Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/i591_HC3ZbuBXexNpsl3mERIBG0.roa
File: i591_HC3ZbuBXexNpsl3mERIBG0.roa (raw, json)
Hash identifier: ZiEbPPrAYsaoJASJrTjkR2AsDS1pBJf3YVrwlcZfPjA=
Subject key identifier: 8B:9F:75:FC:70:B7:65:BB:81:5D:EC:4D:A6:C9:77:98:44:48:04:6D
Certificate issuer: /CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Certificate serial: 018570675E67A90F366850CD3594372008B2
Authority key identifier: 4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/i591_HC3ZbuBXexNpsl3mERIBG0.roa
Signing time: Mon 02 Jan 2023 02:55:00 +0000
ROA not before: Mon 02 Jan 2023 02:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20777
IP address blocks: 194.125.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:5e:67:a9:0f:36:68:50:cd:35:94:37:20:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9a3b9e10232095c18d2644440ce5c58a138b35
Validity
Not Before: Jan 2 02:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b9f75fc70b765bb815dec4da6c977984448046d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:0b:2e:70:aa:5f:61:0a:bf:12:56:50:f7:
8f:b6:cf:6a:6a:82:91:35:8a:05:34:f4:bf:57:fc:
ec:f4:d4:b5:55:14:46:ad:00:09:a2:b2:c1:e8:5f:
fb:ae:c0:06:90:60:1f:5a:18:59:39:f5:a9:48:83:
d4:4b:66:f1:79:aa:82:2b:60:af:22:74:9f:50:74:
60:82:1d:ef:0d:8b:10:46:f8:36:7a:d4:ee:19:65:
a0:51:01:f5:85:54:41:23:49:c0:62:5e:d6:91:74:
18:2e:b3:de:a4:c8:c0:d0:4a:02:f1:38:a8:f1:db:
8d:06:44:59:d1:3d:55:90:ab:10:d5:31:27:65:87:
7f:56:89:a7:56:19:6c:f3:c0:f0:9a:0d:eb:ce:4c:
6b:a5:f8:d0:e9:cc:b0:d9:7f:96:8f:1b:d5:fe:e7:
48:d4:43:90:86:ba:58:bc:7e:12:27:33:54:93:18:
99:1f:28:4d:2b:c8:f3:ba:ac:da:69:49:1a:9b:26:
20:5f:18:b9:6c:93:56:3a:58:90:c1:de:96:a6:fa:
49:d7:0e:73:11:a8:b2:47:35:e7:e8:dc:b1:2a:bc:
75:2d:4e:a2:dd:62:3d:eb:b5:c5:e6:9e:99:09:32:
df:bf:64:00:56:f3:8d:55:23:98:ea:96:65:1b:16:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:75:FC:70:B7:65:BB:81:5D:EC:4D:A6:C9:77:98:44:48:04:6D
X509v3 Authority Key Identifier:
keyid:4B:9A:3B:9E:10:23:20:95:C1:8D:26:44:44:0C:E5:C5:8A:13:8B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5o7nhAjIJXBjSZERAzlxYoTizU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/i591_HC3ZbuBXexNpsl3mERIBG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f21ee0-d730-45db-97bd-c34be03c15db/1/S5o7nhAjIJXBjSZERAzlxYoTizU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.241.0/24
Signature Algorithm: sha256WithRSAEncryption
69:80:1b:1a:52:a2:5b:37:d8:02:6d:f4:13:71:f3:ff:c8:3c:
0b:30:6d:48:a6:01:51:64:98:17:55:be:34:6a:3d:ab:02:4d:
95:ca:b4:b9:34:fa:29:1f:5a:cc:c3:a2:96:f0:46:13:01:d4:
37:f1:3a:d2:e8:24:8e:b1:8c:b4:d3:aa:df:1f:3d:36:be:7f:
f2:ff:14:4a:c8:98:26:a5:e8:d3:1d:5d:ec:33:4d:78:f8:aa:
93:3f:a4:42:5b:80:66:33:8d:5a:36:f8:24:f5:49:72:2d:40:
b5:6c:8e:b5:36:ff:20:a6:f3:d1:8d:8c:8d:c6:5f:36:ee:49:
69:55:84:c1:55:7a:7b:b5:65:a5:8c:45:b1:8d:2e:0f:90:21:
d5:cb:ae:c0:87:f6:b9:82:dc:6c:91:2e:91:41:b6:5f:26:e7:
67:cf:fc:48:ae:12:2b:9f:06:dd:53:96:a8:04:31:ab:0b:75:
7a:9d:dc:ea:85:79:24:6f:64:ed:46:6c:7d:5c:d3:2c:79:66:
1f:c2:f1:2d:19:95:40:92:21:e5:f1:74:b8:37:93:76:88:ca:
f8:c3:d0:92:a3:1f:32:fa:ea:a8:c9:94:2d:f1:0f:e5:84:be:
2e:cc:42:a7:84:94:88:aa:05:d5:35:09:f7:aa:2f:21:ae:91:
4c:41:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:04 2024 by rpki-client on console.sobornost.net