_rE_UC4pB6bDTqAw.roa
Signing time: Tue 19 Sep 2023 10:32:50 +0000
ROA not before: Tue 19 Sep 2023 10:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44735
IP address blocks: 178.19.48.0/20 maxlen: 24
149.126.80.0/21 maxlen: 24
185.152.116.0/22 maxlen: 24
2a00:9280::/32 maxlen: 32
2a01:8280::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:ff:f5:6b:5e:5e:9d:da:c4:bd:03:ac:95:cc:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Sep 19 10:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d267808e2d000c50bfac4fd40b8a41e9b0d3a80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:62:b1:2d:55:6b:f8:f4:0d:b1:b4:69:a2:
d1:7b:d3:44:31:17:a1:70:18:f4:69:e3:35:50:34:
e9:09:84:ac:95:04:8a:c1:22:29:6c:60:b9:3d:02:
ae:22:a6:79:92:1f:75:da:dd:9e:ff:9c:d6:2d:97:
e9:4a:3d:f9:ff:a0:45:71:f3:ec:a3:1a:0a:ef:1a:
0b:33:4e:69:71:4f:2a:a2:f1:ad:8b:a2:1a:65:84:
95:85:7c:5e:f2:a2:eb:14:ce:fe:2f:c4:43:99:54:
c6:b8:42:4b:22:78:03:81:23:5b:91:33:f6:ce:41:
9a:ae:98:6f:fa:46:d4:78:32:d0:31:0a:7f:7d:ec:
34:35:c5:77:98:19:59:3e:e1:41:88:d6:27:aa:3b:
be:61:35:bc:47:15:30:0c:ab:13:10:f9:0b:36:c8:
11:0d:90:fe:8d:c6:f4:cc:69:83:96:7e:53:34:fe:
5b:a3:5d:1d:37:cb:4b:27:8b:20:c9:0a:ac:03:64:
a9:81:42:9c:85:91:4f:4a:8b:22:e7:ce:43:74:b1:
4d:50:78:89:06:9e:c8:54:f3:9c:6c:1c:1d:cb:19:
e3:aa:72:e8:5d:49:08:e9:65:67:26:b8:c7:c0:7f:
17:85:2d:26:49:0b:57:1b:aa:c6:fa:e2:d8:b1:9d:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:80:8E:2D:00:0C:50:BF:AC:4F:D4:0B:8A:41:E9:B0:D3:A8:0C
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/0meAji0ADFC_rE_UC4pB6bDTqAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.80.0/21
178.19.48.0/20
185.152.116.0/22
IPv6:
2a00:9280::/32
2a01:8280::/32
Signature Algorithm: sha256WithRSAEncryption
d4:c6:13:b1:28:91:0f:4d:44:a1:d3:62:3e:5f:72:2b:b1:53:
0d:5a:b0:4c:83:91:a9:ef:6b:71:2c:ba:61:66:51:44:0c:63:
bb:92:1b:4e:7d:35:1e:3f:20:02:96:0c:71:c5:f0:26:f1:e0:
0b:42:57:fb:5d:c2:ae:9b:93:aa:d3:d0:d7:eb:52:22:62:8b:
40:40:34:b8:c2:7f:71:1e:e8:6d:2b:07:4d:dc:2d:fc:a1:2c:
fe:d9:94:18:f4:fa:3e:42:60:bb:56:04:01:e8:98:be:2a:27:
3c:d1:0b:1d:55:2b:9f:61:28:a2:ab:26:52:d7:4f:b9:7a:fb:
ec:6e:fd:4b:b9:11:41:3d:98:3b:1b:05:67:4a:23:d2:85:df:
12:c3:1c:2e:69:de:6b:c9:26:0f:ed:c2:45:7f:e8:35:68:6c:
82:fd:d7:7d:e5:3f:91:4b:ab:27:46:11:33:99:f4:e1:54:52:
93:bd:4a:26:5f:99:66:84:58:bb:99:8a:c9:79:a5:70:35:c7:
9c:c8:a4:6d:c2:4a:24:67:33:99:fe:cb:f0:a9:47:67:a8:c6:
b7:8a:a7:cc:aa:aa:b8:c3:19:52:9b:3a:1e:f6:82:72:33:45:
16:d6:46:14:93:02:2d:e9:c0:d2:d3:90:a2:72:16:76:b5:d6:
91:99:10:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:32 2023 by rpki-client on console.sobornost.net