Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/_82RxSXEAECwtS6eYW3oXe48RK8.roa
File: _82RxSXEAECwtS6eYW3oXe48RK8.roa (raw, json)
Hash identifier: BDo/s9byN7PI1TuA+wryKilYVYOG8jjSpc624ZK2ZB4=
Subject key identifier: FF:CD:91:C5:25:C4:00:40:B0:B5:2E:9E:61:6D:E8:5D:EE:3C:44:AF
Certificate issuer: /CN=953a45de2807acc45cd252ed42f1383db7397ddb
Certificate serial: 01856D01B5C1B1EDD47518D39E233053E7EF
Authority key identifier: 95:3A:45:DE:28:07:AC:C4:5C:D2:52:ED:42:F1:38:3D:B7:39:7D:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTpF3igHrMRc0lLtQvE4Pbc5fds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/_82RxSXEAECwtS6eYW3oXe48RK8.roa
Signing time: Sun 01 Jan 2023 11:05:06 +0000
ROA not before: Sun 01 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21094
IP address blocks: 193.109.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b5:c1:b1:ed:d4:75:18:d3:9e:23:30:53:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=953a45de2807acc45cd252ed42f1383db7397ddb
Validity
Not Before: Jan 1 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffcd91c525c40040b0b52e9e616de85dee3c44af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:f6:44:5d:68:a2:8e:35:c7:0f:4e:05:e2:
f5:d8:d9:2a:63:d5:ff:4d:bb:dc:4f:da:e6:9c:db:
d5:c5:ef:72:04:f2:ca:1c:d5:5d:f5:fe:ea:f3:51:
2b:74:46:c3:4e:ff:50:f3:61:37:66:08:ff:de:c8:
d5:f1:c9:b8:b9:a0:2d:3c:66:82:41:33:a7:59:0d:
e1:a9:ed:f8:b8:b2:42:86:c6:fd:32:8e:c1:37:01:
f5:06:04:af:54:f7:32:3d:a0:09:ca:ab:60:28:a1:
42:b6:16:ac:dc:8c:5d:c8:9a:09:f7:fc:57:0a:6f:
37:e3:e4:04:29:b7:b5:85:fa:d2:1f:c5:28:cb:94:
11:3f:4a:a3:9d:c8:4c:98:71:17:d7:25:23:e8:a2:
20:7c:19:4f:ff:05:26:8f:31:42:79:f9:42:53:c9:
e8:37:d5:b0:a9:1f:e0:90:3e:64:cd:d2:92:cf:1e:
01:4e:ce:15:4f:68:85:89:1a:63:b3:a8:1b:64:a3:
d8:95:2e:fb:bc:75:30:dd:de:68:28:bb:78:72:50:
ba:35:8a:7d:7c:b2:60:a5:49:f4:37:40:aa:de:61:
b7:ad:e2:c6:83:f4:c5:3c:14:44:ce:f5:88:e9:24:
85:0a:c9:4b:28:ae:f2:f8:41:44:72:55:10:53:85:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:91:C5:25:C4:00:40:B0:B5:2E:9E:61:6D:E8:5D:EE:3C:44:AF
X509v3 Authority Key Identifier:
keyid:95:3A:45:DE:28:07:AC:C4:5C:D2:52:ED:42:F1:38:3D:B7:39:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTpF3igHrMRc0lLtQvE4Pbc5fds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/_82RxSXEAECwtS6eYW3oXe48RK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f9ed9f-6912-4fbb-957b-d54a1f02bcba/1/lTpF3igHrMRc0lLtQvE4Pbc5fds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.87.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b2:9b:a3:d0:57:27:72:6b:56:8e:86:dc:8f:be:9e:27:be:
89:39:e7:0e:e0:77:e8:4b:1f:96:30:21:47:fb:2a:15:cb:a0:
7d:55:ed:26:c0:ae:35:b9:63:64:2d:23:99:97:6a:f1:1e:88:
5c:9e:af:8b:cb:c6:80:69:c5:98:2e:c4:01:a8:ae:d1:e5:87:
d1:df:80:84:01:c1:a2:e9:b2:42:2f:a0:49:0d:c6:99:33:5d:
e7:30:31:2b:5e:25:56:dd:00:bd:cc:28:9f:9f:48:7f:25:b9:
8c:9d:78:62:84:fc:c6:55:be:2a:4b:43:4a:5a:04:8e:9f:70:
6e:63:06:6d:95:1f:7f:63:14:b9:ee:e9:ce:82:dc:93:b3:1d:
28:0d:3a:9d:fb:92:a2:51:a8:74:de:78:28:61:0f:68:3b:a0:
e3:cb:87:7d:4c:f4:ad:7e:40:17:0a:b8:64:c0:45:1d:ac:73:
5d:8a:32:a6:55:a2:a9:a9:4e:59:46:4a:ad:de:4d:db:3d:7a:
2c:5e:c6:92:37:22:df:ce:38:84:2e:1a:f3:e5:23:10:13:db:
8e:d7:d4:bd:1d:97:ea:e9:2a:97:e9:70:a1:aa:40:70:f7:2e:
7f:c2:c5:30:a0:a4:8d:6e:e8:64:03:01:31:93:c4:a2:3f:f9:
14:ca:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:29 2024 by rpki-client on console.sobornost.net