Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/kNxOmKHNKZ0iB1UvHioJXCQC1mk.roa
File: kNxOmKHNKZ0iB1UvHioJXCQC1mk.roa (raw, json)
Hash identifier: 4KzunyDFs+0WGcNGvpnYb+Zve6NiqPsDb7UdMl++k0I=
Subject key identifier: 90:DC:4E:98:A1:CD:29:9D:22:07:55:2F:1E:2A:09:5C:24:02:D6:69
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 018B65FB16EC058C8645AF7C5594B012238F
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/kNxOmKHNKZ0iB1UvHioJXCQC1mk.roa
Signing time: Wed 25 Oct 2023 08:37:16 +0000
ROA not before: Wed 25 Oct 2023 08:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15557
IP address blocks: 89.226.0.0/16 maxlen: 24
46.218.0.0/16 maxlen: 24
82.101.0.0/18 maxlen: 24
77.104.0.0/18 maxlen: 24
195.248.0.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:fb:16:ec:05:8c:86:45:af:7c:55:94:b0:12:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Oct 25 08:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90dc4e98a1cd299d2207552f1e2a095c2402d669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:68:f8:83:26:03:1b:00:3b:18:be:b8:e6:
4d:bc:4c:72:7d:30:c6:f1:c2:f4:f1:c1:29:8a:07:
12:b8:ad:1c:e6:1f:f8:0f:43:a7:17:3b:b3:83:09:
94:c4:47:d6:94:6a:60:bc:1a:23:e8:90:59:e7:47:
09:ea:61:e7:47:48:a9:b5:4d:13:57:c0:60:53:b1:
45:06:24:4c:b4:bb:6e:36:fa:26:17:6b:99:5a:ac:
e0:1b:9a:61:1a:c7:41:6e:1a:87:d8:aa:47:3f:40:
64:87:5d:10:66:94:72:d6:16:a6:88:5a:0f:74:e5:
c5:bd:ab:3e:c4:43:55:1d:37:fb:4b:be:e7:e3:16:
bb:74:71:e0:ea:fa:02:05:ef:70:24:e4:f0:58:72:
c1:65:06:62:04:ee:2d:db:7f:96:89:4e:b2:b4:62:
41:dc:57:29:71:41:34:da:b6:a5:e7:53:6e:e9:a6:
5c:b8:bf:e7:89:d0:c6:8e:78:45:32:fa:a9:58:b8:
21:ae:c4:3d:82:c9:bc:8a:83:04:9f:af:bb:fd:f4:
9b:99:2c:b6:4a:4f:62:7e:cf:66:72:e3:87:d6:47:
9a:c7:89:d8:14:78:20:d8:1c:7b:52:fa:62:38:88:
22:04:2d:bc:2f:be:f9:20:6a:4f:be:9b:59:70:26:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:4E:98:A1:CD:29:9D:22:07:55:2F:1E:2A:09:5C:24:02:D6:69
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/kNxOmKHNKZ0iB1UvHioJXCQC1mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.218.0.0/16
77.104.0.0/18
82.101.0.0/18
89.226.0.0/16
195.248.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:43:c9:0b:77:4d:07:a6:f9:a7:1c:db:60:f4:19:23:d6:47:
8c:64:2c:5a:4d:e7:76:10:dd:3d:08:6f:63:46:18:05:b0:0a:
df:1e:bd:29:f3:2b:d3:08:6b:28:e7:55:c1:0a:fe:bd:56:6a:
a1:ee:79:c4:c0:ca:45:19:12:87:3f:2e:ae:91:15:e2:08:3f:
c2:41:94:4a:9e:53:4c:a0:64:2a:e3:72:4a:10:75:59:7f:27:
62:6b:6b:08:c2:3d:23:c9:1f:6e:76:1c:2c:1d:17:c6:07:86:
86:28:be:a6:dd:d2:cb:4c:d9:96:83:d2:3a:b2:d3:6f:43:78:
23:14:fb:d0:bb:83:77:a5:60:a8:b4:e1:a4:de:c5:b1:22:e2:
7e:0e:34:e8:e0:13:9d:0d:ee:a3:05:13:c9:9b:d7:5e:b1:c4:
2a:f5:0a:41:7f:0d:88:ea:35:f6:00:09:f3:ce:bd:4e:5f:77:
9a:20:67:e4:67:e7:23:85:8b:1e:d8:6b:8d:85:55:9f:32:b7:
a1:24:ad:c1:7c:b5:e5:ce:c0:9f:f5:f1:d1:82:27:b1:35:23:
5a:39:a2:7d:1c:31:49:39:9b:a0:78:d5:3d:9b:0e:cb:4c:48:
93:ad:36:be:99:a2:1f:d5:69:2f:b9:02:40:d8:e0:94:53:85:
18:b0:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:42 2023 by rpki-client on console.sobornost.net