Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/KSzrKC_if3ayTz9tN3C_1G_KhR4.roa
File: KSzrKC_if3ayTz9tN3C_1G_KhR4.roa (raw, json)
Hash identifier: t7UGpT6XFq3iJWl4CY7iRT9i2VAIAW6wBdfkl6xcjz0=
Subject key identifier: 29:2C:EB:28:2F:E2:7F:76:B2:4F:3F:6D:37:70:BF:D4:6F:CA:85:1E
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 01856F796A14C8BCBC86BA5484E2E458DB43
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/KSzrKC_if3ayTz9tN3C_1G_KhR4.roa
Signing time: Sun 01 Jan 2023 22:35:05 +0000
ROA not before: Sun 01 Jan 2023 22:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15576
IP address blocks: 193.43.27.0/24 maxlen: 24
2001:67c:168::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6a:14:c8:bc:bc:86:ba:54:84:e2:e4:58:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Jan 1 22:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=292ceb282fe27f76b24f3f6d3770bfd46fca851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:fa:11:af:97:88:70:55:6f:06:3a:4f:8f:
36:4a:93:ea:a2:9c:76:76:9c:09:db:e0:95:fa:dc:
b5:00:32:b4:38:45:c1:09:bc:20:af:d7:0c:68:8b:
6e:3b:ee:ff:e0:97:a4:bd:7d:1c:ea:54:e7:35:d1:
ba:58:3b:49:76:f9:a7:80:38:c9:61:63:53:3b:88:
03:4f:5a:33:ec:02:12:12:8b:90:0b:e2:d7:4f:91:
d5:03:60:ab:f8:b1:c6:69:41:77:25:9b:84:66:57:
52:cd:da:64:b4:8e:60:22:d6:ff:e3:3e:a8:cd:4c:
c5:f4:39:78:70:49:97:b9:21:84:3e:e5:a8:d6:3d:
8a:10:cc:e4:4e:00:50:89:41:b4:3c:b9:21:f6:64:
b0:b7:28:23:50:6a:1e:55:da:a5:c5:31:2b:8c:10:
4f:ab:24:63:12:12:67:56:07:24:f3:43:99:4c:eb:
88:40:3a:c5:76:4d:4a:8c:48:f9:8e:02:e1:30:8d:
10:af:6a:7b:2d:d0:0e:be:73:99:f1:dc:59:27:de:
b5:4c:a0:53:bc:50:03:28:51:49:70:8c:56:b0:1c:
9b:0c:0c:06:91:d3:ff:11:b0:e7:cb:71:2b:e0:92:
ed:12:b3:db:71:95:09:02:bc:88:95:cb:e5:4b:35:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:EB:28:2F:E2:7F:76:B2:4F:3F:6D:37:70:BF:D4:6F:CA:85:1E
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/KSzrKC_if3ayTz9tN3C_1G_KhR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.27.0/24
IPv6:
2001:67c:168::/48
Signature Algorithm: sha256WithRSAEncryption
87:0b:42:23:14:bd:70:7c:f6:e7:88:72:61:bd:90:f7:c2:8a:
10:a4:49:e7:1d:9f:94:9c:be:03:ca:b3:58:f2:0f:cd:6d:ca:
ac:6f:38:96:79:50:cf:58:df:f1:35:02:24:55:6d:b4:c0:53:
ec:83:0d:cf:0e:69:ef:90:a5:3c:b9:e1:96:5f:36:6f:0d:ff:
43:6f:3a:64:41:8c:03:23:9e:70:b0:6a:cb:ef:29:b2:9e:fd:
17:d3:33:16:ff:21:f5:3d:60:dc:b6:57:2a:ca:ef:92:d4:f9:
a3:20:fa:3e:2b:39:a2:75:dd:ee:44:52:52:e6:30:f7:09:50:
a1:8e:34:b3:04:3a:7b:b2:c9:ec:80:8c:e0:e7:4e:2d:61:99:
89:f4:dc:90:36:17:4b:b8:cd:cf:1e:db:15:d2:79:1a:13:83:
96:79:aa:d0:37:3d:1d:04:89:45:1e:36:ae:f1:45:42:9f:74:
89:62:3e:b3:67:55:c9:cd:48:5e:6e:c0:2e:b0:00:34:df:fd:
b4:68:40:7a:6a:57:ca:8b:59:f4:88:17:08:3a:29:7d:3a:86:
e1:0b:ce:c5:40:98:a2:af:96:3a:72:49:b5:d3:81:f0:10:3f:
be:1c:c6:80:80:ef:2e:7f:19:b6:c0:a4:06:c7:3d:7d:d4:18:
e8:b5:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:21 2024 by rpki-client on console.sobornost.net