Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/8cyeuxUodkXeb9oHbt3nEb4QdWE.roa
File: 8cyeuxUodkXeb9oHbt3nEb4QdWE.roa (raw, json)
Hash identifier: Ls+NjRsK1gL6ACkCFV3SKb3497PEfxzDtYno68Sg3hQ=
Subject key identifier: F1:CC:9E:BB:15:28:76:45:DE:6F:DA:07:6E:DD:E7:11:BE:10:75:61
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 01856E6FC1B593A67516850AC6A418FFC1D4
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/8cyeuxUodkXeb9oHbt3nEb4QdWE.roa
Signing time: Sun 01 Jan 2023 17:44:55 +0000
ROA not before: Sun 01 Jan 2023 17:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50427
IP address blocks: 86.62.4.0/23 maxlen: 23
86.62.4.0/24 maxlen: 24
86.62.5.0/24 maxlen: 24
86.62.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:c1:b5:93:a6:75:16:85:0a:c6:a4:18:ff:c1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Jan 1 17:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1cc9ebb15287645de6fda076edde711be107561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:76:45:a8:93:71:95:d3:65:0f:d2:81:4c:
ad:fc:02:f7:91:bb:f5:94:b9:56:75:28:74:29:c1:
89:4c:18:99:4f:c7:cb:d7:a8:17:c9:29:4a:77:04:
47:8a:90:59:d4:c6:99:2e:b4:55:80:30:87:06:6f:
55:47:54:47:88:68:74:77:47:03:3d:28:40:44:8f:
09:67:e8:8f:b7:89:fa:07:18:f8:73:b5:d2:f2:3c:
8e:a7:e6:75:66:b4:26:a7:fa:3a:49:57:0c:fa:38:
34:b8:d2:27:e6:bb:6e:7a:4c:06:3d:7c:37:ad:a7:
86:2f:99:b3:f3:9c:37:39:83:59:0a:42:49:76:a0:
71:b2:e8:8f:a7:28:e7:a3:13:5d:7f:84:23:c0:74:
e8:b9:fa:84:3f:09:03:42:26:2e:60:f9:b5:dc:bf:
68:79:61:b4:e9:b0:90:51:c2:ae:de:5b:4d:4f:ab:
67:0e:55:e6:30:ca:38:6e:b7:12:02:9a:20:3a:a5:
c4:c9:3b:f7:d9:c8:de:b8:44:12:77:5a:47:40:d3:
d9:e4:08:1b:97:7a:f9:f1:8f:0d:f6:c8:c2:aa:ba:
a5:19:15:0a:12:d7:2d:e6:4a:82:56:17:f7:ca:1e:
f4:84:30:aa:63:3b:cf:cc:cc:b4:de:c3:fa:ce:43:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CC:9E:BB:15:28:76:45:DE:6F:DA:07:6E:DD:E7:11:BE:10:75:61
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/8cyeuxUodkXeb9oHbt3nEb4QdWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.4.0-86.62.6.255
Signature Algorithm: sha256WithRSAEncryption
0d:58:a5:2e:60:e9:17:9a:c5:91:21:0b:71:75:cc:31:25:1a:
cc:28:4b:65:2e:45:29:22:53:d4:7a:0b:ac:9a:02:7f:c0:7d:
0a:6b:25:e3:53:25:b9:7c:6b:42:68:83:45:d4:00:34:dd:31:
3a:16:a7:16:ce:04:d9:f8:48:98:af:4f:af:a9:20:31:6b:58:
57:04:2d:c9:20:4b:24:b3:87:69:9e:77:39:ec:3a:45:58:dd:
a0:b6:f9:7c:0e:a8:db:4b:ab:a7:9d:aa:ad:8e:ea:ac:de:6f:
0c:15:56:86:1c:4b:08:e0:7d:f0:54:a7:b5:4c:3a:da:17:e9:
75:2b:29:fd:41:db:b0:98:da:bd:e2:13:4f:d2:93:a2:44:a7:
6e:05:fe:d1:b4:5d:4d:0c:34:10:78:b0:c9:11:8c:4e:16:f2:
9c:6b:86:af:31:85:02:37:ff:95:c7:5b:11:0f:f2:ce:53:c1:
04:76:ac:82:b8:f1:be:a2:61:e2:99:2d:1e:e4:b6:37:8d:6e:
3f:34:50:7b:8d:75:af:a0:85:90:a5:4f:ba:3e:ad:3a:b8:e4:
6b:71:e9:ac:dd:b8:d4:fc:cd:3b:04:de:35:10:41:a7:1a:af:
eb:d0:5d:df:72:c9:23:23:5a:9d:62:21:e1:24:1b:b3:a8:c7:
2e:0d:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:04 2024 by rpki-client on console.sobornost.net