Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/2VayTJ9RfdSdl0BwKB-F8OkcD7U.roa
File: 2VayTJ9RfdSdl0BwKB-F8OkcD7U.roa (raw, json)
Hash identifier: wnWwPuDhYROVl6IjlyYyqgysDcZtHpynAkqJfg8yfAo=
Subject key identifier: D9:56:B2:4C:9F:51:7D:D4:9D:97:40:70:28:1F:85:F0:E9:1C:0F:B5
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 01856F7961902BCB3C843AF27335EA22F5C8
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/2VayTJ9RfdSdl0BwKB-F8OkcD7U.roa
Signing time: Sun 01 Jan 2023 22:35:03 +0000
ROA not before: Sun 01 Jan 2023 22:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211147
IP address blocks: 185.120.181.0/24 maxlen: 24
2a0e:ec0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:61:90:2b:cb:3c:84:3a:f2:73:35:ea:22:f5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Jan 1 22:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d956b24c9f517dd49d974070281f85f0e91c0fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:e6:22:b9:07:f1:d4:6c:9a:d5:3f:74:52:
4f:84:e9:e9:b6:31:2c:a1:26:59:f7:f0:10:2b:e5:
95:10:3c:f5:af:f0:84:7b:d7:8e:86:9d:cc:48:c3:
01:55:e4:5e:76:48:fd:ea:49:23:eb:aa:86:f0:43:
bd:c5:87:e5:40:0e:07:1a:57:c4:6f:73:69:9c:9c:
2f:4e:90:62:14:22:dd:f3:9f:19:ef:f1:bf:9b:63:
d2:ae:10:be:d3:5d:69:50:2d:d2:89:ee:26:92:c0:
d6:aa:29:5d:b7:b7:45:e1:5f:a2:c1:b2:24:88:1c:
af:ea:3f:99:1e:3b:ca:e3:18:a8:9e:19:83:47:76:
27:6d:08:40:f7:28:39:12:58:2f:f3:20:ea:83:52:
a0:6c:10:e6:ca:ab:48:ad:36:f7:6a:8f:e3:b5:6a:
5d:fe:b7:38:12:f4:d1:dc:31:4d:e5:d0:fb:cc:cb:
ed:f9:70:b4:8c:16:53:71:ef:46:62:60:23:27:40:
79:8b:ca:0d:9e:f3:6c:ac:17:63:dc:88:c4:e1:55:
e1:31:3d:19:21:9c:b8:48:02:49:cc:94:7c:2b:1c:
94:be:b8:6e:d8:fa:9a:32:b1:a4:e1:ee:e6:ff:6a:
2f:20:cb:94:25:09:31:35:73:2c:ee:3d:2f:db:40:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:56:B2:4C:9F:51:7D:D4:9D:97:40:70:28:1F:85:F0:E9:1C:0F:B5
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/2VayTJ9RfdSdl0BwKB-F8OkcD7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.181.0/24
IPv6:
2a0e:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
35:33:49:9b:e1:eb:93:9c:b1:1c:88:f4:0b:b7:00:09:9b:80:
43:ec:b9:f3:ba:5a:e1:42:e8:9a:e0:8f:bf:67:59:a2:ce:68:
62:75:2d:c7:55:e5:ff:a1:68:da:bf:75:98:aa:9d:b4:f7:69:
97:87:c5:b4:26:5f:55:24:53:ef:60:57:52:8a:4f:c5:ed:8d:
3c:6f:0a:3c:92:d1:02:18:6e:c0:ca:b0:d6:73:90:32:15:62:
0e:25:53:e1:f4:ef:68:d7:64:72:10:4f:67:2c:6a:c4:75:54:
94:1f:44:f2:99:ef:0a:f5:ac:37:b7:ae:7b:3e:fb:50:e6:a1:
d6:c6:30:f6:58:85:dd:ac:62:0a:ba:1c:c0:2d:07:3b:a3:8f:
ad:2a:e2:12:92:73:9e:d8:37:e1:8d:46:8f:7a:11:84:a5:2a:
cc:d0:0f:9a:2b:a5:7e:05:34:4a:e2:a9:e5:03:c4:12:49:2b:
23:b6:7c:27:e2:5e:ec:bb:ea:de:fb:fb:a6:f5:25:ee:62:ba:
19:84:bd:79:60:85:32:3f:af:6e:5b:ee:a4:15:76:f4:b6:b2:
f4:82:19:6d:5c:6e:9a:01:82:73:41:cb:13:72:14:3f:ca:42:
79:0c:3f:26:79:40:f6:72:dd:02:7e:1d:e5:80:52:e7:d3:55:
3c:09:cb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:00 2024 by rpki-client on console.sobornost.net