Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/gjKLDfc8CKhxm9IW0DG4t3S7P_s.roa
File: gjKLDfc8CKhxm9IW0DG4t3S7P_s.roa (raw, json)
Hash identifier: FX0+TulhZDOrw8akxcMZSd2Yy4IqHkpC/CDN2Civb64=
Subject key identifier: 82:32:8B:0D:F7:3C:08:A8:71:9B:D2:16:D0:31:B8:B7:74:BB:3F:FB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 01894473425152494CA264E2DA992E2A5A8A
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/gjKLDfc8CKhxm9IW0DG4t3S7P_s.roa
Signing time: Tue 11 Jul 2023 10:15:51 +0000
ROA not before: Tue 11 Jul 2023 10:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50973
IP address blocks: 188.172.98.0/24 maxlen: 24
188.172.101.0/24 maxlen: 24
188.172.100.0/24 maxlen: 24
188.172.99.0/24 maxlen: 24
188.172.103.0/24 maxlen: 24
188.172.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:73:42:51:52:49:4c:a2:64:e2:da:99:2e:2a:5a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jul 11 10:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82328b0df73c08a8719bd216d031b8b774bb3ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:91:1f:18:64:44:75:bf:be:f0:a0:93:4f:
27:41:c6:fd:1f:85:cb:4e:aa:3c:c9:29:9c:79:ba:
89:44:34:a4:51:8e:d1:0b:30:e9:42:6f:3c:21:a9:
35:5d:61:e2:a3:2a:ce:a0:eb:fc:fc:52:ee:6f:02:
e6:0c:16:9f:ae:4a:61:f1:85:42:f3:b9:97:bf:7b:
6a:84:fb:95:eb:6b:1d:c0:40:b7:87:e7:57:85:47:
64:25:a0:6d:8c:9a:60:e4:98:9a:b6:a2:20:78:de:
a5:bf:df:cb:a4:c8:e5:ba:d4:2f:d1:b2:fb:e7:89:
96:f1:aa:60:ea:d4:02:64:2c:20:1a:aa:89:66:1b:
63:69:9a:22:ca:d0:99:bb:cd:05:f3:1e:99:f6:f3:
9d:67:f2:4c:95:61:a7:ab:19:54:2d:c6:07:b7:13:
56:2a:4a:7f:6d:2b:4c:78:f3:81:2e:96:03:30:c0:
19:46:dd:c0:99:2f:b9:2a:87:f2:bd:45:9b:66:dc:
7e:10:f9:61:06:a5:22:22:a2:bb:59:dd:74:bf:e7:
7d:69:f3:5a:b8:01:aa:f9:6c:b3:26:db:e4:ff:1b:
6a:74:70:81:5b:f2:a7:54:b5:68:0f:e4:89:11:16:
84:6c:88:d1:a6:3e:a0:cd:46:b8:36:b3:e3:82:d8:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:32:8B:0D:F7:3C:08:A8:71:9B:D2:16:D0:31:B8:B7:74:BB:3F:FB
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/gjKLDfc8CKhxm9IW0DG4t3S7P_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.172.98.0-188.172.103.255
Signature Algorithm: sha256WithRSAEncryption
65:3b:c7:66:b0:d8:cf:d1:df:67:84:57:45:1d:c8:54:c8:7b:
2b:4e:da:e1:b0:c0:0f:41:4d:45:e2:04:54:f2:c6:76:bb:a8:
4d:12:16:29:53:07:3e:b5:40:e3:fa:b9:14:36:60:35:b7:10:
5d:29:4b:e9:ce:fa:9b:ac:2c:0f:a5:a6:e7:8e:2a:b8:5a:9e:
21:f1:86:c9:80:dc:85:8a:cb:44:7a:96:fd:69:65:69:d1:bb:
61:8d:b3:bf:9c:a7:9f:ee:62:c2:02:b5:15:0e:ab:b5:8b:7d:
cb:30:f5:3a:32:32:7f:e1:a7:56:5d:c5:80:fa:c5:58:3e:e3:
85:90:26:8d:47:e6:05:77:8c:61:5c:39:b1:38:4c:71:d2:63:
95:cd:05:42:22:82:0f:72:19:2f:41:44:1b:a6:f9:27:e8:45:
3d:17:34:c6:84:ac:e2:0a:7d:98:b7:8a:ac:f9:4e:2a:64:a8:
4e:8d:1a:8f:5e:9b:75:ae:83:ed:4a:b1:32:0d:3f:99:c0:e0:
8c:dd:ff:0c:2c:63:96:06:a1:61:cb:7a:59:e1:2c:24:d1:e7:
ae:78:0f:c5:da:e7:ab:56:7c:e3:0c:46:b7:69:1d:8c:a2:ee:
ff:a4:c2:3f:5f:85:7f:e0:3f:40:9b:ed:00:77:b0:9a:c4:82:
10:29:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net