Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/c4N0xbyTa9iBuQ_YcLAG9syr-s8.roa
File: c4N0xbyTa9iBuQ_YcLAG9syr-s8.roa (raw, json)
Hash identifier: CIXhVdUVkv0qFu9qb6+eiEhAOTXk8/Nk4rmEkyU92k8=
Subject key identifier: 73:83:74:C5:BC:93:6B:D8:81:B9:0F:D8:70:B0:06:F6:CC:AB:FA:CF
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 018570CBE5DEE49E415F94B0E0AAEA2C0D44
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/c4N0xbyTa9iBuQ_YcLAG9syr-s8.roa
Signing time: Mon 02 Jan 2023 04:44:48 +0000
ROA not before: Mon 02 Jan 2023 04:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15943
IP address blocks: 194.55.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:e5:de:e4:9e:41:5f:94:b0:e0:aa:ea:2c:0d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jan 2 04:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=738374c5bc936bd881b90fd870b006f6ccabfacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:8e:bf:8e:5e:17:9d:c5:39:28:d3:27:4d:
06:44:34:38:0a:09:9d:49:96:be:e4:d0:35:f3:ac:
10:98:bc:35:77:22:ce:57:f6:5a:09:40:f4:7b:eb:
6c:60:77:55:2e:ee:ef:e3:d4:6a:8f:85:69:17:07:
f3:e3:34:d2:43:49:91:0a:3f:10:c0:d4:b5:6f:0f:
e3:cb:d2:eb:76:ea:0f:5d:f5:c8:78:e5:0e:99:32:
ff:2d:77:17:76:28:26:aa:08:79:38:81:64:24:56:
29:95:43:13:cd:d8:2e:ae:67:1a:75:c5:9d:05:b8:
41:32:53:e3:b2:4c:32:8b:41:41:41:4f:94:12:6c:
4e:b3:66:76:a9:35:37:33:45:46:f1:53:b4:6d:6a:
42:09:74:dd:42:75:2b:38:1e:95:71:95:4b:61:ec:
7e:1d:bc:e0:9e:76:c6:1e:5a:34:d7:a4:82:1d:a5:
c6:07:da:42:71:9a:e9:f3:a2:2b:68:f3:a0:5e:6d:
05:63:2b:a9:ae:0d:a8:38:99:6e:07:71:d9:b2:3e:
6e:a1:3d:57:52:5d:87:35:c1:9f:94:ed:b5:be:cc:
2d:e5:38:89:27:85:07:0e:fe:e5:0e:48:fd:91:ab:
94:53:8a:01:31:2c:ba:7e:37:4d:09:df:54:fd:85:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:74:C5:BC:93:6B:D8:81:B9:0F:D8:70:B0:06:F6:CC:AB:FA:CF
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/c4N0xbyTa9iBuQ_YcLAG9syr-s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:e6:d9:a7:7e:fe:b9:33:62:7f:0a:22:0a:e8:94:54:6a:d9:
79:45:b6:41:81:7e:34:ed:d6:3d:98:93:da:ac:d2:2e:5d:e5:
6b:09:91:11:23:c1:0a:cb:c4:23:46:81:54:cb:f4:31:7c:ca:
f4:a9:9c:7b:80:d5:60:17:ba:3c:6c:14:50:31:d0:a2:69:33:
2a:42:cb:9e:55:6c:19:1a:7e:af:46:22:9b:4d:33:1d:cb:4a:
c3:26:fd:60:70:27:16:b7:03:ce:9e:e2:b6:ce:f0:f6:44:bd:
d8:32:32:16:06:62:d3:0e:b5:d6:fc:8f:90:ba:8b:b7:17:7f:
ea:03:91:e6:27:e6:99:89:26:fd:51:d8:57:e2:a0:30:97:17:
41:eb:f5:2c:73:ef:b6:a3:b1:97:00:61:ef:bc:7b:b6:f3:55:
51:68:65:d3:d1:01:3d:f1:f5:1c:e4:fc:7d:d0:cd:1c:50:47:
20:50:ac:49:0b:51:20:1d:39:6a:71:a6:d7:37:3d:78:6f:4f:
27:49:d6:30:6c:62:ae:b8:e2:9e:8c:53:df:34:e1:87:de:fc:
78:47:81:22:d9:ac:f6:e6:dd:42:07:29:6b:24:d1:88:f5:a5:
bb:57:ea:11:ee:02:b8:85:d7:85:30:1b:33:9f:83:b8:54:c7:
55:03:51:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:10 2024 by rpki-client on console.sobornost.net