Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/fw__xP_Rhpm3eI7YwXqGm-gGnno.roa
File: fw__xP_Rhpm3eI7YwXqGm-gGnno.roa (raw, json)
Hash identifier: DDALBt7kYZnp/wL5iyl/bFwoGUNP1WZ9X0Ayxb+WS5Q=
Subject key identifier: 7F:0F:FF:C4:FF:D1:86:99:B7:78:8E:D8:C1:7A:86:9B:E8:06:9E:7A
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 018570305AC994DBC07CC5F95402932F1E7D
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/fw__xP_Rhpm3eI7YwXqGm-gGnno.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59503
IP address blocks: 5.159.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5a:c9:94:db:c0:7c:c5:f9:54:02:93:2f:1e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f0fffc4ffd18699b7788ed8c17a869be8069e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d5:52:e3:e1:ed:4d:ce:bc:c8:7b:cb:c3:29:
a5:3a:61:83:34:2e:8f:e1:56:ea:6d:0d:19:f1:ce:
77:93:8a:e7:af:1d:d0:f7:c9:e1:ec:56:32:a3:d8:
9d:7d:7c:ee:9b:1e:df:05:b3:5d:61:51:5b:b4:64:
03:2b:61:92:44:34:cf:7e:38:d8:4c:c8:df:79:95:
57:bc:ba:96:ae:ac:e0:1d:de:df:bf:b1:73:ab:af:
9c:c0:d4:b9:a1:e8:72:de:0c:9d:06:ce:da:ee:bb:
3d:70:73:4e:78:1b:c8:f3:6b:06:37:d6:bf:b0:f3:
45:e3:bc:b1:0f:39:64:41:45:7f:04:9a:9d:fa:e1:
31:e4:81:4b:a6:94:9b:5a:14:01:44:ca:cc:82:49:
16:46:3e:1e:36:d5:02:7e:07:2e:98:4b:21:d4:15:
1f:76:91:d0:50:b8:45:bb:e0:2c:98:fd:18:a3:a3:
37:c0:36:dd:4d:3e:0a:c7:ea:5f:36:d2:80:86:f3:
21:ca:39:06:c1:c8:cd:61:a5:76:e6:31:1c:db:aa:
9c:90:09:88:32:7c:f6:88:99:f6:94:ab:b3:23:4b:
81:87:e8:72:fa:ed:b0:f2:6d:17:b8:b0:5c:c1:4c:
3c:40:44:93:78:2f:29:d4:84:5f:ab:62:ae:0e:e3:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:FF:C4:FF:D1:86:99:B7:78:8E:D8:C1:7A:86:9B:E8:06:9E:7A
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/fw__xP_Rhpm3eI7YwXqGm-gGnno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:62:8e:e8:da:06:e8:05:e6:c9:96:6d:aa:05:f8:12:79:a5:
8d:e2:f9:18:b4:0b:46:74:c8:cc:4e:22:cf:5b:5e:c8:de:27:
ad:19:ec:60:e5:81:1d:df:09:2c:e2:bf:88:bd:62:2c:19:f5:
3d:5e:53:e5:d2:1c:1e:31:a8:0b:e7:90:1e:a2:c9:95:1a:25:
e7:5e:6b:fd:be:7e:dc:a2:05:53:e5:8f:dc:ff:20:dd:1e:85:
ab:62:a5:79:57:ca:d2:9b:03:83:1f:e0:03:a4:16:78:72:89:
82:e1:9d:5a:49:59:b9:6c:4b:47:3f:9b:1f:cc:97:1e:5f:03:
c9:74:9f:d6:bd:0a:ad:d1:7d:f4:71:1b:e7:87:04:9f:00:b8:
89:8b:af:b1:ea:4d:60:28:68:76:b3:e2:49:e1:aa:74:1b:41:
0f:04:f4:6c:24:be:e6:6f:6f:22:d6:f9:3a:78:5b:6a:8d:c3:
32:50:f9:87:0b:38:0c:d1:a4:c0:91:ba:04:0d:1a:6f:da:00:
22:08:9c:bc:24:4c:bd:6e:cb:1f:20:89:32:59:44:07:d0:76:
ff:2d:6a:6a:62:22:7b:70:be:7a:5e:f1:ed:45:7a:d7:4e:a5:
96:ee:51:5c:82:d5:09:5b:f4:36:af:90:46:6d:44:1f:95:f4:
e9:17:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:37 2024 by rpki-client on console.sobornost.net