Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/xtkXTI69ywQp-hh_FBB_TkdmBW4.roa
File: xtkXTI69ywQp-hh_FBB_TkdmBW4.roa (raw, json)
Hash identifier: UBwl88V2tck4klcQSbavx2NxNMCtl1+FulcD62KwS6A=
Subject key identifier: C6:D9:17:4C:8E:BD:CB:04:29:FA:18:7F:14:10:7F:4E:47:66:05:6E
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0185700283525C143B18CDC6D5D12854C76F
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/xtkXTI69ywQp-hh_FBB_TkdmBW4.roa
Signing time: Mon 02 Jan 2023 01:04:50 +0000
ROA not before: Mon 02 Jan 2023 01:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211611
IP address blocks: 194.36.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:83:52:5c:14:3b:18:cd:c6:d5:d1:28:54:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Jan 2 01:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6d9174c8ebdcb0429fa187f14107f4e4766056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:40:2a:fa:f4:fb:cd:75:2f:ae:73:c8:94:da:
79:1c:30:7d:0e:8f:52:64:d9:da:49:b6:4b:d9:a0:
d6:fe:c3:d3:43:55:e6:c1:3c:2a:85:27:44:b5:98:
9d:64:36:9d:5a:6e:5e:f0:a2:9a:6a:c8:1f:86:90:
94:7a:cf:c0:7c:8a:85:08:c2:38:83:1a:a3:03:82:
20:43:38:a8:2c:30:ac:46:86:a1:c6:8a:2e:b6:27:
b0:1f:0d:17:41:47:12:29:fc:5b:6d:59:71:2c:8c:
ae:5d:07:3d:f1:f3:08:11:f4:12:1b:ff:93:87:cd:
9f:e2:8a:8e:9f:b8:81:d5:cf:e4:10:68:9c:26:85:
58:5f:15:71:4d:f8:64:d4:e7:e9:dc:db:68:7a:f2:
dd:1a:e8:f9:e2:00:2d:bf:54:b2:fb:0a:64:fb:e3:
cb:bf:58:e1:a4:13:77:7e:83:6c:36:1a:30:42:86:
ac:8d:ba:c3:c2:db:36:75:94:29:7e:80:45:36:b6:
d8:59:cb:96:1d:76:2b:ca:28:34:89:d7:28:02:af:
a0:f9:cc:15:21:b6:17:9f:e2:d6:99:df:33:b0:f3:
4b:ad:8f:85:08:ea:be:65:bf:19:d0:00:d4:df:59:
55:1a:86:5c:2b:a4:f9:91:4a:12:36:75:16:4a:8c:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:17:4C:8E:BD:CB:04:29:FA:18:7F:14:10:7F:4E:47:66:05:6E
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/xtkXTI69ywQp-hh_FBB_TkdmBW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.143.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3e:0e:17:b8:2c:b8:bb:5e:5f:8b:77:68:9d:a0:19:83:41:
ef:3e:06:ca:de:08:91:71:c1:94:e6:76:12:b8:27:c3:be:f1:
45:33:3c:6f:07:f9:4d:f7:2f:ff:54:7a:7d:65:eb:e8:21:63:
7c:7e:d7:4e:3d:52:bd:f5:d4:7d:d7:58:fc:78:8e:f4:6f:ee:
6b:b7:c6:db:76:d5:50:c5:df:b1:48:3c:7f:71:ef:51:6d:52:
45:cc:20:57:f5:35:4b:88:f4:91:b1:7b:88:66:06:47:8b:9d:
ed:46:e8:67:f5:09:b5:1a:62:db:95:47:0a:be:47:4d:e0:8c:
a2:3b:c1:75:45:38:46:87:ec:2b:e2:56:45:ae:a5:da:9f:f0:
c1:ea:73:17:ff:bb:f2:8e:f3:3c:19:1c:09:b1:b7:f8:90:d2:
02:89:ad:f4:90:e3:90:fc:6a:28:d8:59:2f:d4:dc:aa:41:f4:
cd:ab:9a:76:8b:2c:63:c7:a6:77:3f:ee:44:57:51:6d:88:54:
68:cd:51:32:11:37:67:e0:47:e3:5a:b4:0f:09:20:a7:a7:80:
30:6f:e8:5b:8f:38:55:ed:ea:ae:64:35:e4:52:66:bb:39:d8:
93:29:4e:de:76:38:ac:ee:88:c7:7f:7e:f9:b8:d1:c2:be:1f:
89:e8:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:28 2024 by rpki-client on console.sobornost.net