Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/pN2vL3EGa9EgHQl4-Moo3Bau2PY.roa
File: pN2vL3EGa9EgHQl4-Moo3Bau2PY.roa (raw, json)
Hash identifier: a/cr8rPnGksQ+AoUfokD6xAlgeGB6lcws/NZv3f2iXo=
Subject key identifier: A4:DD:AF:2F:71:06:6B:D1:20:1D:09:78:F8:CA:28:DC:16:AE:D8:F6
Certificate issuer: /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial: 01860CBA774166E8A04E5A9305C6E54E3C19
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/pN2vL3EGa9EgHQl4-Moo3Bau2PY.roa
Signing time: Wed 01 Feb 2023 11:26:32 +0000
ROA not before: Wed 01 Feb 2023 11:26:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39365
IP address blocks: 185.144.184.0/22 maxlen: 32
79.135.128.0/20 maxlen: 20
79.135.128.0/19 maxlen: 32
79.135.144.0/21 maxlen: 21
79.135.152.0/22 maxlen: 22
79.135.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:ba:77:41:66:e8:a0:4e:5a:93:05:c6:e5:4e:3c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
Validity
Not Before: Feb 1 11:26:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ddaf2f71066bd1201d0978f8ca28dc16aed8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:d6:3e:f6:d8:9f:c4:6e:9f:a6:d2:50:8b:
41:d1:6a:48:0f:87:9f:59:ba:40:58:6e:59:26:5f:
83:1b:21:05:df:ae:6f:ba:64:7c:f7:2f:31:79:a9:
3f:7f:0b:4d:24:bc:10:9c:8e:41:c3:9d:b4:98:e8:
4a:c6:06:89:54:ed:7b:a6:01:f0:fc:3c:2c:85:44:
39:d2:7e:10:ce:b1:25:81:a1:90:35:fa:d0:97:cb:
93:fa:1d:e7:c7:c5:86:9e:ac:4a:17:91:22:e5:f4:
be:96:aa:ab:04:a0:48:87:d5:e6:7d:63:03:f0:a2:
d3:46:be:84:1c:e6:25:e1:50:95:d4:6f:83:7e:7f:
5e:59:9e:4b:15:dd:fc:35:12:cd:ef:f2:a0:62:0f:
04:06:9d:9c:9c:27:c4:60:2e:d0:4a:25:36:d5:1c:
9b:0f:c7:9d:3c:59:24:ad:c1:fd:5f:52:ec:4e:c1:
c5:ee:96:67:12:df:27:5e:e0:48:d2:02:7c:49:b1:
6e:d0:69:ec:0e:51:c4:31:1f:a9:d7:eb:a7:0d:f7:
ca:a9:47:3b:85:1f:03:cd:de:ef:dc:c2:57:9d:29:
56:b6:67:9c:c5:cc:ca:49:c6:92:cb:33:23:b9:79:
bc:91:5d:9c:5a:90:6c:07:11:ff:f4:30:bc:08:63:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DD:AF:2F:71:06:6B:D1:20:1D:09:78:F8:CA:28:DC:16:AE:D8:F6
X509v3 Authority Key Identifier:
keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/pN2vL3EGa9EgHQl4-Moo3Bau2PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.128.0/19
185.144.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:23:ac:5e:7d:08:c1:18:d6:71:fa:5a:ab:06:54:b5:81:8b:
1f:97:5d:1c:e4:eb:58:4d:cd:db:d4:5a:ff:5a:a6:cd:b5:10:
1a:c2:e2:94:b3:63:4c:73:ae:d5:7f:32:8e:f1:f1:8a:0d:e2:
1c:be:d7:d6:12:e0:4b:f8:03:68:34:3f:f0:19:6f:6c:19:3d:
aa:48:25:46:41:70:60:3b:f6:da:86:17:e4:72:a7:8a:c8:8a:
4f:ec:11:cf:bc:be:10:2e:b4:e9:fc:f4:c9:26:8b:0e:4e:c0:
4b:06:63:5f:71:96:37:03:02:f5:f2:84:67:3f:1b:d1:f6:2e:
ca:1c:2d:6e:86:db:c5:cb:7b:f4:d9:40:0e:e2:80:d2:c6:4c:
c1:ae:af:9b:24:c9:83:43:4c:29:4a:db:84:5e:89:31:64:71:
f0:01:ee:df:11:4d:80:7d:0b:44:15:16:8d:67:72:1e:99:b2:
2b:b8:1a:00:0c:5a:48:9a:35:62:4e:4f:0c:e9:f6:93:5d:ac:
65:51:6a:29:6c:b0:4e:8f:24:9d:af:8b:87:d3:9c:9c:53:04:
65:56:28:24:ff:d4:79:33:91:d2:82:c4:9e:bb:c7:56:10:36:
5a:45:d4:87:0e:a4:28:28:38:ef:75:dd:c0:e6:b8:9e:63:56:
3a:c4:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:13 2024 by rpki-client on console-fra.rpki-client.org