Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/0kc3yJ_DgAZuX9a_lxgMTJTjkvo.roa
File: 0kc3yJ_DgAZuX9a_lxgMTJTjkvo.roa (raw, json)
Hash identifier: sBg2jOU3iq9SbjxsuyOOEXfSps564HA2Q4RA8HXwE6Y=
Subject key identifier: D2:47:37:C8:9F:C3:80:06:6E:5F:D6:BF:97:18:0C:4C:94:E3:92:FA
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01857270F40F77288B61463F25C894E71A44
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/0kc3yJ_DgAZuX9a_lxgMTJTjkvo.roa
Signing time: Mon 02 Jan 2023 12:24:43 +0000
ROA not before: Mon 02 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59706
IP address blocks: 185.114.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f4:0f:77:28:8b:61:46:3f:25:c8:94:e7:1a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jan 2 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24737c89fc380066e5fd6bf97180c4c94e392fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:18:98:32:f4:69:80:e7:3d:a2:34:0d:1b:
5e:09:cb:82:84:02:3e:7a:a4:97:58:02:0e:2a:53:
a2:8d:e3:7d:d8:f2:22:cb:a9:9a:bb:0a:bf:3b:0b:
ed:f6:64:f0:fa:52:b6:90:ce:c8:9c:6e:35:55:1c:
e6:8c:0e:3b:d4:94:66:8f:4d:ae:b3:02:8a:b9:bc:
d5:19:c0:ae:57:a5:fe:0e:1b:50:bd:88:8f:4b:92:
3d:0d:64:21:0b:ec:1a:28:63:ed:6f:ae:dc:92:af:
91:eb:13:b6:3c:f1:a0:0a:62:f5:e6:51:57:21:78:
bd:11:36:e2:96:c4:3f:71:66:08:8b:66:9c:78:43:
92:28:a2:db:1e:6d:2d:2d:bf:1d:59:78:05:36:7c:
e1:97:00:29:14:5a:d7:d1:49:c3:67:a3:14:32:8f:
25:07:3f:f8:ac:98:4a:57:21:fd:37:30:ac:cc:93:
19:65:9e:5a:fa:6f:cf:b6:f4:c4:b1:e2:45:b5:be:
da:20:f9:15:92:7d:c4:db:9e:cb:b8:98:ba:2f:65:
01:40:0d:72:48:0e:fb:61:97:3f:ae:c2:31:f7:3b:
15:9a:8b:18:25:f8:22:13:a8:dc:59:1f:9f:f4:e4:
fd:be:04:31:7d:1e:ec:97:6a:aa:fc:d9:b4:04:d8:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:37:C8:9F:C3:80:06:6E:5F:D6:BF:97:18:0C:4C:94:E3:92:FA
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/0kc3yJ_DgAZuX9a_lxgMTJTjkvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.151.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a4:f6:6c:6e:24:1f:5d:dd:2e:33:63:31:9b:fa:70:68:6d:
ca:3d:e0:14:b8:b8:7d:6a:4e:09:f1:eb:26:e5:bc:c9:5b:31:
c0:09:91:8c:7f:1a:73:08:22:63:b5:23:ac:60:e5:37:fc:2f:
3a:3f:b7:c8:73:39:e0:a7:d2:4a:c2:ef:be:19:fb:ea:39:9c:
16:86:26:12:2f:f0:b9:dc:7a:24:fb:7f:70:2f:0a:e3:f4:16:
92:19:57:c4:7d:cf:7f:07:84:37:0c:96:1f:7a:5a:a0:c5:12:
23:74:8f:d1:37:af:5a:ad:ef:4b:fb:c3:5f:7f:3a:d5:84:d8:
cb:ff:a9:ce:fc:d3:c8:cb:44:44:b6:0e:38:3a:a9:f8:5c:cd:
13:be:18:01:03:65:54:5c:93:e1:53:77:20:c7:75:3f:81:0d:
86:73:3f:02:84:52:92:5b:60:b5:88:72:82:4f:0d:34:f3:89:
73:37:77:56:f7:11:91:c1:4d:8b:2a:91:09:9a:aa:74:70:29:
61:fe:e3:20:3c:91:27:60:3a:f7:67:78:47:c5:e1:2c:91:d2:
16:bf:14:ed:1b:79:2a:dd:b2:3b:f9:97:d3:e2:2a:94:23:ea:
c4:33:1e:0d:40:d3:16:8a:8e:4b:ae:b5:a6:41:4e:0f:19:99:
f1:c4:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net