Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/AV_trh1FaRangaqQuNKna24eGlo.roa
File: AV_trh1FaRangaqQuNKna24eGlo.roa (raw, json)
Hash identifier: W1y/cbwbpkmD8hazkWY3JPJ90g5m2dHxcWJ8L34ePf4=
Subject key identifier: 01:5F:ED:AE:1D:45:69:16:A7:81:AA:90:B8:D2:A7:6B:6E:1E:1A:5A
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0188ED86878F79E05CB43D03D3CB9E1BB0B7
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/AV_trh1FaRangaqQuNKna24eGlo.roa
Signing time: Sat 24 Jun 2023 13:09:56 +0000
ROA not before: Sat 24 Jun 2023 13:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 832
IP address blocks: 109.122.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:86:87:8f:79:e0:5c:b4:3d:03:d3:cb:9e:1b:b0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Jun 24 13:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015fedae1d456916a781aa90b8d2a76b6e1e1a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:0f:1f:ff:49:c0:05:50:21:bb:2f:5e:1a:
57:b1:a6:d6:d6:ed:81:45:39:a7:c3:0f:c6:86:d2:
cc:f0:82:0b:a3:d6:09:55:cb:5c:5f:14:24:1b:06:
5e:ab:d2:99:81:df:c3:bd:fd:3a:1d:1e:20:f0:fb:
86:aa:9a:cc:79:1c:6a:0f:6c:20:f8:2b:27:43:00:
fe:e9:5e:e6:f5:bf:39:b0:22:0a:89:47:d7:bd:20:
f9:77:25:ec:35:fb:93:25:b0:87:b3:be:4a:51:ce:
0f:53:08:aa:bc:e2:81:4e:3e:4a:92:74:93:33:41:
7a:ed:2a:92:ea:1d:a5:70:16:2a:e8:2e:4d:72:2d:
76:61:f5:33:e7:78:c3:40:cc:94:96:5c:12:e2:24:
f6:99:70:94:a9:e6:f3:41:21:7b:ee:02:42:3d:be:
c9:6c:0f:ac:ce:82:11:b8:f9:9d:b1:fd:75:9f:03:
99:5a:6e:3f:2c:91:f9:04:c8:13:49:93:e2:88:8c:
8a:80:c1:86:b6:d0:0d:91:c8:f5:3d:f1:3b:c6:d0:
26:e0:a3:60:ee:97:eb:c8:25:24:19:7d:44:49:15:
42:34:42:22:c2:61:44:e6:46:f7:7c:6b:a3:13:ba:
2c:61:36:40:90:8b:08:19:8f:f1:90:8b:68:fd:7b:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:ED:AE:1D:45:69:16:A7:81:AA:90:B8:D2:A7:6B:6E:1E:1A:5A
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/AV_trh1FaRangaqQuNKna24eGlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.212.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4d:39:d0:cd:b4:c2:7c:8e:04:25:b4:2f:6f:0b:d1:a8:14:
29:ec:e7:5e:e7:82:b8:8d:1a:15:37:d2:46:7c:3e:a0:bd:b1:
b5:85:12:fd:b4:8c:89:27:0b:ea:88:e8:82:de:ae:46:77:9f:
84:92:df:ee:0f:aa:1a:59:e7:94:f8:2d:46:bf:66:f3:41:74:
99:62:0c:61:df:b6:2d:c6:7a:36:c9:94:6b:de:78:0c:1c:b0:
8a:9e:87:36:0e:0d:6c:27:4b:7d:9b:c5:c5:1f:c3:51:d0:65:
97:9a:23:fb:3f:e3:e1:9f:a8:5b:00:ff:40:44:ed:55:6a:92:
12:ba:51:39:db:bb:89:85:79:ad:2a:19:44:aa:38:3d:48:a4:
ab:1d:46:e2:7c:4e:73:0f:48:7f:f1:c8:e3:e4:00:a4:1a:4d:
f6:50:4a:ef:76:5f:5e:5a:84:99:a5:48:17:f4:56:b5:39:1a:
4b:89:ec:23:9f:ce:9f:86:04:02:38:a3:ad:50:80:42:b4:df:
03:90:e9:7a:fe:ca:57:90:16:14:a3:2c:f1:b0:5e:82:82:03:
2d:f5:26:50:43:2f:43:81:9f:c1:d1:2a:ad:a1:c6:42:4e:33:
3d:c8:e7:90:02:b1:f7:2c:e3:2e:f9:0d:34:8f:a9:e9:14:09:
ca:d7:9e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net