Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/QYgUvRjzpEHehCw0Glr5T1x2wxc.roa
File: QYgUvRjzpEHehCw0Glr5T1x2wxc.roa (raw, json)
Hash identifier: WEbiC7621ws1La9ZzNYMmuhikXsu6H2b6cXOCdqSI1Y=
Subject key identifier: 41:88:14:BD:18:F3:A4:41:DE:84:2C:34:1A:5A:F9:4F:5C:76:C3:17
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01856C6F18D3E7E54016DF8446B063ECEEAC
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/QYgUvRjzpEHehCw0Glr5T1x2wxc.roa
Signing time: Sun 01 Jan 2023 08:24:58 +0000
ROA not before: Sun 01 Jan 2023 08:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20559
IP address blocks: 185.52.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:18:d3:e7:e5:40:16:df:84:46:b0:63:ec:ee:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jan 1 08:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=418814bd18f3a441de842c341a5af94f5c76c317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:1c:3d:d2:da:a3:77:f0:4b:67:19:5f:c7:
ba:96:39:5c:a6:b3:db:65:65:67:e4:74:50:c8:8b:
3a:73:bb:62:31:01:57:0b:e9:8c:75:1b:09:00:47:
b0:c6:7b:6d:d6:ca:4e:68:a8:86:ed:d0:fd:42:b9:
87:2a:ab:d3:e7:28:d0:7c:11:e4:b9:dc:7d:78:f8:
82:ec:74:5b:1c:16:b6:49:65:55:0e:f6:3f:b7:08:
11:1f:66:eb:fd:b1:0d:5e:4a:4f:4d:2c:84:82:35:
d3:ff:72:01:6a:da:a6:26:71:70:e2:99:1e:f4:52:
f1:6d:35:86:10:4a:87:00:e7:02:5e:42:d8:8a:f0:
be:b3:cb:72:0e:96:d4:a3:07:b2:df:02:64:4e:8a:
a1:a1:e7:85:6d:d2:b4:3b:c7:2f:9c:5e:68:3f:cc:
36:b9:d9:4c:ef:21:54:e3:48:a1:db:11:ef:4f:de:
97:c9:fc:1b:9d:4a:56:7d:77:44:94:bb:30:db:bd:
60:01:f7:de:8a:22:38:b8:d9:40:15:6d:ad:9f:07:
9d:dd:7e:8a:0c:ec:cf:b0:cd:3d:1a:92:d9:4d:a9:
f0:7e:8f:41:77:d0:d4:88:ac:f3:be:6f:24:b5:71:
d5:60:d2:c9:17:9f:6e:b5:65:a0:cd:79:53:00:d5:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:88:14:BD:18:F3:A4:41:DE:84:2C:34:1A:5A:F9:4F:5C:76:C3:17
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/QYgUvRjzpEHehCw0Glr5T1x2wxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.60.0/22
Signature Algorithm: sha256WithRSAEncryption
03:74:0c:0a:fe:a5:48:1c:cb:95:fd:0f:58:5d:07:ec:0a:c1:
25:62:01:4c:bb:b4:fc:2a:37:79:ff:d1:a1:e5:a2:fd:0a:ee:
02:21:34:f1:a4:1a:30:a6:37:3a:70:12:ed:3c:ae:52:4f:fc:
0a:9c:e4:4d:94:f6:c7:6a:1e:10:d4:de:4c:c9:18:89:b9:22:
b1:e7:a5:42:7b:2c:f5:ef:9d:06:6d:b7:98:72:40:b3:93:b1:
07:a8:cf:f5:ab:91:5d:5a:38:35:83:5f:b2:31:67:47:52:a1:
63:a3:0e:00:1b:ee:be:68:f9:89:bc:98:56:a7:4c:7f:ca:66:
cb:57:6b:3f:29:8e:34:98:8b:4f:c0:7c:26:de:6d:94:82:30:
52:cf:44:f2:da:c0:09:97:75:9f:47:0a:d2:28:f5:2c:98:ab:
f5:14:23:9a:c4:da:40:4b:5b:18:5a:43:83:c2:91:ae:c2:3d:
e1:84:d5:62:1f:5f:60:a5:bb:45:d5:a5:46:f6:4b:f1:59:9b:
21:9d:c9:7f:db:85:a2:f0:05:22:1d:ed:78:7e:f1:de:37:4f:
cd:94:c0:05:58:4e:07:fb:07:52:e9:de:8f:ff:69:53:6b:4b:
14:56:06:9f:d7:1d:fd:af:aa:ed:21:a5:e3:4d:de:9e:92:0f:
91:65:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:07 2024 by rpki-client on console.sobornost.net