Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/atnQ0cm9tpz-qe4fgdcrbjtJW2Q.roa
File: atnQ0cm9tpz-qe4fgdcrbjtJW2Q.roa (raw, json)
Hash identifier: 4A3JlU4E/Otc2cW+9qatSgvJM3ehuiNrLAT/kK4EWMw=
Subject key identifier: 6A:D9:D0:D1:C9:BD:B6:9C:FE:A9:EE:1F:81:D7:2B:6E:3B:49:5B:64
Certificate issuer: /CN=e5f83127d6512e13e88d4b951f1f039c6a3bac41
Certificate serial: 01856FA6D9F6224F1CBF0930E7EA1BC5AF0D
Authority key identifier: E5:F8:31:27:D6:51:2E:13:E8:8D:4B:95:1F:1F:03:9C:6A:3B:AC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/atnQ0cm9tpz-qe4fgdcrbjtJW2Q.roa
Signing time: Sun 01 Jan 2023 23:24:43 +0000
ROA not before: Sun 01 Jan 2023 23:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31019
IP address blocks: 5.42.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d9:f6:22:4f:1c:bf:09:30:e7:ea:1b:c5:af:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f83127d6512e13e88d4b951f1f039c6a3bac41
Validity
Not Before: Jan 1 23:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad9d0d1c9bdb69cfea9ee1f81d72b6e3b495b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:36:46:c3:d1:ca:52:88:f8:ad:9b:c4:e3:5b:
d4:75:69:e7:72:ca:fd:04:e6:59:ef:ac:f8:d3:da:
2c:0b:f5:f3:8e:cc:f2:59:aa:bd:34:9c:a3:18:a5:
35:b0:51:8c:15:bf:a6:08:2b:4d:97:a3:d2:7c:db:
f0:94:12:80:fa:67:93:2c:ad:39:11:40:cd:2e:6a:
3d:08:d8:5c:70:41:8a:91:d3:e1:dd:ba:fc:4c:6f:
83:de:13:a6:93:85:e7:14:1a:5f:c5:d9:aa:88:dc:
67:7a:91:a5:7c:1f:ca:79:82:f1:b8:30:af:40:65:
a2:c0:e2:d1:c7:05:4c:81:0a:a9:83:fd:4e:6b:a1:
72:f3:3a:92:79:58:8a:e0:d8:60:e2:87:af:ff:76:
f9:d3:dc:9b:2d:d0:c9:11:3d:f8:29:f1:fc:fd:28:
af:f9:5a:f7:be:dc:b2:63:80:77:bc:3f:a9:08:30:
bb:04:18:0b:1a:08:2e:a3:ba:5d:9f:0d:1e:3d:10:
8b:1c:b7:4a:53:a3:07:9c:96:a1:a9:70:2d:cb:db:
4c:af:f3:79:03:b7:eb:15:33:25:d4:53:d9:b6:e2:
c6:f6:9c:c5:e9:61:5a:2b:96:df:c0:64:2a:6b:03:
db:56:ce:4c:8b:01:cb:43:fb:0d:f9:05:40:ed:b7:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:D0:D1:C9:BD:B6:9C:FE:A9:EE:1F:81:D7:2B:6E:3B:49:5B:64
X509v3 Authority Key Identifier:
keyid:E5:F8:31:27:D6:51:2E:13:E8:8D:4B:95:1F:1F:03:9C:6A:3B:AC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/atnQ0cm9tpz-qe4fgdcrbjtJW2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/56158f-7d45-413e-a8e6-6050368b7e03/1/5fgxJ9ZRLhPojUuVHx8DnGo7rEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.207.0/24
Signature Algorithm: sha256WithRSAEncryption
83:94:d4:00:4e:75:4f:c8:20:9f:57:95:6f:b7:d3:33:15:b1:
bf:64:55:b7:1c:80:3b:e1:09:1b:b6:a5:1d:d4:6e:c7:94:7e:
62:b4:4f:b1:0d:92:13:1a:80:d2:27:aa:ec:3a:96:04:2c:d7:
1a:88:a8:98:90:86:db:f3:5b:25:bc:b4:d9:b1:1f:3b:d4:d1:
20:e2:54:c9:09:00:d7:43:37:09:15:d3:81:2d:56:24:cb:4b:
f7:87:21:99:db:5a:cc:7a:74:a9:cd:8a:28:25:f5:c4:ee:8f:
ad:a0:d3:79:39:83:b3:e9:54:7d:88:c9:05:68:10:91:37:83:
dd:24:16:81:1b:b0:aa:d7:4d:10:53:f5:d3:64:0a:7d:aa:b6:
3c:16:fb:2b:d2:f0:55:9f:52:1a:e3:c7:c6:88:cf:38:1f:bd:
53:26:db:5e:b0:89:78:77:ed:1f:0a:d1:1c:71:84:b4:09:d4:
13:d3:50:17:ce:33:c7:75:0b:90:1c:a1:e5:75:79:c9:03:3d:
c9:d9:7d:ad:82:1d:93:4b:51:61:35:e4:25:2f:d6:b6:0d:71:
39:13:f0:ad:d6:b1:ea:e2:6c:60:ce:0a:b7:c4:13:ca:c1:9c:
d5:a6:02:f8:27:c0:bb:af:bc:62:b8:89:50:11:ad:a5:be:8d:
14:fc:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:55 2024 by rpki-client on console.sobornost.net