Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/eVieYVripgPVzA5Rbg6ylCeja1I.roa
File: eVieYVripgPVzA5Rbg6ylCeja1I.roa (raw, json)
Hash identifier: CWMlItV33MoEHgnFHVrKXWxf4t7DdKcXOXLUMSEhwXg=
Subject key identifier: 79:58:9E:61:5A:E2:A6:03:D5:CC:0E:51:6E:0E:B2:94:27:A3:6B:52
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B811FB09E1DD601AAC5419094AD3A48
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/eVieYVripgPVzA5Rbg6ylCeja1I.roa
Signing time: Sun 01 Jan 2023 04:05:02 +0000
ROA not before: Sun 01 Jan 2023 04:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200422
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1f:b0:9e:1d:d6:01:aa:c5:41:90:94:ad:3a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79589e615ae2a603d5cc0e516e0eb29427a36b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:b7:a7:1b:2f:f0:9e:bd:b3:7e:e5:03:b5:
19:a4:9e:c5:4d:e6:f9:36:79:ee:e9:54:c9:e6:db:
d8:5d:8f:87:bd:3d:40:b3:20:58:65:a6:5a:59:21:
b4:c1:92:5a:03:7e:c2:dd:6c:4c:9a:ba:81:e3:a3:
5d:4f:05:f5:08:81:99:7e:d8:f9:b3:ef:b0:de:90:
6d:9f:05:a5:51:43:60:1c:de:80:3d:a2:de:21:7e:
60:ea:4a:fa:ce:b9:bb:b0:82:f3:a4:fe:49:4a:aa:
31:4b:07:75:fd:f9:fa:4f:0f:a8:6f:b8:02:8d:cd:
d7:95:cf:d7:60:51:c3:68:c1:8c:ea:05:23:73:1a:
e0:c8:98:6f:c4:35:e9:1d:49:de:18:3f:57:83:3d:
ca:2d:0c:14:92:f2:12:f1:65:a7:c8:da:97:29:ab:
fb:30:06:5b:f5:dd:d5:13:51:03:d8:8e:05:18:57:
33:fd:20:50:86:bf:60:dd:39:38:b9:66:eb:b5:78:
d8:20:b3:cc:90:b0:fc:6b:3c:13:9f:de:39:91:ba:
7b:1a:2e:93:02:e4:e4:b3:5b:d2:d2:13:19:54:5c:
85:cf:0b:b2:27:30:1b:ae:42:39:47:cf:35:89:87:
6c:89:bc:b2:c3:a1:d2:46:cd:33:44:a0:a9:6f:15:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:9E:61:5A:E2:A6:03:D5:CC:0E:51:6E:0E:B2:94:27:A3:6B:52
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/eVieYVripgPVzA5Rbg6ylCeja1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
78:19:b4:49:12:b5:67:f3:0f:de:c0:7c:13:61:c8:20:16:36:
7e:68:fc:ea:6d:10:1f:86:cc:83:87:d7:46:0a:4d:b3:f5:14:
80:fe:96:90:39:dd:8f:3d:0c:9f:9b:c0:ae:23:5e:b2:89:2a:
db:77:08:0a:9e:ad:ee:e6:f1:10:ba:07:2d:5d:b5:8f:fa:68:
7d:fb:35:5a:85:bd:76:4a:92:3b:04:88:ce:bc:88:66:87:ad:
62:c9:73:f2:d8:0a:31:fa:3b:49:16:22:cf:e5:62:03:cd:f3:
f4:b2:c1:61:aa:2f:7c:b5:9b:90:11:3b:d8:09:f8:e5:52:cf:
92:11:fa:a6:a7:b0:54:4e:55:4e:5b:ac:a6:c3:79:22:c8:d1:
ff:6e:43:6b:47:28:73:a1:57:8d:28:88:b3:c1:b6:4b:f5:34:
1c:09:a9:88:95:80:85:09:5f:af:a6:44:90:e3:30:a9:d3:15:
e5:49:a5:86:92:7f:a2:16:b1:10:ee:94:07:09:22:ed:0d:9d:
6b:23:e7:87:d0:67:42:80:e9:3a:6f:f3:f3:a2:2c:87:2c:51:
b0:98:66:b8:3c:c0:37:cf:e5:8d:c6:63:b7:11:e2:1a:32:eb:
54:8e:71:de:2c:bf:ec:95:f7:76:7a:1c:89:2a:7d:18:c8:fc:
31:f8:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:23 2024 by rpki-client on console.sobornost.net