Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/mOhNyCDwclPRBTDo8fDmogwXGh8.roa
File: mOhNyCDwclPRBTDo8fDmogwXGh8.roa (raw, json)
Hash identifier: TUFdRQRyOdeHGZSVf7xQedPCHO7bFV1vJM+l0Rqh43A=
Subject key identifier: 98:E8:4D:C8:20:F0:72:53:D1:05:30:E8:F1:F0:E6:A2:0C:17:1A:1F
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 018573160694C4D701C3BF473B4ECEDF1225
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/mOhNyCDwclPRBTDo8fDmogwXGh8.roa
Signing time: Mon 02 Jan 2023 15:25:01 +0000
ROA not before: Mon 02 Jan 2023 15:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8881
IP address blocks: 193.163.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:06:94:c4:d7:01:c3:bf:47:3b:4e:ce:df:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Jan 2 15:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98e84dc820f07253d10530e8f1f0e6a20c171a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:f3:5b:c0:4d:45:2c:4e:41:c3:00:a4:b3:
29:84:39:51:dc:11:d9:91:52:f8:98:e1:a1:aa:b6:
f1:15:2a:c2:7b:04:50:91:6a:4b:48:7a:8f:3c:7c:
39:1a:ef:2f:99:c7:9b:ca:c7:16:ed:af:b4:64:a9:
7d:4f:d9:15:5a:40:fb:e7:14:69:f0:91:f0:77:08:
b4:7c:2b:63:33:2a:20:6a:26:3c:24:d5:7c:f7:70:
92:b0:bb:d3:5f:c2:45:e5:83:23:7b:5a:20:8d:d1:
15:2b:b5:b2:72:b6:7d:e4:87:90:f8:7d:19:7b:3b:
54:17:a8:dc:59:21:0f:b5:82:86:3e:e4:12:b7:8e:
5d:34:e3:98:9b:22:8a:08:00:f6:a8:b3:2a:8e:77:
c8:4d:e2:a8:4a:a4:81:70:4c:eb:42:84:1d:a3:91:
10:7b:36:a6:14:b0:9b:4f:a7:09:5d:12:81:46:f7:
fd:ac:a1:45:f4:cf:87:a5:5a:8d:e9:c0:c4:05:23:
b8:77:06:40:b2:72:77:31:04:6b:11:89:d9:be:9a:
a4:f3:f4:7b:1f:33:6b:9b:38:90:1d:49:51:29:b6:
55:8c:06:c6:e0:57:d8:b0:cd:4a:71:8f:b2:6f:a2:
ce:ae:8c:ac:5b:43:ce:65:22:f9:80:bf:f2:37:c9:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E8:4D:C8:20:F0:72:53:D1:05:30:E8:F1:F0:E6:A2:0C:17:1A:1F
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/mOhNyCDwclPRBTDo8fDmogwXGh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.13.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8a:03:24:04:86:4e:ba:52:ef:16:3b:c9:f5:0e:f9:99:c6:
73:6e:78:89:5b:fa:39:2a:e4:2f:51:0c:43:25:b4:ac:39:22:
66:2a:42:9e:cf:dd:74:1e:9a:25:98:69:ee:37:39:8f:de:4e:
ae:e3:60:43:40:cc:72:2d:b5:a1:b6:71:4a:db:32:fd:6d:d0:
9e:99:71:46:9a:82:4f:5d:80:aa:cf:6d:43:f9:4f:21:ee:04:
6b:a6:65:9d:50:d0:91:37:18:09:3b:49:cb:ad:16:65:21:ba:
a0:81:7d:c4:cb:dc:54:a5:cd:7b:ba:a2:cf:51:5d:57:5e:4d:
84:7d:b4:35:13:53:2d:96:88:0d:df:28:2d:9f:0a:81:a2:d8:
4b:a2:64:65:94:40:6b:60:71:13:5b:35:68:59:69:fb:d8:fa:
97:50:f7:4f:8d:c6:65:eb:25:01:36:69:6c:52:15:5f:c9:9f:
29:6f:92:64:f7:65:64:14:10:65:b0:ec:ed:96:01:30:d7:f2:
52:ce:2a:77:0f:6a:82:5f:f5:87:7c:cf:fb:80:8c:5d:2e:97:
a7:61:5a:91:45:28:37:5f:7d:31:86:28:35:dc:fc:57:41:6b:
2d:24:b9:23:22:40:ba:41:3e:16:b8:0e:e9:60:ae:5b:ca:19:
1e:d2:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:38 2024 by rpki-client on console.sobornost.net