Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/aSXjRYCjRaxH27aocB_Fo8mO7ag.roa
File: aSXjRYCjRaxH27aocB_Fo8mO7ag.roa (raw, json)
Hash identifier: 5yNOtTdk4bAPA1gN9P1V1sRgibOJ9BRvxGgk90Ub44U=
Subject key identifier: 69:25:E3:45:80:A3:45:AC:47:DB:B6:A8:70:1F:C5:A3:C9:8E:ED:A8
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 018570829176524212D022F32E79AA8843B0
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/aSXjRYCjRaxH27aocB_Fo8mO7ag.roa
Signing time: Mon 02 Jan 2023 03:24:43 +0000
ROA not before: Mon 02 Jan 2023 03:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8991
IP address blocks: 192.135.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:91:76:52:42:12:d0:22:f3:2e:79:aa:88:43:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jan 2 03:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6925e34580a345ac47dbb6a8701fc5a3c98eeda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:eb:80:05:f9:0f:42:a1:88:83:f9:af:97:b1:
09:93:61:ba:9c:01:82:f8:5d:d8:54:c2:07:53:db:
b2:2a:24:70:99:bf:e4:7f:05:59:42:65:ac:9b:38:
69:d8:24:9b:96:50:21:fa:43:d7:58:a4:0b:f2:9f:
92:27:11:b4:66:83:a1:6c:2d:2f:7f:34:95:f8:86:
5d:db:e2:91:fa:69:9e:e3:66:8b:31:6c:10:00:6c:
27:8b:cc:43:f3:ee:8e:c0:0c:25:5c:58:79:5b:6e:
e6:c3:4f:30:75:70:7d:8b:31:e3:c3:7a:58:de:67:
91:8e:6e:9a:27:cb:b1:45:24:f2:8f:98:bd:d4:02:
b6:ca:21:bd:65:15:dc:87:09:81:76:09:ee:53:d2:
b6:74:27:5e:56:41:ab:be:02:5d:4f:16:92:71:f5:
ae:47:d3:40:da:ad:7e:a0:e4:bc:6c:ac:f3:54:f9:
40:0d:32:1f:69:c2:f0:60:64:85:11:b7:a9:a3:2f:
79:19:fa:24:80:4c:5f:b6:86:49:18:f1:14:5d:70:
fa:84:db:33:6c:71:ac:fa:d0:d1:f2:c2:04:16:46:
e8:90:b4:0f:06:40:53:bf:44:af:d6:e9:2d:b3:25:
c1:ac:ba:1a:e3:01:2f:0f:f8:4a:db:60:15:74:9d:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:25:E3:45:80:A3:45:AC:47:DB:B6:A8:70:1F:C5:A3:C9:8E:ED:A8
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/aSXjRYCjRaxH27aocB_Fo8mO7ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.166.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b2:12:10:1a:92:33:8f:e7:7a:7a:a6:f5:4e:8d:f3:1e:d1:
d8:18:61:50:f9:fb:e0:55:99:85:0d:61:95:a3:3f:95:d1:2b:
a2:f2:81:c6:78:4b:41:5c:0f:f6:42:e5:0f:c8:ca:3d:02:c5:
0d:38:1c:d9:fb:96:63:34:d3:ec:2b:e4:6c:5f:ca:bf:03:48:
c0:b4:fa:b7:20:3c:37:7f:be:a0:2a:ba:0e:6a:94:f9:85:10:
ad:4c:78:74:1a:bf:2e:11:5e:d4:5a:fd:95:86:0f:a8:85:4b:
2a:7f:0b:13:b7:a5:06:70:27:9f:2c:8c:5d:03:35:39:11:0e:
c2:ae:83:38:d7:e4:15:88:51:af:6a:73:b3:08:89:4c:5e:34:
c3:1a:2d:fb:f7:aa:5e:0f:d7:fe:8d:9b:8b:17:81:9a:b3:63:
50:aa:e7:26:ca:0d:72:b1:0c:f0:39:58:69:f0:f6:bf:e5:17:
f2:e9:50:00:bd:ef:b1:9e:2a:88:6b:7a:93:d6:5a:01:5b:c9:
c2:22:d9:40:3b:e4:85:9c:75:82:f9:45:a2:67:89:45:b1:c0:
0c:e2:ad:d7:2f:51:32:87:c2:05:d9:55:41:0d:e0:60:31:40:
6b:51:7f:f9:c1:c0:99:4d:ec:2f:d1:91:55:e9:92:3a:92:79:
66:a4:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:12 2024 by rpki-client on console.sobornost.net