Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/SRkNaTkgx2Gs3IR_ZApdkUaTqpA.roa
File: SRkNaTkgx2Gs3IR_ZApdkUaTqpA.roa (raw, json)
Hash identifier: taIhFo/8RETB+kcn/27gcN/BJlwG3Reck6WG4ltiBso=
Subject key identifier: 49:19:0D:69:39:20:C7:61:AC:DC:84:7F:64:0A:5D:91:46:93:AA:90
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 01857002821AE346C16F46C641B1FAE31F8B
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/SRkNaTkgx2Gs3IR_ZApdkUaTqpA.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57668
IP address blocks: 5.183.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:82:1a:e3:46:c1:6f:46:c6:41:b1:fa:e3:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49190d693920c761acdc847f640a5d914693aa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:07:a8:f5:5c:1d:10:ca:f8:b3:fd:c5:f9:
c3:3d:ee:fd:5a:d0:99:b2:26:85:b6:d8:25:e7:b0:
5c:ff:20:62:6b:87:c4:86:32:1f:fa:6b:5b:ee:22:
ff:4c:69:0b:e8:6d:7b:75:dd:ae:b4:1c:24:6f:67:
63:0c:1e:22:71:7b:24:82:37:40:10:a2:87:a6:df:
29:a7:84:ad:47:04:49:e8:e6:59:32:ce:44:de:ec:
35:26:24:5e:f1:63:8e:6b:4c:ca:e9:3a:c8:8c:e6:
51:65:03:42:2e:a6:9d:a3:6d:ce:cc:51:34:e7:a3:
bd:cb:f1:6b:56:6e:13:82:99:27:79:51:c1:91:46:
5f:71:ef:13:7f:b5:b6:c9:3b:7f:a8:92:a0:21:55:
9d:50:0f:7f:5e:53:7f:dc:12:fe:24:ad:13:39:ca:
21:08:cb:f3:d9:dd:3c:5b:d6:90:7c:cc:11:da:aa:
e0:7e:40:c8:db:67:6f:a5:ab:9a:c4:2d:d4:41:d0:
10:61:8b:a5:bb:63:a8:41:15:59:d3:f0:9a:d1:b8:
63:56:56:dd:92:08:a6:94:34:64:70:23:a9:e6:64:
c4:5e:bd:aa:c5:1e:6e:47:50:b5:92:44:8b:d2:c3:
29:b8:9e:12:c5:2a:58:ae:ad:ed:6c:8a:79:ec:4a:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:0D:69:39:20:C7:61:AC:DC:84:7F:64:0A:5D:91:46:93:AA:90
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/SRkNaTkgx2Gs3IR_ZApdkUaTqpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.169.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bf:c1:60:4e:79:83:c3:50:08:c6:40:03:71:32:84:27:e5:
60:24:f6:e8:26:13:26:83:be:ad:11:97:18:a3:07:68:99:15:
83:81:ff:24:43:ba:f8:31:a2:9d:fa:9b:fe:31:05:76:71:0f:
d8:44:a6:2a:b7:26:3a:04:ba:10:17:5d:80:8e:0c:73:fb:fb:
2e:d1:b9:89:63:4a:4c:49:2e:c8:11:bb:b6:ec:0d:36:5e:7d:
9c:9a:cd:19:39:92:ac:87:be:3a:51:dd:0f:4f:fc:b6:0d:d2:
1c:aa:96:7d:02:55:c9:4f:74:d9:45:41:53:fa:be:b5:03:75:
ff:b8:71:2e:13:e9:52:ff:f1:95:f8:bb:65:a7:54:b2:44:0b:
be:52:8e:0c:a8:68:a3:b6:38:84:db:a2:62:3f:bd:5f:c0:a8:
88:66:64:d8:e7:a9:26:c2:13:f7:1d:d7:cf:88:55:b9:e1:94:
a0:14:89:20:d8:dc:79:6c:78:dc:2a:f4:af:95:33:dd:6f:b7:
b7:c3:49:4f:03:9c:85:ff:ef:02:ff:03:0c:a0:8c:7b:7e:a1:
b7:d9:22:01:af:48:4e:7f:20:d9:7b:ec:39:47:b9:6e:50:b4:
fe:0c:c0:e1:2d:d2:df:7b:04:a4:66:16:bb:94:f7:86:f8:91:
dc:4f:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:28 2024 by rpki-client on console.sobornost.net