Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/T6hgV1j-GWMFyydt9bN48hK1tUI.roa
File: T6hgV1j-GWMFyydt9bN48hK1tUI.roa (raw, json)
Hash identifier: 1h5P5C58ju82zM+qK/o5T4PQwkt/HN1+sn460GG0aiw=
Subject key identifier: 4F:A8:60:57:58:FE:19:63:05:CB:27:6D:F5:B3:78:F2:12:B5:B5:42
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0189009BCACCB6602275E4F2A1542162A04F
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/T6hgV1j-GWMFyydt9bN48hK1tUI.roa
Signing time: Wed 28 Jun 2023 06:05:57 +0000
ROA not before: Wed 28 Jun 2023 06:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202053
IP address blocks: 94.237.4.0/22 maxlen: 22
94.237.2.0/23 maxlen: 23
94.237.8.0/21 maxlen: 21
5.22.208.0/21 maxlen: 21
185.26.48.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
185.20.136.0/22 maxlen: 22
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
185.70.196.0/22 maxlen: 22
94.237.126.0/24 maxlen: 24
194.62.96.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
83.136.248.0/21 maxlen: 21
95.111.192.0/20 maxlen: 20
80.69.172.0/22 maxlen: 22
2a04:3546::/32 maxlen: 32
2a04:3545::/32 maxlen: 32
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3544::/32 maxlen: 32
2a04:3540::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:9b:ca:cc:b6:60:22:75:e4:f2:a1:54:21:62:a0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 28 06:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa8605758fe196305cb276df5b378f212b5b542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:79:00:76:01:3b:76:95:72:15:24:0f:4c:
98:0a:04:9a:13:3e:51:b4:11:f4:fb:5d:e3:74:92:
dd:62:cf:df:62:be:78:72:7b:ee:ab:da:24:b2:40:
77:ef:48:97:37:3e:e5:02:e5:50:c6:1d:f7:cc:7e:
c9:01:7b:16:17:bf:c5:14:bc:bc:9e:31:34:9e:a3:
9c:62:6a:c5:cb:8c:f0:97:42:4d:0b:01:fa:7a:47:
a6:54:68:0b:d1:29:69:83:b0:3c:6e:28:34:24:de:
a0:b9:cf:a4:5f:24:c6:fe:b2:27:25:84:2c:2d:90:
6d:74:f8:71:bb:e6:35:a0:a1:d9:be:71:69:85:32:
fc:c1:85:e9:e8:44:83:ee:1b:dc:34:07:5a:9b:b4:
08:90:12:61:03:62:aa:22:04:59:b8:69:fd:c3:fb:
67:25:12:54:b1:57:bf:08:c7:ba:06:5c:24:fe:de:
07:8b:b5:d9:87:2c:0e:99:7b:41:2e:c9:11:31:b3:
9a:2e:cf:dc:da:f2:3c:ad:1b:48:9d:26:c5:53:2d:
cc:80:bf:25:19:11:a0:5e:55:2b:20:fa:3b:1f:b7:
be:23:2e:c0:61:a4:21:27:fc:84:3f:44:4e:16:23:
5a:78:8a:7f:4a:40:12:a7:a2:2e:a6:68:ec:3d:26:
45:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:60:57:58:FE:19:63:05:CB:27:6D:F5:B3:78:F2:12:B5:B5:42
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/T6hgV1j-GWMFyydt9bN48hK1tUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.69.172.0/22
83.136.248.0/21
94.237.2.0-94.237.15.255
94.237.104.0/21
94.237.120.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:75:ac:6e:65:4c:8e:bd:c3:3a:c5:fa:8f:41:91:f8:87:0a:
e9:ae:86:91:d9:90:78:24:68:01:47:08:42:06:93:97:da:2b:
73:c3:67:aa:c8:7d:b4:c4:9f:bb:78:19:77:ea:09:2c:a2:20:
9d:c9:a5:86:c8:af:74:64:72:72:d0:9b:2a:cb:0d:72:b6:a6:
cd:03:24:01:8b:67:ea:55:13:86:b5:64:8c:f8:35:07:35:97:
36:fd:0b:7b:6f:d3:e8:55:a7:a9:aa:06:1b:61:e1:76:4b:07:
f9:a6:ee:69:db:f3:0c:2b:0f:8a:83:a1:de:45:a8:4e:41:3e:
f9:b8:f8:c6:45:de:84:35:86:90:82:03:d7:cb:bf:21:2e:02:
ca:19:34:1f:4c:07:51:3e:7f:4e:6f:80:f9:58:7e:6d:44:18:
d8:3b:89:96:08:66:9d:cf:c4:f4:ba:b2:c9:f7:c4:ad:4c:0f:
a7:bb:90:b2:e5:41:ad:91:84:15:58:15:cb:1a:b7:09:4d:05:
3f:99:d1:89:6a:6c:09:6b:73:9b:3e:f4:ee:38:b4:59:e4:f9:
a0:2c:43:75:eb:b6:5c:07:71:4e:d6:1c:7a:1a:e1:40:e1:1c:
66:ed:54:af:2c:90:52:1d:6f:3c:b9:e3:ec:fd:a1:d3:4e:3a:
d9:80:c3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net