Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/V5JYNTCN_06KnGH3o1wR5VJ8L4w.roa
File: V5JYNTCN_06KnGH3o1wR5VJ8L4w.roa (raw, json)
Hash identifier: 9i1DQItVKzXqhs3D8ZiLBDDJQRTwQKBOrJSV21wdD4k=
Subject key identifier: 57:92:58:35:30:8D:FF:4E:8A:9C:61:F7:A3:5C:11:E5:52:7C:2F:8C
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0185A1CC635BD04FDD648B59E45DE033221A
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/V5JYNTCN_06KnGH3o1wR5VJ8L4w.roa
Signing time: Wed 11 Jan 2023 17:06:44 +0000
ROA not before: Wed 11 Jan 2023 17:06:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 37.49.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:cc:63:5b:d0:4f:dd:64:8b:59:e4:5d:e0:33:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 11 17:06:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57925835308dff4e8a9c61f7a35c11e5527c2f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:b6:b6:8c:a0:00:a8:64:68:ba:35:e1:64:
42:b4:37:92:bf:3f:17:e9:e1:ad:b2:90:27:ee:09:
0e:f1:58:dc:e1:31:97:f7:93:a6:d3:71:c8:ed:2a:
ea:fa:e9:18:67:dd:29:ef:a0:99:4a:7b:f3:73:28:
77:28:66:28:44:df:69:1d:99:48:1b:7a:bf:56:03:
93:71:9a:04:d7:fa:19:71:b0:73:27:99:bf:10:c1:
5c:88:2e:00:f7:b2:33:3a:13:cb:1e:98:4c:dd:2e:
4e:b4:42:ec:9d:96:1e:4c:60:f7:dc:0a:94:0c:6c:
83:19:41:35:e8:6a:b2:bb:b3:43:81:c5:38:81:60:
c8:6c:79:8d:b5:01:ac:d7:8b:90:56:3c:dc:cb:13:
4a:2a:b8:35:e8:1a:d5:7a:db:bf:9e:f7:c0:82:2f:
cf:e4:4b:4a:c2:e8:cb:1c:1b:39:e6:6c:5f:83:d6:
09:3c:c2:5e:da:c5:c0:5b:72:c9:2e:b2:66:ab:3c:
45:2c:64:ae:8e:be:8f:77:df:03:5e:5d:20:e4:0d:
38:1e:56:70:b7:69:3d:2e:37:e2:c8:84:a3:8c:4d:
50:2c:33:a2:9e:0a:e6:21:32:1c:43:6b:86:93:dc:
0d:0c:dd:b5:c0:4b:f4:17:ce:65:d5:a4:7d:ea:bf:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:58:35:30:8D:FF:4E:8A:9C:61:F7:A3:5C:11:E5:52:7C:2F:8C
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/V5JYNTCN_06KnGH3o1wR5VJ8L4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
Signature Algorithm: sha256WithRSAEncryption
71:84:54:6f:6a:dd:a6:63:d7:28:6e:32:9f:3e:d7:8f:bc:78:
1f:2e:09:16:a3:5d:cd:d5:04:b2:6e:18:6d:20:ae:ff:6b:d6:
aa:75:6d:73:4c:25:5d:e2:23:73:04:87:fc:a6:ed:f1:78:55:
9e:61:7b:c3:3a:f1:ef:8b:f9:2a:21:ad:09:76:ae:de:03:73:
5b:a9:2b:ee:71:c8:79:da:2f:c2:c6:f5:7e:01:2b:b7:a5:3f:
c9:77:3f:a6:76:a3:f0:33:2b:99:1d:3a:6d:f1:4e:04:07:62:
d3:d5:a0:e7:8f:87:0f:de:53:63:dc:a7:36:b3:45:cc:f8:34:
91:44:07:24:6f:3a:c5:50:0d:ca:de:c0:b6:2e:89:95:b1:73:
d3:cd:8c:f3:fb:0c:c7:b4:c7:42:24:7c:67:45:1b:f9:c3:3c:
8a:75:4c:21:18:23:3b:f5:de:26:7c:54:94:9b:0b:f1:8d:c4:
07:d5:96:63:ae:fa:5d:9d:48:ee:86:94:30:07:d8:a2:3b:24:
4c:2b:81:83:05:2b:a5:e8:be:2f:78:65:4c:ea:a8:09:38:75:
60:75:45:6e:2b:5e:58:c8:e8:60:06:68:17:38:12:aa:b7:69:
90:c5:b9:43:78:e5:23:9a:ea:fc:bc:a2:86:63:f0:16:64:65:
8f:0d:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net