Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/OSRd-tB5vBD-CdKQKgV1JvwG2Zg.roa
File: OSRd-tB5vBD-CdKQKgV1JvwG2Zg.roa (raw, json)
Hash identifier: fC5tLYcBq2S4Bp6VpkKgYZP5/TnD90dxsLLH6EWXvSQ=
Subject key identifier: 39:24:5D:FA:D0:79:BC:10:FE:09:D2:90:2A:05:75:26:FC:06:D9:98
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 018C8BC90CA4B6BD8B924D685811D6323862
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/OSRd-tB5vBD-CdKQKgV1JvwG2Zg.roa
Signing time: Thu 21 Dec 2023 09:50:58 +0000
ROA not before: Thu 21 Dec 2023 09:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a13:92c6::/32 maxlen: 32
2a13:92c4::/32 maxlen: 32
2a13:92c0::/32 maxlen: 32
2a13:92c3::/32 maxlen: 32
2a13:92c7::/32 maxlen: 32
2a13:92c2::/32 maxlen: 32
2a13:92c1::/32 maxlen: 32
2a13:92c5::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:c9:0c:a4:b6:bd:8b:92:4d:68:58:11:d6:32:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Dec 21 09:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39245dfad079bc10fe09d2902a057526fc06d998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:e1:3e:1c:e5:d8:a7:68:c0:32:46:70:99:
26:49:bb:8b:e6:28:0a:22:69:3f:3a:2d:fe:0a:1a:
8c:d7:ff:94:27:02:6e:90:85:7b:26:5d:b0:51:8f:
bf:cd:0b:1f:2c:96:e9:56:94:7a:d8:9f:b4:76:4a:
d1:85:b4:13:4e:b8:a0:5e:c2:2e:31:87:f2:df:c6:
63:28:21:3f:dd:56:57:77:e1:fc:6d:f3:f1:5b:cc:
a3:4d:6c:6d:94:37:f7:03:fb:fe:75:6d:33:16:7b:
7f:a7:50:68:2b:7f:df:83:1b:5a:d9:07:db:28:f1:
2c:34:90:db:ae:c9:a4:23:a9:12:eb:b3:42:80:74:
f0:d5:cd:49:6b:79:c5:0f:64:00:5a:7f:a7:5f:d9:
87:8a:ec:54:fd:6c:40:d9:f0:86:19:06:02:07:0c:
f8:ca:99:31:4d:88:24:f6:6e:c4:43:44:3e:37:ff:
7d:17:19:d3:3d:fc:a1:f3:0a:f0:fa:0b:9c:65:18:
7b:50:63:94:70:17:04:62:90:dd:07:97:7f:1a:ac:
5d:72:7d:d9:fe:41:85:f3:29:f7:09:37:9d:7f:fd:
14:8b:3b:da:f3:eb:18:82:26:84:11:06:e0:28:7f:
d3:14:e6:cd:b2:84:60:0e:87:22:fc:03:3c:87:65:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:5D:FA:D0:79:BC:10:FE:09:D2:90:2A:05:75:26:FC:06:D9:98
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/OSRd-tB5vBD-CdKQKgV1JvwG2Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:1c:2f:80:2f:af:70:9c:a7:40:36:5b:39:8b:ef:68:e2:c6:
a8:7f:cd:7f:b0:96:92:f1:19:70:5b:c4:8b:57:46:57:a4:e6:
d8:bb:a7:f9:a9:9f:78:e0:89:c3:25:46:f1:88:6d:54:5d:aa:
58:81:76:11:47:e9:d5:55:b6:67:fc:4f:12:ac:b5:8c:5f:e5:
75:f8:f2:87:0c:67:e9:1a:88:32:1d:be:56:60:b9:ec:f1:fa:
8e:4d:02:b2:2d:ee:4b:5d:c5:ef:07:f1:52:c0:3d:70:91:ab:
fb:cf:48:cb:c8:b4:23:ca:23:35:17:ff:03:c3:15:cb:5a:63:
ad:d6:28:a6:dc:35:34:dc:07:05:78:dd:e2:38:02:79:47:e4:
d8:81:8e:bf:53:e4:fb:08:61:65:c6:2a:09:40:c1:76:e6:5a:
13:82:a4:b1:91:33:ec:df:aa:97:ed:51:26:dd:ef:46:c1:91:
49:a5:4c:24:ee:ea:e1:1d:27:ea:d2:0b:c7:7f:d7:a0:f4:be:
58:c3:9e:c2:cb:58:0b:b9:49:da:53:74:c5:9f:e8:20:b1:16:
34:b9:51:ab:01:99:25:9b:7c:71:6e:35:6f:71:7d:62:99:28:
20:f7:c6:4b:17:5e:7f:65:68:1c:f6:5a:aa:4c:65:e9:5e:2f:
00:11:a6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net