Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/_sx21jLFN-9kaDa2DoqgM65oai8.roa
File: _sx21jLFN-9kaDa2DoqgM65oai8.roa (raw, json)
Hash identifier: i4cTrv/1xoTnOpN/WF8jV+CDu0hlBcrvFeoFhM+54CI=
Subject key identifier: FE:CC:76:D6:32:C5:37:EF:64:68:36:B6:0E:8A:A0:33:AE:68:6A:2F
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 01886427627B4D6E7E43209C5413BE06A36F
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/_sx21jLFN-9kaDa2DoqgM65oai8.roa
Signing time: Sun 28 May 2023 20:58:02 +0000
ROA not before: Sun 28 May 2023 20:58:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59645
IP address blocks: 193.104.168.0/24 maxlen: 24
195.191.196.0/23 maxlen: 24
2a06:d1c1:e::/48 maxlen: 48
2a06:d1c0:dead::/48 maxlen: 48
2a06:d1c0:deae::/48 maxlen: 48
2a06:d1c0:f761::/48 maxlen: 48
2a06:d1c0:a761::/48 maxlen: 48
2a06:d1c0:deac::/48 maxlen: 48
2a06:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:64:27:62:7b:4d:6e:7e:43:20:9c:54:13:be:06:a3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: May 28 20:58:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fecc76d632c537ef646836b60e8aa033ae686a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a7:cc:92:98:6e:1b:bf:2d:b2:bc:ca:b6:f8:
04:4c:36:4a:2b:4a:72:1a:b2:38:a7:9a:33:19:25:
b0:a5:1e:67:1a:e2:14:68:8a:ac:77:98:1c:29:1b:
d7:78:95:73:62:5d:be:96:7f:ee:e8:1b:ec:58:ad:
dc:c5:1d:13:2f:12:09:60:72:b5:5a:9f:ad:ec:69:
df:30:2b:32:f6:ad:71:00:d5:18:8b:b8:6e:e5:d8:
e9:42:26:8b:c5:67:a3:f2:df:3c:72:f4:d5:20:ff:
ea:56:06:6d:c4:55:b5:98:0f:ac:12:58:8f:8c:8e:
34:e1:a1:ba:41:27:5e:ce:8c:4c:ca:1d:e3:96:26:
ae:dd:b7:ee:fb:95:98:e1:f9:94:b1:9a:88:d6:36:
c1:d3:44:84:54:9e:a7:82:b2:5a:83:4e:e8:ff:2c:
0e:66:7c:75:4d:d2:32:bb:79:28:e8:29:5e:21:a6:
d1:42:55:1e:cb:bf:42:c1:c6:b3:46:1b:49:d4:94:
b3:6d:e0:66:b7:69:51:6b:6a:06:2e:0a:c9:0b:b4:
16:39:4f:28:d2:0a:45:c8:87:04:d7:5e:ba:44:e0:
d9:79:7e:78:37:e5:97:0c:42:73:cc:ae:74:e7:6b:
08:91:2f:57:e1:7c:53:75:b3:cf:f3:a5:a2:7c:b2:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CC:76:D6:32:C5:37:EF:64:68:36:B6:0E:8A:A0:33:AE:68:6A:2F
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/_sx21jLFN-9kaDa2DoqgM65oai8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.168.0/24
195.191.196.0/23
IPv6:
2a06:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
36:16:44:59:25:61:11:52:4f:99:3f:53:4c:b7:2e:31:1d:29:
16:41:9a:13:20:79:83:3e:02:7a:af:d1:86:cf:31:72:58:56:
d5:aa:25:22:5d:2e:0d:5f:24:b5:2b:10:01:a9:78:93:29:8a:
e6:b6:5e:47:9f:c7:8f:21:f1:1a:54:fd:4e:46:85:04:14:23:
27:2f:a8:46:2d:9b:c5:26:89:65:b0:ee:e1:1e:e0:d6:7b:f0:
3b:19:a2:e7:15:67:0a:dd:cd:37:af:32:88:6d:49:fa:a7:c5:
17:b4:aa:6a:54:44:65:16:2f:53:83:17:0b:34:5f:ae:d0:b1:
a3:02:a0:64:a4:de:30:6d:2c:79:13:bf:27:11:a1:66:b1:9c:
6d:36:ec:e7:25:3d:e8:63:6c:fb:39:e8:9a:80:a0:d1:dc:c5:
8f:5c:32:b6:6e:71:ce:4c:a7:24:ac:b6:92:7f:37:ea:72:ea:
57:f6:96:b0:0e:03:cc:ef:26:9a:d0:b3:52:83:37:00:53:aa:
3e:1e:f9:19:df:b6:a1:06:d4:6b:7a:ad:d8:39:07:3b:1c:43:
cd:36:f3:23:87:7d:bd:79:d0:11:c2:49:62:e0:d0:b6:5e:a2:
4f:00:c9:b1:76:22:45:cc:74:df:a7:ec:dd:fd:da:90:f9:67:
da:7d:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:04 2023 by rpki-client on console.sobornost.net