Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/8CACva95g77OB27F-LwKVJPNXRE.roa
File: 8CACva95g77OB27F-LwKVJPNXRE.roa (raw, json)
Hash identifier: VInmV887I4BhHV+Z91Y5dgpr1lZ+9DzR7mUd8QNB9LE=
Subject key identifier: F0:20:02:BD:AF:79:83:BE:CE:07:6E:C5:F8:BC:0A:54:93:CD:5D:11
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 01891C17F6EA696ED05E6BFA252428B73D27
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/8CACva95g77OB27F-LwKVJPNXRE.roa
Signing time: Mon 03 Jul 2023 14:11:19 +0000
ROA not before: Mon 03 Jul 2023 14:11:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207925
IP address blocks: 193.143.226.0/24 maxlen: 24
2a10:8700::/32 maxlen: 32
2a10:8703::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:17:f6:ea:69:6e:d0:5e:6b:fa:25:24:28:b7:3d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jul 3 14:11:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02002bdaf7983bece076ec5f8bc0a5493cd5d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:ef:3a:ce:5b:95:c5:21:4d:cb:25:27:c6:
04:f6:ac:e8:9f:ca:1d:72:c9:bf:39:91:6c:c5:fd:
9f:7e:a5:f6:8e:09:f8:57:f4:3c:de:2e:fe:e7:cc:
6c:06:66:ec:ad:7b:0e:e1:95:1a:ce:35:31:58:37:
9d:2b:95:60:11:bc:10:d0:47:c7:14:e5:e6:2d:82:
b1:da:8c:67:d2:b2:2f:4b:5c:01:18:fa:c9:7d:e6:
c1:85:de:b9:e6:41:0e:3b:03:75:d2:e1:88:66:e8:
9e:73:24:ad:bc:c6:21:50:71:71:2d:35:0d:7e:69:
46:e6:e4:e8:24:83:bb:e7:2f:f2:8b:68:32:40:03:
41:84:1e:4a:d8:5e:c5:77:36:29:77:94:50:43:bc:
79:9a:e2:5f:ac:54:da:00:aa:3a:2f:11:58:93:4b:
f1:54:86:24:1c:fd:62:75:6c:ec:66:ca:a3:35:26:
46:e1:09:0f:b1:d4:df:ee:d0:c4:bc:4a:ac:1e:a2:
39:2f:c1:ea:06:0a:98:e3:4c:fc:aa:34:d7:66:42:
23:fd:7b:b4:39:c3:da:2e:46:8b:02:28:a3:7a:44:
9a:c3:16:43:b8:7c:cb:a1:53:e8:ab:55:60:18:e8:
d9:cc:6c:2f:62:2b:c8:d4:47:77:4e:4a:f1:3e:47:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:02:BD:AF:79:83:BE:CE:07:6E:C5:F8:BC:0A:54:93:CD:5D:11
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/8CACva95g77OB27F-LwKVJPNXRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.226.0/24
IPv6:
2a10:8700::/32
2a10:8703::/32
Signature Algorithm: sha256WithRSAEncryption
60:e6:be:23:23:31:f3:59:b3:e7:d4:79:18:a2:74:57:79:5a:
70:14:86:52:3a:7f:47:5b:ed:a7:95:bf:bd:d5:14:36:f3:61:
12:bd:75:7a:64:d9:98:b9:c9:74:5c:5d:99:7c:e2:a9:2b:27:
5a:27:c0:14:3a:c0:14:6b:22:f5:6b:af:6e:3b:8b:fd:68:bd:
57:b5:44:ac:d0:90:70:75:0e:db:8f:ba:c8:52:b5:f3:df:3a:
f3:30:4d:bf:06:19:78:81:2b:ce:b1:cc:20:ed:2e:d9:8a:ed:
4a:4e:86:c3:4c:8d:ef:83:f8:2a:05:ae:80:b0:dd:0c:3e:50:
79:ad:bd:6c:ec:b8:c9:6c:17:b5:9a:97:a6:8f:cb:fa:8d:a6:
ab:93:8b:48:6a:d2:60:7d:6d:5b:ee:5a:44:37:7c:ed:99:01:
e9:16:5a:71:d4:ca:6c:34:a3:19:f4:c3:c9:4c:32:f9:4f:63:
bc:86:b5:aa:23:c0:bf:8f:ee:74:10:1a:5f:5d:40:96:f4:2d:
1e:b4:cd:4c:aa:4f:ed:01:6b:99:69:30:5f:a2:d5:58:4b:7c:
7d:ba:63:6a:05:93:89:87:91:e8:ee:91:4b:d0:df:dd:f9:44:
42:ec:c2:f3:a7:57:5d:d9:c5:e1:80:e3:bf:e0:30:2b:fa:4a:
01:30:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:21 2024 by rpki-client on console.sobornost.net