Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/v90cJ8BPAUkp8n4uI5QMnZmMvjs.roa
File: v90cJ8BPAUkp8n4uI5QMnZmMvjs.roa (raw, json)
Hash identifier: i26E0BrxoqFWnHxe4OOSXCO8z6GrFcJBO+vV5OaLWcI=
Subject key identifier: BF:DD:1C:27:C0:4F:01:49:29:F2:7E:2E:23:94:0C:9D:99:8C:BE:3B
Certificate issuer: /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial: 01856C13618D354D2D3F2788BD3A0EFACC4E
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/v90cJ8BPAUkp8n4uI5QMnZmMvjs.roa
Signing time: Sun 01 Jan 2023 06:44:47 +0000
ROA not before: Sun 01 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25089
IP address blocks: 194.107.142.0/24 maxlen: 24
194.107.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:61:8d:35:4d:2d:3f:27:88:bd:3a:0e:fa:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Validity
Not Before: Jan 1 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bfdd1c27c04f014929f27e2e23940c9d998cbe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:89:08:10:7a:3a:78:b5:8a:10:30:98:ba:
ca:ca:6b:5e:78:45:72:21:7a:92:87:50:b1:95:e3:
76:ea:eb:27:b3:a8:79:5e:0a:c5:71:4d:dd:89:6b:
92:79:08:7a:e5:59:67:be:47:cf:6a:98:e3:aa:47:
26:d5:dc:4b:a0:11:9f:24:45:b4:19:e4:ea:19:de:
97:4a:ea:b1:2a:57:dd:c3:30:23:9b:f0:91:ea:89:
4a:e9:be:c5:2a:23:c2:d4:17:21:27:9b:12:d1:f9:
3d:95:11:0a:76:3c:34:77:72:f9:d9:79:02:d0:4c:
b2:d2:77:5c:23:45:b7:4e:44:41:71:eb:78:13:3c:
51:7b:08:50:09:5e:34:c7:f2:b2:05:bd:b2:b6:cc:
bf:9f:24:4b:a4:dd:b0:8b:1e:1c:fb:6b:e5:3a:ae:
fb:c2:eb:62:2b:fe:2e:69:dd:8e:b4:e1:10:b6:6b:
e5:77:61:14:5c:cb:c3:2e:d1:5e:57:57:cb:49:66:
dd:81:93:f7:05:82:5a:6c:0a:12:0c:c3:f6:ee:9f:
b8:0d:69:df:fb:03:6b:ce:ba:4c:9a:cc:fe:b0:2d:
99:77:cf:4b:9d:1d:a8:b1:42:be:39:f9:41:29:f3:
dd:89:9a:6f:aa:43:3e:e0:de:1f:90:70:00:9a:4c:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DD:1C:27:C0:4F:01:49:29:F2:7E:2E:23:94:0C:9D:99:8C:BE:3B
X509v3 Authority Key Identifier:
keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/v90cJ8BPAUkp8n4uI5QMnZmMvjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.142.0/23
Signature Algorithm: sha256WithRSAEncryption
82:45:c7:ca:c8:8a:a7:07:82:d4:ba:f9:c6:4a:42:9f:c3:b5:
0b:2b:1d:a0:48:05:be:48:28:ec:36:cb:46:b3:a6:f6:05:e3:
50:07:68:b6:65:54:fa:97:79:69:eb:36:68:d8:4b:cc:02:40:
a2:33:b1:eb:3c:83:0d:d9:df:15:d4:93:2d:26:40:f4:03:31:
d7:c4:76:2c:61:88:59:ac:40:56:7c:47:e2:fa:70:6f:cf:2f:
b0:d3:c9:b8:47:c3:59:7c:98:ec:e1:ca:e0:03:05:81:0f:95:
b3:ad:32:8d:03:93:91:2f:7e:20:ca:05:14:1d:43:a3:6a:2a:
4c:75:23:ee:d8:6a:eb:26:e7:f8:09:4b:54:15:43:8a:cc:c7:
a0:67:05:86:73:81:cc:3a:b3:44:cb:d9:00:0b:d0:f6:8a:f2:
6f:a4:54:6c:c2:45:21:87:27:9c:74:de:ab:98:12:c5:cc:dd:
41:fd:4b:76:e7:5e:7e:62:39:6c:d7:19:b3:98:51:84:1f:b5:
40:b0:8b:1f:b7:37:fe:16:78:9e:a3:87:f5:67:d3:60:28:9c:
b7:17:12:6a:16:f4:f2:b0:79:f7:e6:e5:11:36:ed:ce:99:b1:
37:06:3b:95:e0:6f:25:7d:2e:50:19:b4:53:e6:5b:06:ff:a9:
11:8d:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:21 2024 by rpki-client on console.sobornost.net