Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/r6HttqLFpDFWj39R7VSa7AcV9v8.roa
File: r6HttqLFpDFWj39R7VSa7AcV9v8.roa (raw, json)
Hash identifier: XiOWMZb5km2ObmODpll/VJOwrfcu1TBuDQJUGO6lqso=
Subject key identifier: AF:A1:ED:B6:A2:C5:A4:31:56:8F:7F:51:ED:54:9A:EC:07:15:F6:FF
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0189E4B5FBB9EF2391566CCDA9B121F66833
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/r6HttqLFpDFWj39R7VSa7AcV9v8.roa
Signing time: Fri 11 Aug 2023 13:07:58 +0000
ROA not before: Fri 11 Aug 2023 13:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 5.178.108.0/24 maxlen: 24
5.178.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:b5:fb:b9:ef:23:91:56:6c:cd:a9:b1:21:f6:68:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Aug 11 13:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa1edb6a2c5a431568f7f51ed549aec0715f6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:fb:1f:cd:96:2d:a2:1e:26:5d:df:60:22:
0d:90:84:f9:d8:b1:53:36:8d:cb:7d:1a:24:b1:32:
43:06:1e:04:24:52:32:98:a2:70:6d:82:c9:96:cd:
b3:95:b2:ed:a4:62:06:fa:25:ee:c8:01:5f:e2:2a:
03:19:d3:12:9e:c9:75:b1:c7:30:af:4a:c4:52:8d:
8d:5f:a8:c6:e1:23:9f:46:12:d5:d6:aa:05:65:aa:
0f:ff:07:c4:91:ee:a7:65:a5:10:a8:ba:03:33:47:
ea:69:fd:06:98:b3:e4:d6:6a:6c:59:6f:49:8e:87:
d4:aa:cc:f5:62:86:d0:4f:c1:c0:c3:d4:4a:e9:14:
fc:d1:c1:7a:6c:71:81:a0:6f:ca:ac:b0:b8:4a:ae:
a4:85:f0:7c:dd:04:c9:f7:fd:7c:5f:cc:91:d8:a9:
27:a5:9f:77:fb:8b:51:c5:39:aa:64:96:09:a8:f9:
4b:43:ea:19:a2:b4:a0:40:e1:00:af:ed:9e:88:cc:
06:8c:bc:e1:48:e0:f6:a8:43:a9:ef:19:25:89:76:
3d:b3:4e:31:f9:a8:2d:7b:bb:f1:57:41:54:67:97:
9b:59:5f:86:8a:c2:9d:30:ab:b0:2b:39:c3:b1:f5:
3e:ed:d4:31:10:47:fb:74:e2:42:1f:c4:f4:df:29:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A1:ED:B6:A2:C5:A4:31:56:8F:7F:51:ED:54:9A:EC:07:15:F6:FF
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/r6HttqLFpDFWj39R7VSa7AcV9v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.108.0/24
5.178.111.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d2:c6:6e:c7:66:63:47:16:8d:c3:bb:7c:ff:31:56:97:b4:
1d:2d:cd:51:09:98:20:fd:a5:5a:15:e2:8a:ec:d5:bc:14:5b:
00:50:90:f8:08:c4:bb:bb:b7:62:66:53:1d:23:5d:f2:c4:15:
bd:81:5d:16:94:29:6b:ed:5f:c0:54:f4:7e:2e:26:9d:a7:f6:
26:5a:f0:27:f0:ca:17:0d:3e:86:32:f1:41:11:fb:2d:84:db:
c4:10:eb:97:44:cf:75:f6:d1:55:bb:51:e2:fc:d4:45:74:10:
51:32:c5:e0:86:ae:7c:e4:27:15:ea:73:c0:6c:7e:79:e4:71:
94:5a:07:9c:ff:69:0c:5c:48:10:34:a1:72:5f:c5:fb:37:2e:
f0:ac:fc:20:04:ca:28:6f:d0:34:1e:df:26:44:1f:7d:4c:41:
3d:46:2e:d3:e5:5e:11:8c:d3:d9:59:30:48:81:3b:d8:67:c1:
d0:36:f9:0d:af:d8:77:25:94:62:ef:8b:09:0e:d1:5b:81:18:
19:86:4d:b2:a0:08:ac:e5:2d:42:20:8c:e5:cd:a3:c0:6b:92:
4f:70:cf:10:e6:27:9f:aa:60:51:72:93:f6:e2:40:6b:54:8c:
3b:d6:26:7c:32:24:52:f7:f5:4e:59:56:fd:3a:33:64:32:fb:
0a:d9:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:27 2023 by rpki-client on console.sobornost.net