Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/_ZNDmJrq0KXcEPcT46x2rmwQCyc.roa
File: _ZNDmJrq0KXcEPcT46x2rmwQCyc.roa (raw, json)
Hash identifier: +56sLIWi0v0TDMWEuNJn+0uu2L/Ed6xocIIXTmKJbxw=
Subject key identifier: FD:93:43:98:9A:EA:D0:A5:DC:10:F7:13:E3:AC:76:AE:6C:10:0B:27
Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial: 018A8D6F82F27C098A30F23E88195333D2AC
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/_ZNDmJrq0KXcEPcT46x2rmwQCyc.roa
Signing time: Wed 13 Sep 2023 07:26:50 +0000
ROA not before: Wed 13 Sep 2023 07:26:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200428
IP address blocks: 217.20.254.0/24 maxlen: 24
2a13::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:6f:82:f2:7c:09:8a:30:f2:3e:88:19:53:33:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
Validity
Not Before: Sep 13 07:26:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd9343989aead0a5dc10f713e3ac76ae6c100b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:62:4b:b9:3f:b0:5c:7f:d5:f0:ca:4e:56:
63:fd:ae:87:71:76:03:32:be:8a:58:99:e7:70:39:
83:86:56:82:8c:f3:28:b3:12:79:90:0f:53:d3:ee:
cd:c1:3c:71:b3:52:df:c7:8b:fc:c3:73:9b:05:0f:
95:57:5a:fc:10:1c:35:9e:46:23:4b:cc:c9:35:b0:
dd:d9:90:8a:56:49:a9:1a:b6:7c:8e:ad:03:d4:a1:
a7:97:65:25:af:9e:5f:8f:ff:cd:9e:51:85:78:80:
91:77:7e:20:0c:34:12:35:9b:6f:52:58:4f:a2:08:
2f:64:56:bc:6e:ed:bc:86:87:76:3e:72:f6:e7:89:
db:30:f8:10:76:ed:b6:09:f1:49:c2:cf:55:88:15:
54:aa:8e:39:c0:a9:1e:de:6c:9c:c1:0a:45:d6:33:
74:0b:64:ae:da:7d:d9:4e:94:7c:02:9e:65:15:40:
6f:e3:33:aa:37:bc:9e:8c:42:66:33:18:68:03:0e:
c3:18:9a:4f:9f:de:28:e8:bc:ea:f0:e1:a7:91:14:
f3:14:44:24:44:2f:fa:7f:02:4a:e0:e1:91:a6:64:
0c:44:47:dc:34:6c:c0:2d:46:a5:6f:61:3b:4f:ae:
a4:fd:e3:f3:bb:75:5e:00:35:de:11:32:47:be:ff:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:93:43:98:9A:EA:D0:A5:DC:10:F7:13:E3:AC:76:AE:6C:10:0B:27
X509v3 Authority Key Identifier:
keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/_ZNDmJrq0KXcEPcT46x2rmwQCyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.20.254.0/24
IPv6:
2a13::/29
Signature Algorithm: sha256WithRSAEncryption
b4:d6:11:61:23:75:9a:e7:47:fe:1d:6d:ed:05:cf:52:64:ff:
e9:9b:ac:3d:03:54:f8:49:80:86:99:7a:c4:18:1d:20:81:38:
a8:34:71:56:f0:90:a7:9a:87:83:85:e2:f7:ce:c9:f3:0a:41:
ab:39:0a:32:1a:99:fd:e7:1a:eb:1a:02:63:ff:6a:92:f1:32:
c8:05:60:4b:55:08:9f:6e:c4:44:5e:9b:3f:81:e8:91:ea:11:
04:76:ab:06:06:1f:6a:76:cf:cf:d5:4f:a9:00:f9:7a:ab:05:
77:f8:4a:38:05:53:b9:da:a9:b2:fd:1e:4a:2a:ee:1b:ec:25:
58:78:df:f1:a6:85:7e:dc:ac:54:84:d7:1b:83:2a:cf:51:fc:
20:e2:a1:9a:b6:2c:d9:16:47:b9:a4:73:9a:d6:e9:bc:64:3d:
ab:c1:5c:70:a8:37:2e:f8:46:3d:db:95:70:0c:33:62:3c:5b:
ca:d1:5f:5d:cc:1d:f3:be:b6:b8:9b:8b:3b:7a:84:10:ac:26:
9e:6f:db:ed:a1:6e:d7:e6:9d:c5:da:be:61:77:63:b3:0b:4f:
6e:f1:b0:b5:31:6a:4e:de:de:17:fb:7b:ed:3d:c7:76:8f:8a:
8a:ec:47:c8:1c:d8:e3:5c:ec:3c:ab:6a:f3:ff:2a:33:71:5c:
2a:21:73:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:13 2024 by rpki-client on console.sobornost.net