Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/lK2T4qAR1iyBjT4hp-jCwKdmoY8.roa
File: lK2T4qAR1iyBjT4hp-jCwKdmoY8.roa (raw, json)
Hash identifier: RElGqDInfZvTOxVHI6Ioxcoz7xw27KcjIS5zSsExUMs=
Subject key identifier: 94:AD:93:E2:A0:11:D6:2C:81:8D:3E:21:A7:E8:C2:C0:A7:66:A1:8F
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 01856EA6926B077CF810D3B9EFC69A28F9F8
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/lK2T4qAR1iyBjT4hp-jCwKdmoY8.roa
Signing time: Sun 01 Jan 2023 18:44:48 +0000
ROA not before: Sun 01 Jan 2023 18:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50182
IP address blocks: 194.247.190.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:92:6b:07:7c:f8:10:d3:b9:ef:c6:9a:28:f9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jan 1 18:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94ad93e2a011d62c818d3e21a7e8c2c0a766a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:95:3a:08:3e:7d:95:29:72:28:4c:fe:33:
8e:0b:86:67:4c:a1:d7:36:e9:67:37:83:18:3b:86:
43:d6:ba:cc:a3:1e:78:2b:23:43:3b:ec:35:f9:e0:
c3:3f:6c:74:48:a7:29:7e:da:32:dc:9b:43:12:a6:
06:11:d4:13:66:d4:68:2a:bd:9b:ed:ac:40:13:2e:
10:05:08:c9:1a:3c:cd:ab:89:4a:79:f4:e5:90:ca:
fb:d2:ad:16:27:32:44:e4:87:0b:17:b6:03:e3:8d:
3e:6b:d9:61:31:6a:62:55:6e:aa:38:0f:d1:b0:08:
83:c6:ae:69:89:67:d9:e9:f1:d8:f2:f4:84:18:35:
eb:2c:31:dc:bf:19:92:83:5d:52:82:a7:81:cc:dc:
23:93:19:86:f0:db:c3:06:bf:22:ef:b2:4e:50:33:
36:0d:ac:f8:5a:d2:79:16:d4:ab:a4:18:56:01:08:
53:ec:61:3d:02:d5:47:8d:68:f3:f9:1e:21:46:26:
ea:17:e6:bb:3e:8a:71:bc:a2:41:e8:63:32:ac:76:
60:61:52:31:d3:05:ab:13:36:f0:e8:b2:b4:65:22:
ca:35:b9:10:ce:0e:5e:f5:e2:95:fd:28:1c:bc:42:
ae:91:82:7b:39:55:78:9b:14:1e:e8:89:a8:84:97:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AD:93:E2:A0:11:D6:2C:81:8D:3E:21:A7:E8:C2:C0:A7:66:A1:8F
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/lK2T4qAR1iyBjT4hp-jCwKdmoY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.190.0/23
Signature Algorithm: sha256WithRSAEncryption
21:b8:1a:4c:4c:18:6f:f9:8a:f7:7c:d0:e9:46:3f:94:12:27:
5a:aa:f4:5f:ea:e0:ca:2e:2a:6c:d5:72:17:31:35:82:32:36:
73:e7:fb:76:4b:e1:aa:06:9f:59:18:b6:fd:84:78:0a:0a:46:
95:19:a6:de:be:6b:68:13:73:9d:f4:65:af:36:e0:cd:b8:43:
84:da:06:b3:8c:e8:58:a8:b0:2f:67:e6:f8:fe:67:c7:19:54:
e2:96:9b:2a:80:36:e8:72:47:03:f6:23:40:dd:7f:2a:bc:b9:
a0:4d:eb:23:03:81:e5:f7:1b:01:07:35:c0:c9:34:e6:6a:f1:
6b:e0:de:7e:7b:84:e8:07:c4:db:b6:a1:35:e8:9b:36:f4:91:
0f:70:20:40:8f:72:c0:97:09:67:2a:37:d3:25:b6:a3:27:88:
9a:db:d6:30:59:3b:1a:35:cd:4d:d6:53:be:7c:ee:e9:7b:a8:
b6:71:57:71:61:f3:de:10:d3:85:63:33:7d:aa:bb:e2:d9:a6:
c5:49:57:07:97:c2:52:eb:9b:74:89:21:92:a8:63:e8:6f:c3:
85:74:4f:5f:ce:4e:1f:50:00:bc:9d:ed:35:dc:2c:a5:83:cd:
af:e6:a3:f6:77:b5:ea:5d:1f:09:3e:db:ac:5d:eb:4c:23:3d:
cf:17:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:41 2024 by rpki-client on console.sobornost.net