Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/Ps9Tird0W281MoqFlp0ciuN9pKE.roa
File: Ps9Tird0W281MoqFlp0ciuN9pKE.roa (raw, json)
Hash identifier: HUEOVcqQp2e51a/6SzMzza2Aey0LDrmPl2Won8K+vq0=
Subject key identifier: 3E:CF:53:8A:B7:74:5B:6F:35:32:8A:85:96:9D:1C:8A:E3:7D:A4:A1
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0189BB92ABCCEA048630B376DCAED5A92AE5
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/Ps9Tird0W281MoqFlp0ciuN9pKE.roa
Signing time: Thu 03 Aug 2023 13:24:58 +0000
ROA not before: Thu 03 Aug 2023 13:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 194.29.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:92:ab:cc:ea:04:86:30:b3:76:dc:ae:d5:a9:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Aug 3 13:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ecf538ab7745b6f35328a85969d1c8ae37da4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:7f:7a:38:9f:24:96:71:4d:25:6a:51:92:
5c:69:60:5e:9f:84:55:19:40:58:af:3b:13:53:e9:
10:16:4c:4a:be:43:51:b0:89:8a:a5:e8:60:68:09:
9b:39:c0:5e:9b:ff:ab:af:f7:87:16:1a:51:4b:06:
6a:d6:16:6d:76:94:19:1f:22:4c:c8:36:64:4d:61:
03:7e:31:d4:ca:44:70:6d:0b:fe:b7:9e:ca:3d:40:
9a:d0:b0:81:b6:7d:f7:2a:99:5c:20:17:8a:b1:10:
da:30:74:de:50:26:b1:08:9c:fe:3a:96:ef:3b:11:
ce:84:da:1b:3b:37:5a:9c:1d:7d:05:d1:bf:13:8e:
49:de:95:8d:40:77:21:53:4d:39:2a:e5:a5:15:2d:
46:29:d9:f9:4c:62:15:cf:bf:59:4c:40:fc:22:0a:
e3:27:91:7b:70:d3:d2:92:33:f7:36:ce:f1:77:91:
ec:38:07:59:05:5f:d9:cd:81:87:9a:3d:34:1a:cd:
a4:c3:24:a2:22:1e:f0:2e:e5:b3:27:9b:8f:6a:3d:
85:e9:f9:c3:de:47:c5:40:71:db:87:ea:ff:d6:5a:
55:a2:ce:6f:87:8e:c9:f0:fa:ad:86:48:28:5f:4b:
6f:a9:74:76:ab:64:73:2a:c6:e5:53:26:3c:ec:75:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CF:53:8A:B7:74:5B:6F:35:32:8A:85:96:9D:1C:8A:E3:7D:A4:A1
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/Ps9Tird0W281MoqFlp0ciuN9pKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
33:06:1c:aa:6f:cf:c8:6d:4d:5d:b8:b7:01:da:5c:95:a0:4a:
12:a6:b5:28:6e:6c:74:56:28:53:f9:8f:1c:85:1a:3a:46:72:
fd:ad:bd:15:19:83:6b:de:41:e7:a6:9a:80:dc:82:81:76:25:
1f:8d:7d:22:90:df:79:93:63:20:6d:e3:aa:bf:2c:00:d8:9a:
e9:c3:09:be:40:cb:4f:a2:33:ab:c7:52:52:e9:e3:10:e6:58:
9b:2c:ae:99:71:79:79:02:e8:99:d9:06:8e:6d:cf:dc:54:f5:
49:b2:b3:e7:6c:c8:1c:83:40:2c:93:ae:b9:f8:37:e5:98:3d:
fd:92:e8:1d:98:8b:7b:92:fd:0a:b8:56:94:4b:15:20:8a:23:
8e:4e:81:7f:83:1a:20:d7:cb:e8:93:84:ab:90:88:71:72:4a:
d7:82:a9:26:f1:f4:8a:e4:19:21:9f:41:cc:8a:88:7d:d8:5d:
69:a1:84:f0:a4:f5:7e:9e:91:ed:d5:5b:4f:f0:06:23:df:8b:
9f:71:0e:d3:90:ac:37:25:9a:3b:5e:70:9b:cc:39:eb:47:46:
44:cc:00:cb:23:d3:ca:88:98:df:f9:38:d8:fb:ff:ba:65:50:
73:d4:19:b0:c1:55:20:f0:d2:39:2a:53:46:8b:61:93:c1:3e:
db:eb:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:00 2024 by rpki-client on console.sobornost.net