Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/SXzwnx7qVCSeefoyBeOysuvq5Iw.roa
File: SXzwnx7qVCSeefoyBeOysuvq5Iw.roa (raw, json)
Hash identifier: 9Oi2ioDcmYhWssrETE4DDbJz5D2ipPAKLQzbSLL6dEo=
Subject key identifier: 49:7C:F0:9F:1E:EA:54:24:9E:79:FA:32:05:E3:B2:B2:EB:EA:E4:8C
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018AEF9BCE421232CEA29D6794BF9749B936
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/SXzwnx7qVCSeefoyBeOysuvq5Iw.roa
Signing time: Mon 02 Oct 2023 08:58:00 +0000
ROA not before: Mon 02 Oct 2023 08:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44735
IP address blocks: 213.181.96.0/19 maxlen: 24
149.126.80.0/21 maxlen: 24
185.152.116.0/22 maxlen: 24
185.40.120.0/22 maxlen: 24
157.97.0.0/19 maxlen: 24
178.19.48.0/20 maxlen: 24
91.220.138.0/24 maxlen: 24
185.111.36.0/22 maxlen: 24
46.182.184.0/21 maxlen: 24
78.40.248.0/21 maxlen: 24
2a01:6f00::/29 maxlen: 48
2a00:9280::/32 maxlen: 32
2a01:8280::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:9b:ce:42:12:32:ce:a2:9d:67:94:bf:97:49:b9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Oct 2 08:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=497cf09f1eea54249e79fa3205e3b2b2ebeae48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:f5:7f:dd:b9:cc:78:34:ed:66:93:05:99:
e5:d7:22:d3:07:58:ed:93:fb:85:4d:48:71:2c:92:
c3:46:81:ee:be:09:08:0e:c9:de:1f:31:b6:bf:c9:
f1:67:22:d6:a9:e9:6c:cc:91:04:a6:16:4f:58:5b:
16:31:98:a5:ba:12:39:6d:29:9f:1f:e6:f6:ba:d9:
da:80:59:91:49:9c:aa:7c:7c:00:c5:f1:20:b4:d5:
c9:dc:1c:de:a9:b4:9a:6c:a5:76:c4:8d:ef:cf:c6:
3d:73:51:e8:4a:0a:ee:4b:89:d0:09:a2:41:4a:69:
11:2f:90:05:d6:17:2c:cb:ea:81:51:01:00:dc:5b:
f4:83:88:5e:b6:e3:f2:a9:70:0b:a6:85:cc:38:69:
45:73:50:3b:5b:dc:9f:4c:14:7b:31:d5:e4:a0:c8:
be:4d:2a:00:98:11:b7:6e:fd:0b:ae:77:64:8d:d7:
ef:7d:30:b1:d9:c7:b5:47:a4:0d:37:b8:44:6f:fc:
af:57:39:b5:06:cc:04:b0:26:b1:66:0c:cc:fd:ce:
ed:46:25:5a:71:de:9d:60:7c:2b:7e:99:f6:1f:ae:
ab:5d:bf:24:d8:81:a1:0d:55:12:be:dd:b1:62:59:
f4:7b:2f:92:e2:0c:63:bd:7a:fb:20:ff:7a:1c:bc:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:F0:9F:1E:EA:54:24:9E:79:FA:32:05:E3:B2:B2:EB:EA:E4:8C
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/SXzwnx7qVCSeefoyBeOysuvq5Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.184.0/21
78.40.248.0/21
91.220.138.0/24
149.126.80.0/21
157.97.0.0/19
178.19.48.0/20
185.40.120.0/22
185.111.36.0/22
185.152.116.0/22
213.181.96.0/19
IPv6:
2a00:9280::/32
2a01:6f00::/29
2a01:8280::/32
Signature Algorithm: sha256WithRSAEncryption
41:6a:bc:67:b6:f6:80:6d:c7:bd:99:f3:52:bc:d0:6f:b6:10:
df:2d:26:5a:12:65:20:a9:fa:da:88:49:24:c2:20:72:0f:ed:
28:86:a7:cb:04:1e:90:b4:9c:a3:51:79:df:9d:aa:a7:ba:2e:
ec:d7:84:97:ca:4c:07:a3:33:e7:c8:c2:f5:20:0d:2c:a2:66:
84:e2:18:a8:7e:16:f9:3e:af:9d:35:ac:58:7b:35:dd:96:88:
b4:58:03:62:d6:be:7f:a7:5e:78:54:54:fc:df:be:ca:d6:fb:
e8:1b:a2:ca:1d:61:ba:2d:6d:df:7e:b5:ab:4f:b3:15:3f:42:
14:b1:d2:3c:58:4a:10:5b:8c:43:2f:e3:85:2c:08:6f:91:56:
e8:ab:1b:80:eb:91:88:f6:d5:40:b1:24:d9:10:d0:58:36:25:
29:8d:ac:70:10:15:62:d1:4e:0d:e0:12:13:88:69:12:3f:66:
44:b1:09:29:48:88:64:24:15:1f:47:e3:ba:a3:41:de:14:34:
ec:6c:b2:0a:53:99:dd:44:b1:3b:66:21:b0:d0:63:b3:56:68:
f9:70:36:37:70:9c:71:a1:aa:b0:90:ee:02:db:6c:d8:b6:e5:
88:37:60:a6:cc:8b:b5:0a:f8:5a:d3:ca:26:cd:b8:fc:a0:46:
f8:38:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:32 2024 by rpki-client on console.sobornost.net