Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/D147mzMw3bZCf-pF5akxjVEDUMI.roa
File: D147mzMw3bZCf-pF5akxjVEDUMI.roa (raw, json)
Hash identifier: OGcgY+BgGIwEoV3UJi1S9wxt7XPK4mW7Nq6AYscbLbs=
Subject key identifier: 0F:5E:3B:9B:33:30:DD:B6:42:7F:EA:45:E5:A9:31:8D:51:03:50:C2
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 018BA4C21D59335709EE341E6A797272A2CB
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/D147mzMw3bZCf-pF5akxjVEDUMI.roa
Signing time: Mon 06 Nov 2023 13:11:06 +0000
ROA not before: Mon 06 Nov 2023 13:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34953
IP address blocks: 5.199.240.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:c2:1d:59:33:57:09:ee:34:1e:6a:79:72:72:a2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Nov 6 13:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f5e3b9b3330ddb6427fea45e5a9318d510350c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:ba:fb:51:93:4b:2d:f9:cb:3f:dc:95:cd:
6f:d2:13:ae:e5:a4:4e:5d:5f:45:de:a7:a8:ce:03:
4a:71:f2:27:1f:3e:43:58:31:86:34:07:95:22:cc:
e0:ad:04:3f:05:b4:7c:c9:6f:02:93:ff:98:9c:e5:
57:65:5a:11:f5:b7:d2:ab:2a:4e:99:27:97:fc:5d:
c6:63:d3:b5:13:91:be:10:28:9e:5c:2e:5b:ea:c1:
0a:18:2d:4a:c4:89:19:6a:46:43:6c:dd:cc:ff:81:
52:85:3c:64:21:b5:48:f8:e9:2a:13:6f:68:d1:5b:
20:03:6a:19:1a:1e:7d:51:6a:be:00:c2:b9:ae:a4:
bc:0f:56:f8:78:b3:a0:30:80:26:ac:14:fc:fe:80:
22:a2:2b:c1:43:99:90:82:16:95:d2:e7:7a:42:fc:
d6:98:56:14:3c:ba:e2:22:0f:01:32:eb:2e:8e:10:
2c:c1:c1:ed:bc:ab:4e:db:31:b2:f9:11:8d:9d:59:
f6:e3:83:72:c3:63:5e:b2:bd:36:62:aa:e9:c5:6d:
65:36:63:df:bb:09:4a:33:9d:9c:f1:85:90:09:81:
3a:1d:4d:b5:c1:70:bd:b0:06:f4:00:6a:31:d0:68:
bd:a5:aa:69:85:00:ab:6b:bf:28:33:64:43:67:1e:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5E:3B:9B:33:30:DD:B6:42:7F:EA:45:E5:A9:31:8D:51:03:50:C2
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/D147mzMw3bZCf-pF5akxjVEDUMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.240.0/20
Signature Algorithm: sha256WithRSAEncryption
49:ea:8e:32:e0:3d:7d:8d:36:23:0d:15:41:36:b6:dc:53:5a:
52:fe:b7:fa:e1:a8:f1:24:f1:e8:71:11:92:1c:ec:a9:0d:8a:
16:ad:95:87:e8:1a:7e:0f:bf:68:15:50:b6:14:b8:cb:ed:86:
80:5c:fb:ee:dc:23:9f:be:73:dc:c1:5c:85:42:91:e2:5d:22:
f2:5c:ee:bf:08:bd:1f:08:c9:c7:cd:19:76:a4:f7:9a:23:5c:
26:74:1a:87:87:d4:63:4b:a3:04:9f:e0:a6:f0:6f:bb:d6:7f:
63:89:5f:e0:b3:07:1f:b2:55:fc:11:6c:5e:fc:79:a1:91:d8:
c4:6c:e1:ba:ce:c7:98:12:df:4e:52:dc:9f:1b:77:50:ff:9f:
57:ba:d0:61:b6:e2:7b:07:dc:d9:39:33:1f:e1:3f:f5:9b:1f:
49:9b:9f:87:1b:02:cd:3e:d3:1e:bb:d6:d3:27:e4:56:59:b4:
1a:c4:f5:f9:c5:8f:52:3b:54:3c:7a:dc:33:fd:7c:86:42:96:
c9:8b:7e:53:c3:b8:2a:15:5a:91:a8:f6:c6:c5:d2:03:b9:a5:
56:07:10:56:cf:d6:5f:70:df:7d:7c:95:0f:2e:58:9f:3f:d2:
d5:61:05:7f:04:4d:3a:54:57:93:03:59:44:21:23:ad:ae:6d:
7d:19:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net