Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/8w6cDsnSM8FMRhNphROvT1zRYuY.roa
File: 8w6cDsnSM8FMRhNphROvT1zRYuY.roa (raw, json)
Hash identifier: daC26aP7WdB1gfmcIoYdO3pwSFYQmnBCsbXo1AvZvHw=
Subject key identifier: F3:0E:9C:0E:C9:D2:33:C1:4C:46:13:69:85:13:AF:4F:5C:D1:62:E6
Certificate issuer: /CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Certificate serial: 018B297465F265C2F701947F723DBAD68391
Authority key identifier: 78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/8w6cDsnSM8FMRhNphROvT1zRYuY.roa
Signing time: Fri 13 Oct 2023 14:32:55 +0000
ROA not before: Fri 13 Oct 2023 14:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197972
IP address blocks: 82.144.95.0/24 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:74:65:f2:65:c2:f7:01:94:7f:72:3d:ba:d6:83:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78b1dbe2faf2a6e7dfa574ce55190963015f1c53
Validity
Not Before: Oct 13 14:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f30e9c0ec9d233c14c4613698513af4f5cd162e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:d4:f1:d4:a0:56:77:22:bc:38:d1:19:af:
cb:7c:a8:5e:65:db:93:13:c3:b4:67:2e:02:51:72:
bb:db:a4:b8:f2:ee:1c:73:28:6f:5b:f9:cb:eb:3a:
72:93:68:16:5e:4a:cf:b3:cc:79:7f:3a:48:b1:dc:
ff:19:35:42:36:9c:8e:7d:23:b9:af:fb:ef:8b:63:
7a:ed:ef:a4:98:ba:a4:79:72:1e:cd:0d:1f:f6:12:
e0:21:5b:2c:18:b5:db:15:33:2d:05:c0:a2:a7:87:
9b:77:df:33:3c:fd:a5:5b:fa:18:03:9d:30:f1:d0:
b1:50:2d:c5:c6:6d:08:6c:09:15:21:9a:3e:34:44:
62:57:50:d4:e5:9f:12:27:a2:eb:0f:f3:44:41:d4:
04:e6:e6:ce:c4:8c:38:f9:63:88:93:63:8a:2f:f7:
44:9f:25:74:e6:e8:f0:3e:e7:0a:64:74:e8:1e:ff:
6d:73:ae:12:4b:6d:66:64:cf:29:bb:a0:3f:c4:3d:
ef:1e:4b:73:73:c0:2f:54:f0:3d:8f:7a:b9:70:f0:
85:91:a3:8a:89:cd:1f:57:4a:68:5c:d5:ac:f9:f2:
6f:43:d4:86:8e:b9:2e:c2:45:b5:c0:c5:87:0d:67:
20:a8:b3:16:32:12:70:53:16:f4:2e:d1:95:2c:9c:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:9C:0E:C9:D2:33:C1:4C:46:13:69:85:13:AF:4F:5C:D1:62:E6
X509v3 Authority Key Identifier:
keyid:78:B1:DB:E2:FA:F2:A6:E7:DF:A5:74:CE:55:19:09:63:01:5F:1C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLHb4vrypuffpXTOVRkJYwFfHFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/8w6cDsnSM8FMRhNphROvT1zRYuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c666bf-c8d6-48ad-8076-c3fd9ae81012/1/eLHb4vrypuffpXTOVRkJYwFfHFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.144.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c5:3a:71:b0:63:8f:e1:93:2e:0a:20:eb:0a:8f:ff:a7:d5:
7d:82:ec:dd:f8:8c:27:2f:ac:9e:8a:a6:93:87:dc:9b:a6:3b:
6b:6d:cf:0d:fa:8b:cb:fa:e1:9f:f2:72:79:58:70:dd:b0:64:
7c:c2:b0:4a:09:74:5b:84:7d:3e:84:5f:4c:da:ab:fc:2f:65:
84:bf:b2:98:a8:ba:e9:83:75:a2:c4:a6:dd:07:7c:44:e0:17:
0a:c5:3d:8f:10:99:db:02:c2:87:a3:49:af:99:71:d0:04:97:
c2:0b:17:a3:21:09:b7:e1:59:04:e1:99:81:c3:d3:68:16:78:
18:1e:cb:9c:34:69:2a:3f:3c:75:c9:2e:1b:ac:b1:b4:74:61:
41:27:cc:ac:91:2f:f7:79:e5:1e:fc:31:90:67:9f:1e:d6:36:
b4:71:20:68:10:2c:55:fd:10:79:11:4f:ae:18:88:74:fe:b2:
ea:cf:c6:48:5b:36:10:5f:b0:32:fd:46:3b:cc:76:3e:89:ea:
51:f2:70:6b:8c:6c:50:00:f0:94:34:f5:9b:a0:4f:3e:f8:2e:
63:66:91:aa:a8:79:93:29:d6:84:aa:38:6d:a3:1f:1c:43:d0:
d6:4c:76:13:69:26:24:5d:83:f9:44:12:a5:67:cd:7e:96:01:
ef:aa:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:50 2023 by rpki-client on console.sobornost.net