Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/fi02cqze8VyYQbsLS-oKwmwsQ-E.roa
File: fi02cqze8VyYQbsLS-oKwmwsQ-E.roa (raw, json)
Hash identifier: MhCDkvYS+ap9EsYOm3Rgz0ze0VmyNJQQYFZirynORKw=
Subject key identifier: 7E:2D:36:72:AC:DE:F1:5C:98:41:BB:0B:4B:EA:0A:C2:6C:2C:43:E1
Certificate issuer: /CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Certificate serial: 01856F4B8962D229FD899DDADAF21B330A53
Authority key identifier: 7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/fi02cqze8VyYQbsLS-oKwmwsQ-E.roa
Signing time: Sun 01 Jan 2023 21:44:59 +0000
ROA not before: Sun 01 Jan 2023 21:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50770
IP address blocks: 185.177.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:89:62:d2:29:fd:89:9d:da:da:f2:1b:33:0a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a297347a40d3bdf5787cc753ac2402d0824bfcb
Validity
Not Before: Jan 1 21:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e2d3672acdef15c9841bb0b4bea0ac26c2c43e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2b:c3:e0:41:62:f8:41:0d:3f:fd:d4:38:da:
81:8c:58:c0:16:37:b3:65:eb:b3:ad:a5:6d:c6:90:
ff:af:f9:f3:d1:76:98:81:cb:e8:8b:07:ce:91:a1:
e9:db:e7:da:4a:a2:d3:5d:e2:6d:82:57:2e:3d:0e:
8c:3c:a6:9f:60:7c:5d:79:d6:2b:45:7c:70:af:53:
f2:22:fb:99:69:aa:c9:77:ba:13:11:d2:e1:6b:b9:
af:40:b1:b2:9a:50:b2:87:e8:f3:9b:6a:78:a4:fd:
6b:5c:62:fb:01:d4:96:3e:6c:08:3e:aa:f0:6c:fb:
b2:c0:33:a2:78:5d:9f:dc:95:af:e3:71:bb:d3:a2:
a3:6f:43:4b:6f:1c:d2:aa:9f:6f:e9:f9:9b:68:e6:
e2:af:1c:7d:32:3e:be:20:4c:96:58:18:99:67:e7:
f4:f9:f3:f1:35:0c:e9:f7:56:23:66:09:07:d5:78:
0f:0f:96:7e:a3:3e:24:4a:5a:71:99:6e:65:a3:b4:
30:54:6c:91:9e:d2:b5:8d:24:e8:09:24:cf:c8:2d:
8f:49:bd:fa:e1:08:ce:e6:11:1d:9b:c7:ae:d6:a1:
d0:fa:10:04:9d:37:a7:81:19:b6:75:a7:7d:8d:83:
fe:08:f6:6c:cf:d9:bf:53:46:df:f7:98:03:4a:b3:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:36:72:AC:DE:F1:5C:98:41:BB:0B:4B:EA:0A:C2:6C:2C:43:E1
X509v3 Authority Key Identifier:
keyid:7A:29:73:47:A4:0D:3B:DF:57:87:CC:75:3A:C2:40:2D:08:24:BF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eilzR6QNO99Xh8x1OsJALQgkv8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/fi02cqze8VyYQbsLS-oKwmwsQ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c200b4-9481-4e67-ae14-f8b439d06645/1/eilzR6QNO99Xh8x1OsJALQgkv8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.211.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0f:d8:9b:54:cd:b0:33:e0:32:bd:0d:68:75:7a:ae:a5:2c:
fd:50:45:8a:1b:ee:19:b7:f5:ac:b8:0d:42:b8:c6:5b:9c:20:
ba:91:46:be:6b:09:c7:02:32:fa:b0:d2:7a:9d:c9:aa:24:6f:
11:6e:c4:ec:6d:d4:4d:d9:7b:04:6f:73:fe:84:06:db:6f:67:
80:2e:31:02:4f:19:d1:06:3d:ee:55:5f:e7:25:ba:ea:c2:ce:
c3:3d:a2:57:72:81:13:ef:69:be:b2:bb:75:dd:ab:dc:3e:cb:
53:3f:b9:36:7a:a0:3c:6e:0f:1b:a3:78:b3:8e:fe:f5:36:9d:
15:86:13:10:95:ec:fa:1e:c8:e2:ad:0f:36:ec:e3:2b:26:a3:
01:0b:5b:00:6d:87:b1:1b:9e:fd:a4:5b:37:5a:57:93:06:96:
a4:e9:f1:78:87:66:8e:40:1c:80:50:b7:b3:25:cd:9e:d2:fa:
4d:d1:7a:94:c0:6e:cb:e0:b0:34:d0:f1:06:36:5e:59:87:dd:
3a:08:5d:f9:37:b9:57:3d:e0:5e:34:ca:0a:aa:65:da:23:22:
67:3d:64:d2:56:96:6c:a1:5d:6a:88:08:27:03:b7:7f:34:ff:
e1:7e:e9:3d:1e:7e:b0:5c:d1:e7:4b:8f:cf:85:0d:61:cc:62:
23:39:18:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:58 2024 by rpki-client on console.sobornost.net