Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/y39jc7X8iR-24-VvdmmOWOPjMcU.roa
File: y39jc7X8iR-24-VvdmmOWOPjMcU.roa (raw, json)
Hash identifier: 1hIT5LSjQD1Zeg2BF32hIExj2Mvae4gpVzk0a5gaKEI=
Subject key identifier: CB:7F:63:73:B5:FC:89:1F:B6:E3:E5:6F:76:69:8E:58:E3:E3:31:C5
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01856ECB8D3554D11CF5C96655A4E92FD3EB
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/y39jc7X8iR-24-VvdmmOWOPjMcU.roa
Signing time: Sun 01 Jan 2023 19:25:11 +0000
ROA not before: Sun 01 Jan 2023 19:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 185.254.16.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8d:35:54:d1:1c:f5:c9:66:55:a4:e9:2f:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jan 1 19:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb7f6373b5fc891fb6e3e56f76698e58e3e331c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:0d:0c:9e:c4:92:9f:17:cc:0b:64:34:86:
74:5e:cc:e8:d1:1d:b2:c9:e4:ad:89:77:1a:e2:84:
9b:fc:50:50:5f:3a:78:7e:c4:8f:4c:10:33:77:ab:
2f:92:b0:91:4b:d4:54:a6:0f:2e:cf:5a:62:dd:48:
b6:70:70:5f:e2:a4:2d:6d:a4:7f:41:83:85:63:e4:
87:a6:20:10:f3:b3:61:9c:72:8f:20:5e:97:66:7c:
5c:27:11:62:a2:32:95:dd:05:af:dc:d6:af:02:58:
33:2d:62:31:f7:53:e0:48:30:af:87:52:aa:6f:42:
0e:51:4f:6e:9e:1d:f7:29:3d:cd:db:39:0d:0a:cf:
41:02:fa:a4:dc:00:7c:06:78:b3:b8:6f:81:42:d2:
05:41:76:9f:01:2f:75:4a:28:8f:8c:2e:41:f2:5b:
5c:4b:a2:08:2d:c6:25:6f:20:7d:3b:05:12:51:4a:
90:95:58:fe:be:25:ee:1d:62:f0:81:ff:6e:35:3f:
c6:bb:00:3d:c2:0b:89:23:41:4d:e0:60:b4:92:bb:
cb:89:e6:6a:38:a4:6a:f3:5f:14:dd:36:e5:32:c3:
af:38:0d:41:03:df:ee:e0:03:d4:d6:53:59:9e:6f:
c0:b5:f0:5b:34:4e:6e:9b:ac:76:61:7a:50:a9:e0:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7F:63:73:B5:FC:89:1F:B6:E3:E5:6F:76:69:8E:58:E3:E3:31:C5
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/y39jc7X8iR-24-VvdmmOWOPjMcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.16.0/23
Signature Algorithm: sha256WithRSAEncryption
87:f9:13:d4:92:5e:42:3d:d1:89:a7:c0:77:a4:e3:1d:0a:dc:
df:24:3a:bf:43:8e:7f:f9:dd:1b:61:6f:42:66:81:8e:6b:60:
bc:36:e1:c2:e5:1d:e1:2c:cd:9c:e2:db:28:d9:02:b5:ec:00:
52:f6:39:9f:ad:73:38:37:52:7b:47:5a:3e:7b:65:e1:c0:70:
84:9d:30:7a:79:90:fd:3e:1c:17:d9:d3:e1:d6:26:3f:0d:59:
66:e7:15:60:94:11:ef:ca:e7:7a:90:46:06:0a:82:68:b3:cf:
f9:5c:15:d9:28:c9:fb:23:d4:5a:5b:b5:1d:2e:28:12:ce:0b:
e2:39:00:18:85:e4:3d:88:8f:81:7c:11:c9:32:a2:24:2d:43:
3c:92:92:7b:2d:65:d6:1a:06:0a:74:ba:33:77:93:4c:6e:92:
d6:a1:59:af:ba:05:1f:dd:ae:6b:ba:f4:78:55:c6:40:4e:3b:
09:d5:f6:80:0d:21:e3:c4:cf:7d:8a:85:0d:92:4c:75:c9:41:
a9:3d:3b:5a:b2:f8:de:ad:2d:61:a7:88:3b:7a:fa:2d:91:f3:
2b:6e:b1:3f:d4:75:62:5d:6a:71:f6:6f:cf:86:d8:7f:ed:c3:
a6:bc:0a:dc:c9:ca:5e:bc:c0:e6:f1:c4:ab:6c:1b:ff:f6:09:
5f:d3:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:34 2024 by rpki-client on console.sobornost.net