Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/1-M4vOaSZ4MWgd1fwmRZ9O1eXbLQ.roa
File: 1-M4vOaSZ4MWgd1fwmRZ9O1eXbLQ.roa (raw, json)
Hash identifier: rRm3+rWpToS92dkU5nfpSuCOfjXBb9989/CvrK+vITg=
Subject key identifier: F8:CE:2F:39:A4:99:E0:C5:A0:77:57:F0:99:16:7D:3B:57:97:6C:B4
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 0185729EF4FBB420C99B4CAD3C9BF5F3F58D
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/1-M4vOaSZ4MWgd1fwmRZ9O1eXbLQ.roa
Signing time: Mon 02 Jan 2023 13:14:58 +0000
ROA not before: Mon 02 Jan 2023 13:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212686
IP address blocks: 185.206.9.0/24 maxlen: 24
185.206.11.0/24 maxlen: 24
185.206.8.0/24 maxlen: 24
185.206.10.0/24 maxlen: 24
2a12:ff80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:f4:fb:b4:20:c9:9b:4c:ad:3c:9b:f5:f3:f5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Jan 2 13:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ce2f39a499e0c5a07757f099167d3b57976cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:2c:dc:1b:cb:4f:ed:b6:06:9f:e4:0d:39:
94:09:63:36:e5:af:e2:7a:d5:a7:b5:e6:23:eb:e5:
7a:18:57:a5:32:ca:60:a5:63:f7:2c:d3:9b:40:1e:
3d:23:6f:c7:b6:cb:78:40:8c:80:34:36:2f:56:23:
b0:a6:a9:c6:92:9b:f3:9b:39:05:37:23:8d:87:63:
a6:81:38:70:93:68:f4:b5:4a:91:1b:dc:7a:98:32:
85:94:ae:e7:a9:24:20:d1:6d:33:dc:99:14:fc:16:
aa:9d:98:70:e6:25:b2:d1:18:60:e2:08:1f:91:15:
d7:58:b7:79:9a:44:ea:de:ee:f8:ec:58:67:ff:f6:
cc:91:25:42:b5:17:a7:e6:ec:7e:98:89:71:d2:a0:
27:07:7a:8b:12:b4:40:08:66:b0:c6:87:80:62:71:
c7:8c:7f:25:01:19:38:e7:68:e0:81:1a:93:c1:7a:
3c:4e:2e:e5:d9:40:7d:bd:58:d8:5b:fb:8f:2a:40:
69:19:7d:60:68:74:ca:e1:af:95:0b:55:d7:c4:1f:
39:5a:3d:f7:80:cf:e2:90:8d:f6:3d:07:03:7d:56:
ed:29:f3:9e:6a:64:d2:ab:91:11:dc:7e:13:3e:87:
01:bf:78:62:1a:b7:e3:52:c9:a4:e3:fc:e8:d2:5f:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CE:2F:39:A4:99:E0:C5:A0:77:57:F0:99:16:7D:3B:57:97:6C:B4
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/1-M4vOaSZ4MWgd1fwmRZ9O1eXbLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.8.0/22
IPv6:
2a12:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
9b:01:1b:10:f4:3c:ed:68:06:1b:fd:0c:96:0b:3a:e8:62:7a:
d5:a6:2c:5b:73:d2:28:23:e9:60:69:7e:4c:bb:83:51:fa:ca:
93:7c:f5:25:ae:e4:b2:c3:95:2c:21:1f:85:c5:25:12:16:2e:
fa:fe:d2:7e:1e:5a:2c:df:37:da:5a:41:dc:72:19:c0:4b:01:
5f:37:b4:56:c3:3f:a6:ef:15:49:55:a8:b9:70:32:1f:ea:d3:
1c:1f:c5:38:16:dd:d3:d5:50:5b:a5:25:58:06:d8:28:64:23:
12:8a:e5:ec:38:54:57:97:db:df:7f:8b:ff:00:20:73:3b:3d:
95:87:60:5a:b8:8c:40:c1:96:98:7f:ac:41:c8:1c:c4:5e:27:
54:da:29:6b:50:b1:0a:9d:ce:23:41:cf:ca:7e:a7:0a:c7:5f:
60:ad:0b:78:5d:0e:29:50:27:b2:c9:27:ea:b8:75:5e:79:0d:
c7:91:d1:55:65:c4:28:2e:18:17:c4:ba:da:fc:b0:74:7d:b1:
26:34:30:b7:1e:b9:a2:f9:ec:98:3e:14:74:b0:06:ac:e2:15:
58:6a:5a:2e:d4:3e:79:69:ac:d5:46:fd:c6:4e:f8:45:f9:ce:
b0:a5:67:5d:a4:5d:28:be:9a:45:62:11:13:25:6d:5e:fd:d5:
46:cc:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net