Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/y1nbaLM15kUGGV53rjaBn_WN90s.roa
File: y1nbaLM15kUGGV53rjaBn_WN90s.roa (raw, json)
Hash identifier: LCM1jDpNUxgjk1LdEJ9+qYGYf2JTBjDM6Gkumx90GhM=
Subject key identifier: CB:59:DB:68:B3:35:E6:45:06:19:5E:77:AE:36:81:9F:F5:8D:F7:4B
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 01856E2F856C24E2265AAB753058C81067CE
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/y1nbaLM15kUGGV53rjaBn_WN90s.roa
Signing time: Sun 01 Jan 2023 16:34:46 +0000
ROA not before: Sun 01 Jan 2023 16:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13079
IP address blocks: 213.168.128.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:85:6c:24:e2:26:5a:ab:75:30:58:c8:10:67:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Jan 1 16:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb59db68b335e64506195e77ae36819ff58df74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:06:4a:40:cc:eb:3e:07:b9:43:58:e2:63:b0:
3b:3d:31:5e:0d:ed:3c:98:0a:de:e7:31:8a:42:f0:
71:ab:76:c0:4a:aa:5c:a8:e2:a4:c3:c5:53:e6:c0:
35:1b:8f:a8:23:26:56:25:94:79:78:2b:a9:59:17:
5b:fb:1f:56:19:cc:5d:f9:8c:8e:9c:15:dc:f2:04:
b9:6b:22:15:c3:73:b0:d5:f8:04:db:fd:40:ef:05:
44:19:4d:45:49:ca:50:27:d2:f0:e3:af:16:3e:fd:
85:46:68:75:a4:3c:58:aa:eb:70:a7:93:06:fd:a5:
94:02:07:5a:a7:42:4d:2f:4c:c4:76:e2:07:1d:96:
48:71:88:00:e0:1f:8c:8d:c2:15:ac:c2:87:5a:13:
34:07:4c:b0:91:d5:3b:01:3c:98:7f:df:98:6b:58:
b7:d6:06:3f:0c:57:9e:9b:e7:00:c7:d9:2f:16:48:
01:9c:b3:a7:1b:88:15:58:a3:a6:28:99:21:53:ec:
5f:db:d8:26:cd:ed:ef:9c:cd:42:ac:e5:c7:a4:24:
5e:d5:62:04:55:e4:c9:f1:3a:50:f5:5f:22:ea:7c:
20:cc:f0:67:0e:fe:c0:d7:6c:f0:38:bf:76:6c:04:
94:79:e0:98:48:57:27:3c:64:88:3f:a3:fd:7d:2f:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:DB:68:B3:35:E6:45:06:19:5E:77:AE:36:81:9F:F5:8D:F7:4B
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/y1nbaLM15kUGGV53rjaBn_WN90s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.168.128.0/19
Signature Algorithm: sha256WithRSAEncryption
65:fa:c7:76:83:e6:06:bb:94:08:61:66:c4:40:ca:3e:56:cb:
07:fb:20:65:26:d6:75:4c:a3:14:22:98:e1:f6:b7:37:e1:69:
07:2c:0e:b1:ca:e2:7d:a3:8c:d8:f6:ff:52:69:1c:ca:c4:cc:
43:81:d3:96:b6:ba:f7:d8:de:49:f7:08:f3:b9:9d:6f:7d:a8:
1e:cc:ca:49:44:dd:69:f3:f9:c6:53:57:32:1c:8b:7d:8b:be:
af:0d:ce:98:a2:83:03:6a:46:69:d1:a5:d0:f2:1f:52:30:2d:
aa:fc:55:78:a2:c6:ae:f0:7a:a4:47:9e:5a:72:cd:53:83:30:
2e:e8:17:86:4e:7d:2e:97:5e:4c:30:e5:79:8f:e0:67:bd:0e:
3f:e9:34:be:dd:5c:f9:59:35:c0:03:9f:37:6d:d5:07:51:8f:
bc:cc:3d:d0:79:36:0b:f0:a7:a9:ae:21:65:91:e9:b7:88:cc:
a0:44:7e:d1:a9:e7:60:a1:e9:60:97:cf:97:73:53:80:51:25:
a8:04:0e:77:95:2b:34:a2:d3:dc:80:9b:4c:33:53:6b:8a:02:
56:e7:b0:18:b5:e8:71:dd:1d:1e:df:3c:32:21:d9:4a:e8:67:
dd:d0:64:3d:a9:a0:a0:c2:7d:ea:bd:da:3d:d3:aa:50:08:bb:
6b:15:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:59 2023 by rpki-client on console.sobornost.net