Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/7mlHd1kLcGSOPwot8wwpfgrylYE.roa
File: 7mlHd1kLcGSOPwot8wwpfgrylYE.roa (raw, json)
Hash identifier: bRH+Cq2Mr7l+pT7MlMhhK3uiiqQ4DY8UZPO33YwoyUM=
Subject key identifier: EE:69:47:77:59:0B:70:64:8E:3F:0A:2D:F3:0C:29:7E:0A:F2:95:81
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 0185715E7133471E8EAF99FA62261BC03706
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/7mlHd1kLcGSOPwot8wwpfgrylYE.roa
Signing time: Mon 02 Jan 2023 07:24:52 +0000
ROA not before: Mon 02 Jan 2023 07:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201319
IP address blocks: 194.56.64.0/21 maxlen: 24
194.56.0.0/18 maxlen: 24
194.56.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:71:33:47:1e:8e:af:99:fa:62:26:1b:c0:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: Jan 2 07:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee694777590b70648e3f0a2df30c297e0af29581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:07:64:64:9c:bd:33:9c:3f:2c:fd:bc:73:
c8:54:57:d1:63:1e:ec:2c:8c:d8:79:b3:c8:c2:b7:
f7:7e:c2:da:16:df:88:f0:15:22:59:ee:d7:bc:ff:
06:a8:a7:18:9e:f1:60:75:25:17:67:dd:ca:47:96:
4d:27:9c:b9:08:0f:f5:8b:be:97:d1:8d:36:c1:7e:
37:4f:3e:79:7b:50:1a:57:a4:dc:53:f9:a2:70:0d:
9f:1a:95:f3:f5:3f:b1:8c:e1:e0:dc:5c:ad:8b:8f:
d6:8f:a2:4c:a7:48:93:f1:b5:0c:8b:b1:99:f2:97:
57:bf:09:fc:33:29:b9:2f:53:42:e1:f5:f7:7a:59:
48:fc:8e:2c:a3:89:e8:a7:e0:3e:dd:b4:cc:66:34:
11:d9:38:dc:18:3c:e8:42:6e:1d:19:fe:43:2e:1c:
b9:5e:44:8d:2f:9c:6a:5a:19:95:99:be:f7:41:12:
5c:ab:71:dd:18:01:13:22:7e:4c:4c:ed:11:a4:a7:
de:40:4c:c2:99:39:6e:f4:a3:17:5b:65:31:58:38:
21:04:23:9b:dc:ba:20:f9:03:99:01:77:69:6a:34:
ce:2a:be:08:ac:41:91:95:22:bd:ce:14:2e:6d:74:
9b:3f:60:30:d4:e7:14:bf:e5:9b:79:e5:d1:e2:60:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:69:47:77:59:0B:70:64:8E:3F:0A:2D:F3:0C:29:7E:0A:F2:95:81
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/7mlHd1kLcGSOPwot8wwpfgrylYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.0.0-194.56.71.255
Signature Algorithm: sha256WithRSAEncryption
19:3a:99:da:15:9b:30:70:f1:9e:72:43:4b:c4:7a:b5:51:fd:
2f:04:d6:33:5f:1d:16:e9:a6:31:5d:29:0e:bf:c1:60:b7:d0:
0a:b2:f1:53:dd:4b:1d:6d:59:47:ee:b8:ae:da:62:6e:45:42:
54:d0:01:88:7d:51:9c:3b:c1:4d:ca:a6:5e:8f:48:40:f5:5f:
b5:d5:d7:5b:3c:71:b1:61:f2:c1:09:68:7a:2f:7d:f4:ad:32:
a2:5e:52:d5:a4:7a:e5:af:01:ac:47:59:cb:6e:c5:29:fb:a5:
78:b3:0d:26:cd:0d:91:15:40:1a:76:34:0e:ce:58:15:25:ea:
24:14:ab:82:c3:3b:c5:ea:4d:fe:f6:33:06:7e:b6:43:56:8e:
e8:5f:3a:49:aa:2e:25:4d:44:66:ee:fe:21:96:ca:82:c7:cb:
10:62:cd:05:a2:6e:fa:da:93:42:fa:24:3e:c8:dc:b2:22:8c:
64:8d:87:0b:e9:87:c9:96:b9:62:70:29:53:6a:b7:f8:21:20:
34:bd:62:cc:7a:8c:c2:a7:17:85:67:69:45:35:51:3b:5d:35:
27:0f:0a:bc:91:85:77:7e:4a:99:41:e5:9c:5a:41:b0:e3:b0:
51:a9:2b:53:8c:7f:3a:f5:14:a3:15:07:5b:cb:40:de:ad:94:
95:47:85:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:28 2024 by rpki-client on console.sobornost.net