Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/VKr-CFIdALTwK-GPRsQMjE7Qj6A.roa
File: VKr-CFIdALTwK-GPRsQMjE7Qj6A.roa (raw, json)
Hash identifier: EX/B/lEereMLspnE6ssDG/lGfGSj29FHpGyKQe8Ejfs=
Subject key identifier: 54:AA:FE:08:52:1D:00:B4:F0:2B:E1:8F:46:C4:0C:8C:4E:D0:8F:A0
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 01856D4AAFCEA9FA9BE38F3D4E358E39FCF8
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/VKr-CFIdALTwK-GPRsQMjE7Qj6A.roa
Signing time: Sun 01 Jan 2023 12:24:49 +0000
ROA not before: Sun 01 Jan 2023 12:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201116
IP address blocks: 193.34.236.0/23 maxlen: 23
193.34.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:af:ce:a9:fa:9b:e3:8f:3d:4e:35:8e:39:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Jan 1 12:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54aafe08521d00b4f02be18f46c40c8c4ed08fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:72:61:1e:18:19:7b:07:cb:12:7c:29:e3:42:
f3:e1:8f:91:3c:24:18:41:67:3d:e1:22:1f:66:5a:
24:7c:ce:8c:3d:df:51:40:d3:91:87:92:41:29:9c:
22:2d:6b:c9:35:5e:35:59:de:d6:64:92:76:b6:d2:
9f:4f:73:60:c4:2f:9b:46:47:eb:19:a4:30:35:d2:
bb:08:57:95:de:ab:06:25:bd:25:ed:56:78:45:b4:
04:3c:3b:b0:1c:02:47:ba:9c:aa:5c:37:89:ac:88:
20:2a:ac:58:18:ea:cc:33:09:49:33:73:c3:dd:af:
36:f8:06:91:dc:de:42:7b:2b:85:f4:cc:b4:5a:4c:
e5:dd:07:9f:c3:01:f2:56:5a:50:53:27:e1:ea:1e:
f7:8b:67:1d:a0:86:00:a5:cd:28:0e:62:1c:86:50:
38:6a:2f:1e:f1:3f:41:70:89:ca:9a:74:2c:3d:71:
0f:1e:17:7e:f4:0f:55:64:f2:86:02:d6:9c:fe:fa:
37:c6:3b:22:63:46:5b:f9:27:f0:78:98:92:58:eb:
a5:da:a7:fa:41:5a:26:aa:14:12:58:7f:ec:a2:20:
a0:6f:f5:a7:86:f6:40:7e:87:a9:e8:f0:7a:d1:3a:
66:db:5a:35:e0:c1:07:1e:ec:37:70:9a:36:d1:fb:
85:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AA:FE:08:52:1D:00:B4:F0:2B:E1:8F:46:C4:0C:8C:4E:D0:8F:A0
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/VKr-CFIdALTwK-GPRsQMjE7Qj6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.236.0/22
Signature Algorithm: sha256WithRSAEncryption
35:41:07:a6:09:db:7a:9f:f4:f0:40:0f:17:ab:f8:97:eb:d2:
4c:23:82:b3:2a:bf:7d:f9:66:b7:ae:ea:9e:49:80:b8:aa:b2:
3e:78:79:e2:f3:4e:10:c5:1f:f5:dc:97:b2:f0:98:35:cb:b6:
6f:e0:ed:9e:32:78:b7:6c:73:bf:01:18:fb:d9:2e:6b:e2:c7:
3b:97:98:70:93:79:98:94:c8:12:c9:a5:0a:c8:e0:f9:e4:51:
eb:09:1c:50:b0:7e:7c:83:e9:41:ab:48:3b:cb:27:33:d2:53:
24:e3:d0:49:be:e5:a2:7d:95:3e:f4:28:80:f1:dc:93:01:a3:
9b:fa:bf:1a:81:92:d1:6a:12:cf:e2:84:ed:b4:3e:57:6f:93:
48:4c:c9:78:ee:68:d1:7b:ff:75:d9:68:cf:78:2d:38:20:11:
67:3a:17:a5:5e:f5:48:13:54:76:1a:4c:b7:bc:2f:c0:55:e3:
42:cb:f4:21:b0:33:36:02:f4:a7:63:6a:1b:9d:c7:2e:ae:2c:
af:d7:0e:74:55:f5:f9:2a:31:8d:40:61:0e:59:a3:ae:3c:99:
25:17:40:c0:3b:66:8c:0f:ab:8f:ed:84:97:f2:1e:26:e4:09:
60:85:50:83:05:3a:70:85:2f:98:75:4a:d8:c7:74:6f:bf:17:
18:0b:18:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:00 2024 by rpki-client on console.sobornost.net