Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/7_O-J1R-OhXBL-otRjy5y_OnrbM.roa
File: 7_O-J1R-OhXBL-otRjy5y_OnrbM.roa (raw, json)
Hash identifier: MRH0jVgribPqiBf+8fEG4tkaw/DvTii+p+9aE2gNMrs=
Subject key identifier: EF:F3:BE:27:54:7E:3A:15:C1:2F:EA:2D:46:3C:B9:CB:F3:A7:AD:B3
Certificate issuer: /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial: 01880A17C311CD6D64C28BE3E37E82946BAE
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/7_O-J1R-OhXBL-otRjy5y_OnrbM.roa
Signing time: Thu 11 May 2023 09:15:09 +0000
ROA not before: Thu 11 May 2023 09:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198629
IP address blocks: 194.150.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:17:c3:11:cd:6d:64:c2:8b:e3:e3:7e:82:94:6b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Validity
Not Before: May 11 09:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eff3be27547e3a15c12fea2d463cb9cbf3a7adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:25:f4:17:de:f3:82:ef:18:da:c9:ad:0f:72:
b2:c4:4a:36:b6:bf:8f:69:39:70:8f:a3:4c:89:2d:
ba:1e:3f:15:6f:96:ab:2d:f4:ac:d8:70:c8:a1:87:
dd:68:3c:c0:dc:31:cc:53:fa:08:eb:87:26:b9:4b:
c7:c8:62:53:78:06:4d:b3:33:a8:bb:49:7e:48:41:
c9:16:e3:05:5e:d7:fa:0f:76:02:6b:08:75:53:07:
62:0e:cd:9d:65:31:ee:7c:c6:59:6a:9e:bb:e8:43:
e1:94:0e:f9:07:32:dc:45:66:b6:b3:57:e5:bc:ee:
5c:f6:e8:c0:89:13:08:53:56:dc:1f:2f:12:3b:f1:
56:32:7f:87:b3:a3:23:ac:67:c2:f3:0a:06:97:6c:
61:1d:f8:db:81:72:b5:11:f2:0d:46:7d:a5:24:b3:
fc:d4:00:38:41:d1:94:f5:6b:32:2d:eb:27:26:46:
3d:e1:6e:58:d2:7e:fb:a1:c9:37:f2:c4:22:81:82:
a4:18:f6:fe:57:78:4e:59:d7:d0:26:0e:ac:77:5f:
6e:70:6b:82:44:e2:76:57:43:11:a3:ef:a2:fe:74:
3d:bf:c4:cf:22:fb:0a:ca:20:00:cf:15:e5:59:9e:
f7:a2:91:4f:57:b6:b2:cb:c0:1b:ad:c2:ef:78:aa:
0a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:BE:27:54:7E:3A:15:C1:2F:EA:2D:46:3C:B9:CB:F3:A7:AD:B3
X509v3 Authority Key Identifier:
keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/7_O-J1R-OhXBL-otRjy5y_OnrbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.178.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9a:85:be:c2:81:dd:35:d1:59:27:f0:fe:04:ef:b3:aa:27:
5a:a1:6b:15:c1:22:70:05:92:08:f2:59:cd:c3:50:5f:98:3d:
33:7d:0a:75:a3:15:a1:c5:82:17:b5:71:7d:44:94:ba:80:61:
14:c7:04:20:60:3d:dc:0c:76:78:dc:2b:e9:54:5a:ea:19:58:
f5:c8:41:1a:89:8e:63:b2:f7:57:21:9a:c3:5b:cf:1e:03:99:
24:e9:99:00:25:b4:06:0e:a8:27:5b:b1:c5:aa:28:0a:00:d4:
6d:53:a2:5c:79:5d:48:5d:c9:b1:c6:cb:98:5a:29:a9:c0:19:
3c:26:41:cd:0e:d0:c5:0d:0d:64:c7:96:84:3a:c6:f8:7e:ac:
ee:2b:40:91:9f:be:35:bd:de:32:ff:46:93:b4:8a:a0:91:f9:
ca:2c:79:6e:1f:6c:d7:b9:aa:b5:94:80:9b:10:8c:5b:b6:75:
e2:ac:21:d4:b7:a4:91:58:e1:e7:f5:c0:a6:f5:29:e8:df:70:
2c:fe:e9:5a:24:4d:dd:54:f4:d3:c7:7a:94:57:1f:28:08:27:
4b:a2:13:94:6e:8e:c1:6c:86:10:23:e0:eb:6f:11:c4:7c:80:
7e:ae:2d:cd:d8:dc:2a:99:37:c5:6b:be:d8:5f:f4:24:b4:7f:
81:98:a0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:28 2024 by rpki-client on console.sobornost.net