Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/cTEUz8X8a7NVnjSPo0CjQ_GcdrE.roa
File: cTEUz8X8a7NVnjSPo0CjQ_GcdrE.roa (raw, json)
Hash identifier: V1yxcH8siU45lx01huyapTBCpYHSqrQ2/fKh9Vzrv0k=
Subject key identifier: 71:31:14:CF:C5:FC:6B:B3:55:9E:34:8F:A3:40:A3:43:F1:9C:76:B1
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01856BC11A06D8DEA2934BB6BD385F2594B3
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/cTEUz8X8a7NVnjSPo0CjQ_GcdrE.roa
Signing time: Sun 01 Jan 2023 05:14:55 +0000
ROA not before: Sun 01 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202364
IP address blocks: 185.119.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:1a:06:d8:de:a2:93:4b:b6:bd:38:5f:25:94:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Jan 1 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=713114cfc5fc6bb3559e348fa340a343f19c76b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:2a:1a:70:92:e7:12:65:94:ef:cf:fc:62:
33:ac:ff:73:dd:b1:de:25:f4:8f:ea:49:8b:92:fb:
c3:9a:02:ca:82:db:c3:ca:53:7e:ca:d9:ea:a5:1d:
22:1e:36:88:48:f4:e3:8e:15:bc:6d:1c:cc:4b:fe:
51:85:f6:dc:ad:f4:fb:94:94:88:27:f0:b6:a3:28:
66:50:ce:89:36:7d:4b:e8:51:41:15:65:ed:5f:54:
87:89:e9:85:64:d7:88:bd:a3:ac:da:86:da:34:99:
64:bb:ad:59:01:c5:e0:95:06:6f:92:bd:dd:75:83:
c0:72:ea:6f:d5:37:6a:8e:96:28:14:a8:e7:55:72:
f5:27:ac:c2:d5:61:97:04:66:f7:11:c6:5b:5f:cb:
95:27:8a:32:1b:e4:36:fe:45:6a:d4:63:ac:ac:45:
06:1d:1e:df:f1:f9:04:be:52:b0:5b:71:e0:4b:4e:
e3:0c:29:34:99:e4:81:36:11:cd:69:15:67:58:4a:
11:19:63:20:67:51:d7:f0:2a:ac:3b:3e:c4:6f:40:
a6:ce:61:68:a3:fb:3a:7e:7a:00:5d:2e:76:98:c9:
40:ec:74:c9:42:84:aa:00:57:4b:ba:fd:e2:14:7f:
be:68:77:c7:fe:a3:a6:9d:01:f9:c4:11:57:ba:63:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:14:CF:C5:FC:6B:B3:55:9E:34:8F:A3:40:A3:43:F1:9C:76:B1
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/cTEUz8X8a7NVnjSPo0CjQ_GcdrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ce:b1:b8:c2:69:e0:99:3a:3a:42:f0:ef:fd:1e:01:95:9e:
dd:5e:9c:6e:d6:50:c9:d2:47:e4:dc:d7:27:c6:55:e9:91:e5:
f3:54:80:98:7d:a5:ed:36:58:59:bd:b6:df:35:94:39:7f:e8:
5d:07:79:a4:f8:d6:6d:ef:0a:e2:fc:bf:85:9d:c1:2f:26:75:
b8:0d:16:f6:6d:70:43:4e:99:f1:ec:e2:0f:c9:c2:2d:9a:f1:
f0:c9:e0:c5:e8:4a:54:83:1d:1a:10:d3:99:51:fb:89:b0:e9:
31:ff:0f:43:cc:f5:af:59:69:b9:3d:37:07:11:a8:44:d6:ce:
74:3a:af:6a:22:ac:f9:7c:81:49:af:41:75:a3:cd:62:70:09:
23:62:45:76:d7:49:57:ea:9c:c9:27:30:64:c6:8e:5b:4b:92:
dd:27:42:b5:3c:3b:f2:44:31:84:29:89:b6:12:1c:6f:ec:af:
d0:97:82:88:61:fa:dd:f0:76:c1:c7:bd:bc:91:cd:65:a3:9d:
a6:ac:c0:4d:4c:45:d0:2e:aa:56:57:5b:91:d0:1f:e9:5f:b9:
2a:f9:06:85:06:f9:1f:c9:9c:7d:1c:fb:54:b7:7f:88:38:d3:
2c:75:2f:84:09:17:4d:4f:94:61:3b:e5:5f:06:77:a2:e9:52:
ad:63:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:01 2023 by rpki-client on console.sobornost.net