Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/tpJSvCZmA1TpkFHXJQZ0v4qJr2c.roa
File: tpJSvCZmA1TpkFHXJQZ0v4qJr2c.roa (raw, json)
Hash identifier: XT/CwrqjZccrMi6HSrGEkaaTcAAZbUXmgMfSmHD8kco=
Subject key identifier: B6:92:52:BC:26:66:03:54:E9:90:51:D7:25:06:74:BF:8A:89:AF:67
Certificate issuer: /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial: 018570306EC65926B257ABA76D0E1069D5B2
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/tpJSvCZmA1TpkFHXJQZ0v4qJr2c.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44823
IP address blocks: 193.16.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6e:c6:59:26:b2:57:ab:a7:6d:0e:10:69:d5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b69252bc26660354e99051d7250674bf8a89af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:7d:9e:63:51:ef:29:83:e5:4e:89:bf:69:
60:1e:bd:b5:2f:e0:75:d6:9e:31:d4:cf:51:f8:c3:
17:2b:fc:41:bf:d8:45:86:32:9c:75:d3:e1:e7:03:
f0:c7:b6:41:cc:d6:1c:dc:62:f3:42:18:36:42:83:
ea:69:1a:a3:5c:8e:f1:5a:76:ba:a7:58:50:29:e0:
ac:d3:61:c8:e1:cb:4b:d0:45:53:a8:a5:a8:53:e0:
29:c7:30:14:73:fd:f6:f1:2d:eb:c0:0e:55:ae:70:
91:44:f0:dd:5f:81:f9:01:e3:da:37:e2:a5:2c:2a:
30:9b:4c:1c:d7:1d:03:c0:db:af:0b:e7:ba:97:39:
6c:7e:e2:9c:cf:7f:ce:74:03:98:69:ec:e2:a3:55:
b3:c9:a3:83:87:a2:ea:9e:c6:35:5e:43:74:04:24:
8a:ae:5c:90:ff:09:b5:2a:bc:e7:eb:44:13:c3:76:
f1:6e:08:17:0b:fd:f6:38:d7:3b:4c:a9:1f:39:73:
d1:6c:dd:3d:ac:11:8a:91:82:b9:e0:97:77:35:34:
28:c2:5a:76:dc:6c:37:28:8e:37:f5:c4:77:16:be:
e8:d4:36:7a:e9:fb:5c:0f:21:80:96:58:f5:ce:f6:
5b:36:62:c6:5e:7c:14:fa:85:8b:b4:ad:22:7a:09:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:92:52:BC:26:66:03:54:E9:90:51:D7:25:06:74:BF:8A:89:AF:67
X509v3 Authority Key Identifier:
keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/tpJSvCZmA1TpkFHXJQZ0v4qJr2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.152.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b0:11:f3:41:29:47:87:1d:53:12:1b:75:a2:9b:48:a4:7b:
6a:7f:16:1e:ce:35:81:7c:0d:46:90:12:64:3c:55:5a:86:c0:
89:d8:7c:a0:6d:d4:20:ba:89:7c:ab:47:8b:a3:3c:f3:c7:01:
71:84:93:5b:a1:f3:58:52:d0:7d:f0:17:19:93:fb:4f:08:13:
d5:c9:72:73:0d:14:3a:32:93:f0:4e:91:4a:24:0d:15:66:d1:
e8:cd:c3:c1:8c:ec:af:4e:6c:29:b0:85:ca:ce:e0:59:8a:47:
69:27:79:9a:39:8f:98:73:cf:a0:eb:0e:70:63:d6:a2:11:98:
d8:cf:66:fa:59:98:40:a6:c0:76:ae:81:48:b3:57:63:a2:15:
55:81:a6:7d:4e:79:04:8a:1f:9a:df:2f:c0:65:e3:fe:3b:75:
09:a2:b0:e3:15:4c:d0:79:50:b8:67:0e:be:3e:c3:b6:4e:a4:
af:a3:4c:ab:e5:91:6e:ec:7f:8b:31:13:5f:61:88:57:c5:fd:
6d:85:22:b6:36:73:11:b5:6f:75:78:d4:5a:fd:c8:43:5d:15:
89:bd:bb:b1:25:b4:60:56:db:a8:80:7a:61:cf:04:1e:c8:d1:
03:96:47:2f:2e:db:bd:50:c4:f6:fa:b7:d3:5a:7e:7e:28:d3:
a9:d2:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:14 2024 by rpki-client on console.sobornost.net