Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/xkYseksnxpJXbnELDj2qUWydAzg.roa
File: xkYseksnxpJXbnELDj2qUWydAzg.roa (raw, json)
Hash identifier: Cym6Bv7POh54CN1bNRv6ONUqvD2li3eYKzmRxGhZLP8=
Subject key identifier: C6:46:2C:7A:4B:27:C6:92:57:6E:71:0B:0E:3D:AA:51:6C:9D:03:38
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0187F08C198A2688B44D59E102D247977218
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/xkYseksnxpJXbnELDj2qUWydAzg.roa
Signing time: Sat 06 May 2023 10:12:06 +0000
ROA not before: Sat 06 May 2023 10:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59929
IP address blocks: 195.12.61.0/24 maxlen: 24
195.12.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:8c:19:8a:26:88:b4:4d:59:e1:02:d2:47:97:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: May 6 10:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6462c7a4b27c692576e710b0e3daa516c9d0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:ef:8f:ae:ff:5b:d2:e8:b7:8e:41:c6:57:
f5:de:af:10:48:27:1a:71:d3:f8:db:c2:65:e2:03:
20:6b:82:36:b0:35:ee:05:8e:02:db:ba:d0:86:6c:
90:81:91:ad:f8:9f:60:10:7d:a5:a5:ac:4d:5e:84:
50:a9:b8:ba:6a:ca:b8:c9:84:3d:73:41:b1:38:40:
93:94:93:1d:0c:3d:7e:31:1f:df:f9:92:82:57:43:
cd:24:e5:66:9d:f9:39:a2:8e:39:21:6f:9e:96:c7:
7b:6e:47:c2:86:5d:6f:76:ad:91:7b:f6:e6:83:ac:
d6:59:d7:f3:8f:fb:52:b2:47:f8:8d:88:e2:03:e9:
1c:69:61:b7:78:73:a5:dd:dc:35:a3:43:62:8e:9c:
60:94:b9:35:84:b4:12:47:0d:19:05:4d:10:1d:cf:
85:7a:9a:ab:47:e4:0e:31:fe:c1:e5:02:08:23:ad:
1a:2a:39:e3:03:97:4c:77:a0:64:05:a6:e7:71:34:
df:e8:e8:03:83:d8:dd:7e:a0:81:82:6b:03:e7:82:
24:42:b2:b5:db:df:d9:4b:53:55:65:72:54:18:03:
cf:d4:71:e8:47:db:f2:a8:a1:d6:a7:be:36:c7:5e:
25:bf:9c:b7:aa:72:7a:d2:5f:64:0f:12:5c:da:66:
c2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:46:2C:7A:4B:27:C6:92:57:6E:71:0B:0E:3D:AA:51:6C:9D:03:38
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/xkYseksnxpJXbnELDj2qUWydAzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.12.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:7f:03:9b:d5:59:1a:8c:5f:8e:da:ff:b4:60:cb:1a:40:74:
97:b3:ee:84:a9:3d:9b:04:63:92:8d:7a:2f:12:5b:70:d9:2d:
aa:45:54:79:d4:71:1a:7c:64:15:48:ab:db:74:dd:ec:09:ce:
af:52:c1:3e:f8:72:f6:a0:65:dd:ad:30:91:b1:27:da:7d:48:
f7:e2:a0:bb:89:3d:4d:65:aa:6a:3c:27:41:f3:cd:04:57:a6:
7f:18:f9:04:18:ed:2d:94:e6:6d:eb:81:17:62:13:65:65:58:
80:b7:65:2f:20:10:63:e0:26:9e:6a:16:1c:07:d1:2e:1c:94:
af:02:45:33:60:51:76:1d:95:8e:ea:2f:73:88:04:0f:38:9b:
02:3d:b8:07:f3:0e:e3:45:16:ae:bd:8f:3d:5c:1c:a4:98:ad:
ef:cd:ef:f8:7e:b2:2a:7f:17:3f:30:df:1b:c1:e0:66:8b:f6:
7b:f0:2e:09:1b:65:b8:ad:e0:e7:d6:c4:ec:72:13:18:33:b5:
04:79:78:f3:6f:72:85:6d:72:0e:c9:96:94:46:f1:82:16:bd:
27:9e:ce:d5:35:a3:4c:42:ea:16:58:41:f1:e5:04:ac:e4:27:
1f:8b:e3:f0:45:72:86:7d:39:0b:eb:49:02:9d:f7:ae:26:d7:
61:80:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:52 2024 by rpki-client on console.sobornost.net