Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/SvRcXQS2RHiUbR2vWnETIJahMQM.roa
File: SvRcXQS2RHiUbR2vWnETIJahMQM.roa (raw, json)
Hash identifier: X2WEuEtoXa4tNmauwWYRnCKcINOts0oZ83djgrBI4J4=
Subject key identifier: 4A:F4:5C:5D:04:B6:44:78:94:6D:1D:AF:5A:71:13:20:96:A1:31:03
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 0185708CE89AA1602EA5F31F0F433232273F
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/SvRcXQS2RHiUbR2vWnETIJahMQM.roa
Signing time: Mon 02 Jan 2023 03:36:00 +0000
ROA not before: Mon 02 Jan 2023 03:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1213
IP address blocks: 160.6.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e8:9a:a1:60:2e:a5:f3:1f:0f:43:32:32:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Jan 2 03:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4af45c5d04b64478946d1daf5a71132096a13103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e2:74:41:de:01:c4:95:8d:a9:8b:e7:ed:8a:
5a:fb:a1:b4:3d:32:a8:1c:2f:8f:55:47:4a:26:82:
9e:02:1f:dc:3a:77:50:77:95:8b:35:07:01:73:88:
e4:0e:ea:c6:39:08:ab:6f:83:a7:9e:7b:0c:33:8c:
03:91:b4:0e:8f:6f:42:5b:fe:9b:67:de:81:43:0d:
3c:35:11:40:ed:f2:54:d3:9e:e3:5c:0b:3a:71:79:
fb:90:fb:d1:ba:39:5f:b2:41:78:4f:b5:91:67:5e:
2e:7b:9f:e9:fb:89:66:73:a9:34:c6:ed:0f:a9:23:
d0:7a:92:98:4f:a9:85:fa:88:69:65:f4:fb:bd:66:
d0:4d:cd:d8:a4:88:f6:aa:aa:77:53:46:4e:a8:b2:
c3:27:58:e4:ea:15:b2:cd:18:37:22:ce:b1:bc:2a:
1c:e2:df:28:a6:1f:f1:c3:96:8b:c4:52:dc:e7:f0:
8c:cd:5c:6d:72:9f:cb:39:90:99:3c:80:9c:59:6e:
67:ff:b8:db:dc:37:7c:57:84:a6:4c:25:5f:46:34:
2d:55:60:41:7f:f0:c1:51:1b:40:d2:92:be:57:96:
b8:e0:74:37:ce:cf:68:a1:6a:d9:2b:51:5a:b1:e1:
95:b0:c2:d4:61:55:31:8e:ec:eb:e0:89:9d:fb:b4:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F4:5C:5D:04:B6:44:78:94:6D:1D:AF:5A:71:13:20:96:A1:31:03
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/SvRcXQS2RHiUbR2vWnETIJahMQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.6.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:79:5f:e8:c0:27:21:f0:c2:5b:34:e2:98:ec:13:d9:15:77:
9c:1e:79:91:b2:27:b4:4c:ab:80:aa:82:e4:c8:9e:7a:01:be:
f7:42:92:4c:31:32:ff:f0:70:c4:a9:5e:ee:2b:c3:d0:bc:15:
0b:99:2c:e2:51:16:4a:c5:e5:5b:ff:5f:9c:0c:74:f5:48:9c:
98:99:7e:72:8d:b5:ac:cc:bf:b7:38:66:ba:a9:e7:ed:ab:54:
49:97:0c:6d:46:f6:c0:25:81:2b:f2:fb:d0:73:86:b1:4d:f5:
63:4d:8b:58:87:7c:cd:05:6f:a5:65:35:58:93:9c:c3:46:05:
17:3e:c0:a6:c3:d4:a8:d4:57:5b:f0:0b:d2:03:95:9b:3d:21:
6c:83:3b:27:f9:a4:a8:3e:0b:8c:49:94:6d:1a:90:6f:74:ee:
b8:89:42:68:22:33:71:30:97:b5:2c:2b:4d:f0:a1:65:8e:0a:
00:45:56:5c:14:cf:ae:d1:a4:8b:42:d4:6f:32:98:ab:26:08:
33:78:e2:cf:84:29:2d:e7:5d:6c:55:47:fb:09:2d:4a:1b:79:
aa:e8:c6:01:c5:4e:b8:5e:ce:96:80:34:16:7a:0c:04:47:8d:
d0:88:76:69:71:33:78:32:be:47:28:a3:72:d9:db:76:48:04:
45:9b:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:45 2024 by rpki-client on console.sobornost.net