Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/tNt2oGPmdaoS87tyVZ54jYpuWVw.roa
File: tNt2oGPmdaoS87tyVZ54jYpuWVw.roa (raw, json)
Hash identifier: NrQz1mENmH+D2aTYeaCJyTVLpzZCWMHM6O1Kw8A5L1U=
Subject key identifier: B4:DB:76:A0:63:E6:75:AA:12:F3:BB:72:55:9E:78:8D:8A:6E:59:5C
Certificate issuer: /CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Certificate serial: 01856EAFB68AF2EA09D91EF605E6E16F8C12
Authority key identifier: 86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/tNt2oGPmdaoS87tyVZ54jYpuWVw.roa
Signing time: Sun 01 Jan 2023 18:54:47 +0000
ROA not before: Sun 01 Jan 2023 18:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42061
IP address blocks: 195.8.212.0/23 maxlen: 23
2001:67c:1d0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:b6:8a:f2:ea:09:d9:1e:f6:05:e6:e1:6f:8c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864106540f30a9dcdf8ef9be72ffef8bd8a72e5c
Validity
Not Before: Jan 1 18:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4db76a063e675aa12f3bb72559e788d8a6e595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:4a:5a:54:1f:a9:6a:05:22:62:92:72:ec:
db:4d:43:cb:86:11:d4:e6:fb:b8:15:ce:ee:23:92:
64:ca:1b:c8:f6:b8:2b:23:a2:07:f2:e6:e7:8b:89:
59:70:db:af:60:62:ac:7f:ce:5b:11:56:5e:34:83:
3a:98:0f:ff:67:d2:16:99:84:14:95:5d:ce:7a:75:
da:fa:73:4f:9f:1d:47:bc:4a:d2:b3:0f:fd:df:37:
71:4a:be:92:25:f1:34:2e:63:7f:a5:3c:4d:83:d2:
ec:db:4d:ec:f1:46:38:e6:a6:6b:95:92:6b:a7:db:
ed:0b:36:b2:24:c0:91:77:7b:01:63:6b:e5:4a:c6:
6f:c2:b1:af:53:c4:53:5a:b3:e2:00:e0:cf:ff:2a:
ba:0e:ef:42:e5:b0:c7:a4:8f:f0:9b:49:93:39:2d:
81:88:a0:f8:33:53:0e:74:00:d3:0e:88:d0:c0:85:
eb:02:80:6e:a1:94:06:b1:df:ac:ef:3a:80:bb:bd:
05:a8:93:88:81:c1:9d:11:b2:5c:c0:57:2f:1e:5b:
82:10:15:aa:95:bd:8d:cc:d4:4d:e5:e0:bc:24:d6:
72:6d:31:10:46:25:b9:77:ac:36:10:1c:38:05:4c:
d8:f0:68:e3:24:7a:8e:b0:be:3a:1c:f5:57:2a:0e:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:76:A0:63:E6:75:AA:12:F3:BB:72:55:9E:78:8D:8A:6E:59:5C
X509v3 Authority Key Identifier:
keyid:86:41:06:54:0F:30:A9:DC:DF:8E:F9:BE:72:FF:EF:8B:D8:A7:2E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkEGVA8wqdzfjvm-cv_vi9inLlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/tNt2oGPmdaoS87tyVZ54jYpuWVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0be7f2-638d-4f45-b697-3b318e47276d/1/hkEGVA8wqdzfjvm-cv_vi9inLlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.212.0/23
IPv6:
2001:67c:1d0::/48
Signature Algorithm: sha256WithRSAEncryption
ae:45:35:85:88:07:bf:df:c6:13:db:c1:43:b0:bd:33:ec:9c:
2d:a0:9f:e7:53:2b:bb:21:1c:af:96:b0:d7:70:8e:ee:41:4d:
9f:73:38:c3:a1:8c:6b:c9:4f:38:df:ac:44:4b:39:24:cc:73:
51:9c:78:55:17:a8:f2:8e:25:f3:9c:42:98:cf:f2:af:a3:a2:
ba:95:99:4e:d1:c5:a3:3d:46:41:19:f5:7f:12:ea:2e:df:97:
1a:12:f6:06:5c:3b:b1:84:7a:65:9e:20:b8:69:b2:9b:c5:ce:
65:5f:1f:04:ab:de:30:c6:ac:f8:0a:83:6a:16:fe:e9:7d:16:
45:68:e4:d5:05:4c:3b:6a:60:0b:27:cf:09:d2:e8:2c:db:f0:
7d:0e:ca:74:11:4b:37:b5:18:b1:6e:9f:e4:99:e6:5a:be:03:
7e:48:b9:f9:48:2c:4d:94:fb:82:79:bc:4f:87:22:75:e6:d5:
e7:c7:8b:c9:c6:30:54:19:07:eb:a4:ae:47:cc:aa:9c:20:ae:
4a:94:7b:bb:77:da:72:0d:f5:60:00:02:82:a1:77:65:ad:14:
d3:f0:67:98:5d:13:b0:d5:33:99:61:8a:24:7c:88:fd:6e:4f:
37:f7:7b:ed:fd:6c:5d:f5:18:73:f7:53:8e:09:65:0d:c5:c7:
24:09:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:36 2024 by rpki-client on console.sobornost.net