Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/LD-Jc3aY89_HiZTg0Xd1K-Y70wA.roa
File: LD-Jc3aY89_HiZTg0Xd1K-Y70wA.roa (raw, json)
Hash identifier: JgW+j5pFRoaX5A2iUV8HlZlKmlaQcAqyybim+PL9PQU=
Subject key identifier: 2C:3F:89:73:76:98:F3:DF:C7:89:94:E0:D1:77:75:2B:E6:3B:D3:00
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 0187D94D6E53C25DE9551A9F22793BC067C9
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/LD-Jc3aY89_HiZTg0Xd1K-Y70wA.roa
Signing time: Mon 01 May 2023 21:52:23 +0000
ROA not before: Mon 01 May 2023 21:52:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213178
IP address blocks: 185.163.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:4d:6e:53:c2:5d:e9:55:1a:9f:22:79:3b:c0:67:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: May 1 21:52:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c3f89737698f3dfc78994e0d177752be63bd300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:5c:52:ab:67:29:9a:8c:2d:c2:66:7b:45:
aa:6c:dc:8a:18:e6:19:aa:4c:a0:73:ad:14:dd:5e:
33:ce:8e:48:38:17:a2:85:a3:e7:5e:2d:e3:fd:43:
18:04:fe:28:89:93:fa:e7:33:29:39:b8:13:7a:56:
25:0c:0f:37:53:f2:cd:4f:5b:df:08:6d:a1:fd:4c:
a9:c3:1c:2c:a7:7a:76:4a:8a:1e:87:59:27:c2:e8:
e6:cb:6b:28:b5:17:f0:b2:96:56:5c:9e:79:57:2b:
84:db:b3:4d:0a:77:e2:eb:4b:20:24:d1:aa:12:22:
fe:86:15:c4:e0:9a:ab:74:a8:6c:1e:31:1a:82:4b:
03:d1:48:0c:4e:e1:d5:96:6d:cf:99:00:dc:8a:d0:
59:29:a7:29:60:08:fa:02:89:f0:a8:75:04:bb:9d:
e9:32:ef:ca:9d:9a:7a:93:b4:58:c1:1f:5f:cd:05:
28:55:9f:90:25:f6:42:a8:21:d8:81:ad:2a:78:01:
a2:79:06:01:28:87:33:71:2e:2f:ad:d1:db:6e:be:
0c:3b:af:4c:45:95:70:73:94:ec:92:45:c9:15:19:
7c:e8:d8:ef:33:26:0a:44:b2:fb:37:b6:c3:64:38:
94:4e:30:08:ae:64:ea:9c:35:19:e0:e7:ee:37:34:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:89:73:76:98:F3:DF:C7:89:94:E0:D1:77:75:2B:E6:3B:D3:00
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/LD-Jc3aY89_HiZTg0Xd1K-Y70wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:70:45:a3:0d:7d:9f:5e:9b:39:05:56:15:7b:af:68:f6:25:
af:06:e0:4c:d0:c2:c9:87:df:94:a0:f2:78:49:10:e6:54:b0:
34:1c:16:3e:f0:7c:f3:36:ac:50:c8:eb:05:0d:0e:67:ab:61:
3c:71:a4:ea:16:e4:73:09:db:72:2a:d3:bb:16:8d:9d:0c:62:
31:17:9a:10:13:73:bb:f1:ed:31:f2:2e:63:5a:45:bd:bb:19:
dd:c5:0d:46:62:d4:a7:c3:74:36:b2:25:36:55:ab:40:37:32:
5c:69:fd:08:1c:cc:82:73:28:c3:cd:b4:ac:14:95:4c:0d:7e:
20:a8:e5:24:e3:2d:be:b1:cb:20:bd:41:41:2c:a1:8c:77:dc:
c8:1a:de:59:00:b9:fe:7d:61:4e:50:ba:d2:35:c4:87:4b:ba:
0f:65:2e:91:2c:f8:4b:c7:0f:0e:25:9b:82:8c:e6:1b:0f:37:
97:18:be:f3:c5:86:dd:18:85:03:49:59:cb:25:53:60:61:a6:
3e:4c:a5:06:ef:3b:1e:63:bd:1b:13:f6:af:e2:1f:6e:5f:4f:
be:d3:7f:44:c9:88:c8:67:c9:cf:18:b7:50:bf:2b:48:c5:09:
1c:e0:fc:83:53:de:53:a2:53:9e:38:06:86:e4:5f:1b:d6:08:
0a:01:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:06 2024 by rpki-client on console.sobornost.net