Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/u2kZRMf6r_pSeKRX9ChdXbbmlXY.roa
File: u2kZRMf6r_pSeKRX9ChdXbbmlXY.roa (raw, json)
Hash identifier: emNW4mShUgeHIl8/N0U4SNmNOsLv/x0bv/IkEWmIuqM=
Subject key identifier: BB:69:19:44:C7:FA:AF:FA:52:78:A4:57:F4:28:5D:5D:B6:E6:95:76
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018B217D837106964182CDF8918F1EF6FAE9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/u2kZRMf6r_pSeKRX9ChdXbbmlXY.roa
Signing time: Thu 12 Oct 2023 01:25:55 +0000
ROA not before: Thu 12 Oct 2023 01:25:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3223
IP address blocks: 85.92.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:21:7d:83:71:06:96:41:82:cd:f8:91:8f:1e:f6:fa:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 12 01:25:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb691944c7faaffa5278a457f4285d5db6e69576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:75:c5:c2:7a:33:6d:e4:45:b1:41:ad:46:
43:f1:d0:bd:05:6e:6a:ea:e8:21:53:39:d9:71:16:
1f:08:45:2c:a0:e8:09:08:c7:6e:32:50:f6:ac:1f:
eb:73:fe:e6:4b:bf:d5:ed:c4:d9:c6:18:4d:12:21:
96:53:60:ae:45:e9:5f:ba:30:2b:75:c2:f7:22:96:
1f:dd:f7:a0:c4:04:2a:d7:d7:ee:28:4f:b8:56:98:
8e:7d:9a:77:12:1f:47:59:c7:ec:55:c5:83:2b:37:
71:91:98:1c:a6:67:8a:a9:82:51:72:f2:c9:14:d0:
11:03:4b:0d:2c:2a:01:65:1a:64:91:47:5f:b7:f9:
11:36:f7:46:5d:6d:b5:31:de:a4:ae:de:49:f0:98:
57:ad:d5:c9:9a:63:ce:f1:3a:68:e3:a5:3a:3d:4a:
68:4f:95:19:16:9b:12:ba:80:bd:47:7a:1a:e1:ec:
ee:04:df:24:b1:55:a1:98:b4:69:9b:23:c9:ff:eb:
4e:4f:e5:09:c3:de:61:ac:54:cc:3f:2d:57:15:e4:
f1:66:f3:4f:bb:ce:25:dc:6a:60:d9:a2:bc:d3:30:
5d:48:00:8c:8c:ba:26:79:62:e7:d7:cb:cc:48:7b:
29:f6:7d:ed:cf:50:62:93:ea:2c:86:b2:69:0e:1e:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:19:44:C7:FA:AF:FA:52:78:A4:57:F4:28:5D:5D:B6:E6:95:76
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/u2kZRMf6r_pSeKRX9ChdXbbmlXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
21:98:3d:61:25:44:fa:fb:9b:5b:db:7a:c5:69:12:48:a3:c0:
2b:8c:26:ad:0d:5d:46:be:e6:f9:b0:1b:01:43:9b:91:df:53:
48:d5:e9:ae:06:6c:5c:25:2e:22:28:34:54:a7:6d:35:75:48:
79:4b:92:72:31:cc:74:f0:02:0e:6b:82:12:15:dd:08:6e:16:
5e:4f:ea:99:74:33:2a:11:24:77:fc:a0:b8:a2:5a:bc:d4:82:
fc:2b:66:34:bd:6d:2e:cc:c9:d0:5a:d9:e2:3c:b8:18:42:26:
ad:49:f5:8d:c5:da:f4:9b:09:74:2c:08:3a:2e:2b:d6:e1:b5:
9f:1f:1c:af:2c:b5:bc:bb:9b:14:46:10:40:cd:78:f8:67:ba:
9c:cb:9a:7a:4b:4d:23:88:2a:51:ac:b6:7c:41:b1:65:b2:15:
5b:69:2d:bb:40:35:d8:df:a6:45:89:17:8e:a6:9a:38:14:f4:
2d:26:d1:16:f0:07:a6:2b:90:04:65:7c:71:1d:ce:b5:0d:b4:
17:2a:2d:f4:44:ce:8b:ff:81:59:8b:6f:41:ca:cd:19:e3:35:
21:d3:32:0c:40:5f:42:17:08:f0:6b:b2:20:ae:09:34:c2:e1:
56:cd:cf:af:7d:1a:de:ab:d7:a6:dc:ba:4a:80:15:f1:78:5e:
00:98:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:14 2024 by rpki-client on console.sobornost.net