Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/PxO6slt9eahgvZY37GW46STw4p8.roa
File: PxO6slt9eahgvZY37GW46STw4p8.roa (raw, json)
Hash identifier: 8TX2yszyHdM2AlVrM6MnTFS2pql+KQOcIY2JOPALBhg=
Subject key identifier: 3F:13:BA:B2:5B:7D:79:A8:60:BD:96:37:EC:65:B8:E9:24:F0:E2:9F
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 01896E617010DF96E3EE78AD36548C268E0B
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/PxO6slt9eahgvZY37GW46STw4p8.roa
Signing time: Wed 19 Jul 2023 13:40:26 +0000
ROA not before: Wed 19 Jul 2023 13:40:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.208.16.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:61:70:10:df:96:e3:ee:78:ad:36:54:8c:26:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jul 19 13:40:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f13bab25b7d79a860bd9637ec65b8e924f0e29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:3d:dd:12:fd:44:6f:f6:65:98:9d:96:37:
17:69:4d:3d:ab:22:fe:7e:1a:9f:a8:55:dc:03:3e:
23:3c:97:40:a3:54:0d:79:7a:29:d9:98:3b:9d:21:
d8:47:73:a7:a0:6b:97:3f:0a:53:ff:e6:54:6b:c8:
63:92:3d:f2:2a:88:7a:e5:e2:15:86:c4:7a:a8:bd:
f7:66:df:63:64:dd:71:85:29:d5:cb:54:6f:ad:fa:
11:c4:95:a3:27:c6:5f:62:24:be:eb:90:3f:86:b2:
c7:cf:5b:ce:96:3b:81:ac:99:ce:05:f9:dd:2c:d8:
f3:66:28:ed:1c:9f:e6:3e:d6:0b:d2:0a:d8:1d:5c:
e0:ec:60:30:79:81:f5:31:bb:b7:61:23:57:26:89:
fa:59:12:4c:01:9e:94:0c:95:69:b4:a9:7a:fe:80:
5a:e4:31:a7:4e:68:ea:41:22:c7:d4:82:cf:2a:40:
91:ae:00:32:37:c8:dd:85:6c:d7:a0:54:63:30:7b:
45:ec:fb:6b:56:8f:5a:89:d4:11:77:98:05:b6:78:
99:0a:57:17:f7:ca:f4:a7:00:aa:39:82:f6:ad:fe:
7b:01:dd:89:fd:ca:00:ce:40:fb:37:c1:aa:bd:2d:
b0:29:69:0a:06:41:67:56:6b:3b:82:b9:9c:51:8b:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:BA:B2:5B:7D:79:A8:60:BD:96:37:EC:65:B8:E9:24:F0:E2:9F
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/PxO6slt9eahgvZY37GW46STw4p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.34.0/24
188.208.16.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c1:8a:7b:24:b5:46:b9:a3:9e:02:66:4b:65:e1:79:76:e5:
6e:cc:07:d8:4e:f4:3a:39:4a:94:7f:e7:5f:72:a2:c6:be:fb:
b7:ee:6f:4d:a1:cd:d4:e1:56:79:84:92:20:1d:a3:7b:ba:27:
d0:30:c1:0c:71:2f:24:95:7c:07:a1:94:6d:7f:7a:6b:94:d1:
83:99:13:ce:f7:62:65:7c:54:e5:16:d9:42:c4:88:31:9e:26:
31:45:a9:37:d5:ee:fe:cf:0a:a4:f3:9a:a4:9e:e1:c0:ff:80:
44:98:3f:7e:8d:cc:cb:ee:30:ea:89:02:92:3a:54:bc:9b:f7:
43:0e:cd:c4:24:eb:f0:17:be:40:41:64:32:67:d7:6c:f1:04:
6c:dc:06:61:b4:a9:46:ef:ea:f9:2a:f3:9f:5b:dc:f8:e3:11:
ad:a2:2b:53:cf:e3:bf:5b:09:61:b8:d8:22:b9:f4:35:34:f1:
e8:31:f5:34:0a:b1:b5:00:6f:e2:40:24:50:47:99:a2:a3:82:
e2:56:07:c1:69:a0:b5:70:98:cb:8c:91:34:36:b1:c0:14:42:
f4:2c:09:6a:a7:41:57:8f:fd:02:ee:1f:76:3a:89:57:4a:19:
3b:72:03:a7:c8:1e:1a:2f:39:ce:37:b8:01:38:38:41:53:74:
4b:35:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net