Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/F5nX-ITnMdQrLwG_ucfjSLFzND4.roa
File: F5nX-ITnMdQrLwG_ucfjSLFzND4.roa (raw, json)
Hash identifier: 1MSXvDm1Y9U4GNs4QqzxwMqxqxAyF8A6Nq9B7HQ1fxc=
Subject key identifier: 17:99:D7:F8:84:E7:31:D4:2B:2F:01:BF:B9:C7:E3:48:B1:73:34:3E
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB89AA28679DB00342FD0AEC7CF55A
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/F5nX-ITnMdQrLwG_ucfjSLFzND4.roa
Signing time: Sun 01 Jan 2023 19:25:10 +0000
ROA not before: Sun 01 Jan 2023 19:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8764
IP address blocks: 62.122.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:89:aa:28:67:9d:b0:03:42:fd:0a:ec:7c:f5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1799d7f884e731d42b2f01bfb9c7e348b173343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:ef:ed:fe:17:d1:9e:c6:e0:47:fe:a1:7a:
27:36:ee:ff:61:cd:df:45:4b:20:19:8c:4b:1b:0b:
f4:c8:86:81:72:4b:4d:03:72:bd:eb:ef:df:ee:c5:
b4:fd:93:43:0e:16:42:9f:f4:41:a6:cc:e8:47:f4:
be:da:40:bc:f8:2f:d8:4b:46:a0:17:ec:9c:96:18:
58:5f:34:2b:28:19:e5:4e:7b:b4:ae:78:b8:10:ee:
5b:c2:c0:79:8b:3f:e8:d6:8e:14:f3:48:04:2d:09:
2a:fb:e6:da:1a:07:03:46:be:5b:5c:ab:f3:29:57:
b6:09:4c:35:16:8d:e3:47:b8:97:aa:c5:8f:e0:e2:
a5:14:d8:c0:8a:6b:b9:6b:37:67:8a:a0:34:40:ba:
a3:31:fc:6d:34:1f:1c:97:e3:da:b5:21:7b:28:94:
8c:34:33:dc:a2:73:45:e8:a3:b5:b2:47:64:d0:e1:
18:5a:fa:ad:62:45:df:34:ca:0b:a1:72:92:37:d0:
45:8c:e6:79:d0:95:65:cc:8a:18:1a:8b:c3:8b:93:
67:65:b1:4a:70:df:59:24:9f:18:d3:72:ff:89:7a:
91:1d:af:89:c7:b5:3e:0a:de:5a:31:03:30:51:0b:
6c:d2:ff:0a:5a:91:de:28:84:0d:41:ce:6d:a5:fc:
4c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:D7:F8:84:E7:31:D4:2B:2F:01:BF:B9:C7:E3:48:B1:73:34:3E
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/F5nX-ITnMdQrLwG_ucfjSLFzND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.76.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:7c:71:24:06:30:8e:29:e1:11:37:1c:64:bd:13:ee:65:7e:
f0:e5:f9:c6:04:98:4e:2f:ed:f3:79:b4:34:5f:3f:fb:06:91:
ed:a6:ac:34:70:bb:cb:d8:62:68:d3:71:51:ef:1a:96:cf:8e:
91:9f:18:1f:e6:d7:e4:82:02:97:44:ef:e8:e3:3b:55:3b:25:
e8:cb:57:4e:5d:03:36:84:51:4e:84:ae:72:a1:03:d6:c1:17:
5a:51:51:40:44:37:24:85:b2:e7:39:d2:ef:09:26:39:52:1f:
dc:91:aa:9f:d2:c0:64:77:7e:a6:78:99:cc:83:92:91:68:04:
c9:e1:a4:28:ca:3d:00:d3:a5:0f:4b:83:20:87:98:1d:d2:17:
7e:aa:c6:7d:ac:ae:3f:94:cd:d0:62:2d:e9:1c:65:b9:32:1d:
5c:a7:bf:74:67:54:7a:0f:ed:60:fe:5e:c5:27:37:99:3c:b7:
47:ad:b2:2e:87:f8:12:44:72:05:35:5f:67:8a:e4:38:56:59:
b0:47:c7:2a:33:87:43:55:ff:74:f6:1f:68:ab:48:0c:ad:15:
79:0b:7a:4d:45:ee:d8:30:1e:0a:d1:0c:7f:56:f8:3c:0e:12:
09:7f:d1:39:c4:31:94:a0:02:e6:6e:f3:27:fc:71:80:46:39:
f3:58:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:33 2024 by rpki-client on console.sobornost.net