Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/vi8dFfvg1HgLmcyZbEGiaSbMW_I.roa
File: vi8dFfvg1HgLmcyZbEGiaSbMW_I.roa (raw, json)
Hash identifier: fnGoy7WFU5uABBS7fu8yoFcpTUEQhi11C8i3lGBmRsg=
Subject key identifier: BE:2F:1D:15:FB:E0:D4:78:0B:99:CC:99:6C:41:A2:69:26:CC:5B:F2
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 018570CBD0474F20C69C04B35F25D4BD4583
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/vi8dFfvg1HgLmcyZbEGiaSbMW_I.roa
Signing time: Mon 02 Jan 2023 04:44:43 +0000
ROA not before: Mon 02 Jan 2023 04:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8695
IP address blocks: 185.1.39.0/24 maxlen: 24
2001:7f8:80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d0:47:4f:20:c6:9c:04:b3:5f:25:d4:bd:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Jan 2 04:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be2f1d15fbe0d4780b99cc996c41a26926cc5bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:fb:33:4a:88:63:49:87:e3:ca:60:28:67:
13:b3:cc:e8:0a:44:af:2e:5a:6e:7a:62:ed:a3:a2:
8d:8c:d2:32:1e:17:fc:8b:04:21:66:5b:96:60:03:
18:b7:c0:e7:e9:f9:00:58:97:10:f6:95:8b:96:86:
55:66:d1:fc:98:30:92:b1:76:a3:9c:91:7b:52:1f:
c7:ef:d7:ec:51:a5:f3:3d:a6:93:7a:88:f2:00:e2:
83:ea:74:1f:91:21:87:d0:b8:be:07:a7:d4:3a:a5:
b9:27:e5:29:d9:35:21:1d:1d:a9:57:b3:47:f7:cb:
17:5b:e8:6e:93:bd:5b:f6:2e:33:8a:1d:a5:ce:e6:
61:62:d1:b1:13:7b:29:23:8f:19:31:46:7c:27:d5:
33:97:c1:08:18:ba:26:ee:d1:a3:34:a9:61:03:86:
ae:97:b2:9a:b8:ec:c0:e9:19:d2:af:d9:ac:09:2e:
0b:11:11:5f:e8:78:9c:44:85:bc:c4:0d:64:6e:30:
3e:9b:7a:ea:7c:4d:1d:80:31:02:51:1e:a6:f5:d6:
86:3e:ba:a5:43:31:c7:a7:c6:67:e5:e9:d9:40:bd:
80:08:23:8d:6e:e2:d2:14:57:8a:b4:a5:37:cb:00:
4f:64:fc:8d:97:18:67:3a:6a:a6:84:08:f0:ef:d0:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:1D:15:FB:E0:D4:78:0B:99:CC:99:6C:41:A2:69:26:CC:5B:F2
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/vi8dFfvg1HgLmcyZbEGiaSbMW_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.39.0/24
IPv6:
2001:7f8:80::/48
Signature Algorithm: sha256WithRSAEncryption
1a:48:f0:5b:54:ef:06:60:05:51:ec:95:21:2c:f9:08:7a:ba:
09:d7:2f:f2:0b:b5:b0:ec:74:a1:75:47:75:28:73:31:27:a0:
e1:58:9c:95:f5:f0:39:75:ce:76:ac:09:4d:fd:ca:00:11:79:
75:73:56:52:46:7e:81:b3:3b:ef:83:d3:cc:fd:34:03:fc:ab:
39:36:ab:cc:19:a6:d8:d1:7e:ec:e6:ad:7b:56:44:6b:b2:b8:
60:24:be:b9:ab:c5:e7:34:35:68:58:71:4a:22:ad:df:c0:81:
d4:5e:d3:4e:31:74:68:05:ff:28:d7:df:2a:1c:2e:0c:7f:aa:
e2:2b:ac:37:3d:75:4c:91:36:dd:95:b1:78:35:79:7b:5d:bb:
47:9c:d8:e4:f4:13:2b:28:08:62:24:95:78:12:8b:49:49:29:
a9:a4:fc:bc:e6:49:9d:0d:cb:5e:6a:7e:1c:31:cb:1a:c4:3d:
88:5e:5c:cd:e0:7a:9b:31:ba:13:ae:d9:a0:2e:a4:45:98:95:
ec:e1:19:46:d8:0a:17:11:50:ee:9d:eb:8a:04:fe:cf:82:e3:
ec:41:bc:de:2d:49:e4:11:83:6c:07:65:ad:76:7e:8c:86:d8:
45:3e:67:46:0a:ca:11:6d:1b:1c:56:13:36:8e:08:29:4b:97:
ae:fa:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:00 2024 by rpki-client on console.sobornost.net