Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/CqI3fqtO4_khZPGuRd4u9XquRfs.roa
File: CqI3fqtO4_khZPGuRd4u9XquRfs.roa (raw, json)
Hash identifier: tzz7yp66j/3hW7NWkDSK22jBc2LStnA7h8nvDKJhzbk=
Subject key identifier: 0A:A2:37:7E:AB:4E:E3:F9:21:64:F1:AE:45:DE:2E:F5:7A:AE:45:FB
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 018572A7F9D0E22CA8D7533C0C1F59420849
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/CqI3fqtO4_khZPGuRd4u9XquRfs.roa
Signing time: Mon 02 Jan 2023 13:24:49 +0000
ROA not before: Mon 02 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:f9:d0:e2:2c:a8:d7:53:3c:0c:1f:59:42:08:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Jan 2 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa2377eab4ee3f92164f1ae45de2ef57aae45fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:99:95:90:15:bf:10:5d:16:f9:8a:12:03:
52:35:27:98:98:68:85:2e:b2:cb:65:a5:99:6e:96:
e5:36:ad:fd:0f:95:85:8c:65:89:ef:b2:ca:88:52:
32:08:ec:a6:35:a8:22:65:e0:4f:66:12:8e:fa:53:
de:09:99:cc:a1:68:7d:59:a6:14:64:3e:0f:9f:15:
c0:74:a1:14:22:22:58:57:16:16:47:ec:17:e9:9f:
5f:8b:1e:b8:b6:3c:4d:87:b9:f4:d2:31:49:2f:e4:
4c:ad:a1:3a:b1:d6:3b:02:58:7f:97:58:01:2e:ff:
b4:4f:4d:10:d0:25:8f:b7:3d:42:1a:55:e1:d3:00:
6a:4c:e2:ce:54:ee:b5:9c:94:e4:cd:02:bc:cd:e7:
b1:f8:ac:10:1a:69:8d:19:1b:7a:5d:16:7c:cf:39:
f6:a6:1c:ed:4c:e2:64:c0:f4:29:e5:18:9f:ac:43:
02:78:9f:fe:8f:60:f8:ef:0f:6b:60:2e:e1:ec:dc:
38:db:dc:6c:4c:6c:15:75:6f:cc:74:78:f8:20:ee:
67:48:c8:98:3f:c5:4e:b8:a9:7b:3e:00:6f:aa:2a:
f0:61:b3:2b:db:d1:d0:14:45:c1:0a:90:a4:fc:03:
24:39:91:b6:76:7f:64:b6:38:1b:67:c0:48:7e:5b:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:37:7E:AB:4E:E3:F9:21:64:F1:AE:45:DE:2E:F5:7A:AE:45:FB
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/CqI3fqtO4_khZPGuRd4u9XquRfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a9:e1:15:d6:b8:85:6c:71:85:0d:e2:05:8a:aa:64:38:94:
e8:57:0f:07:e0:96:54:50:bb:e1:59:99:49:5b:97:8b:e1:35:
7e:1a:1c:7e:6a:7b:3c:a4:5b:ef:8c:82:4e:52:5e:27:89:b9:
01:64:27:84:2b:ac:c5:81:41:a2:51:be:4e:a0:16:a3:6a:21:
d6:26:e9:27:44:0f:7a:d3:71:4f:2b:2d:13:2e:fa:29:f2:a3:
ac:b9:ad:56:b9:55:8a:ce:4b:24:5f:a7:80:53:de:28:14:d0:
4c:b9:ea:9a:8b:de:e2:d3:32:d7:3c:32:5f:f0:cd:9d:d5:9f:
4d:81:26:67:2f:79:39:91:99:f2:fe:68:f3:7f:1c:9c:82:3b:
c2:01:53:4f:ec:3d:59:69:d7:95:07:43:26:74:e6:d6:a7:2c:
20:c9:25:b3:f1:3c:82:a4:fb:7c:8c:9d:4b:57:61:37:48:d8:
e8:bb:7d:88:07:10:78:69:8c:2e:49:ab:ab:81:44:99:c3:7a:
8d:69:70:c7:fc:90:98:1f:5d:05:e4:95:d4:41:da:a6:89:50:
06:0f:5b:84:c5:ed:25:8b:52:7c:8d:e0:92:33:13:67:5a:02:
09:15:4a:71:93:3a:c6:e2:41:25:52:01:d0:54:d6:2d:d7:f3:
9d:11:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net