Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/82vRctHbs9uAqRXwriCH_DBxnio.roa
File: 82vRctHbs9uAqRXwriCH_DBxnio.roa (raw, json)
Hash identifier: DIUlCzJPZLgzwvrJnoRNULgNQJhtu1svlbWFZSzd71I=
Subject key identifier: F3:6B:D1:72:D1:DB:B3:DB:80:A9:15:F0:AE:20:87:FC:30:71:9E:2A
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 018908F4F3D39F5F43FDDDA547DE411C5130
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/82vRctHbs9uAqRXwriCH_DBxnio.roa
Signing time: Thu 29 Jun 2023 21:00:18 +0000
ROA not before: Thu 29 Jun 2023 21:00:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62239
IP address blocks: 193.200.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:f4:f3:d3:9f:5f:43:fd:dd:a5:47:de:41:1c:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Jun 29 21:00:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f36bd172d1dbb3db80a915f0ae2087fc30719e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:76:d4:01:7f:df:c4:11:2e:9e:ee:b7:14:
00:f4:a0:e1:22:d8:9d:c1:eb:d7:74:02:25:7b:55:
38:89:27:3c:28:05:e2:d2:e2:ee:d4:d7:3f:95:a5:
90:be:ff:8c:45:8a:60:4e:13:03:0e:7e:e9:8b:71:
8b:a0:f8:ca:18:68:b5:d1:3a:c2:a1:ac:3c:26:8b:
15:4c:5f:7d:3d:23:86:7d:4c:f7:2c:98:9a:ec:fa:
8b:f8:c6:b5:bd:e0:cb:45:46:fa:2b:d0:08:c2:21:
05:41:5c:d4:db:b8:e5:86:38:e5:58:84:12:c0:bc:
fd:7a:48:de:50:81:f2:59:42:d9:c1:b6:63:f0:d7:
94:34:53:c2:bf:4d:14:0e:46:be:b5:19:d5:f2:6a:
e9:1d:c8:ab:01:1e:16:58:2d:50:b2:3e:cb:7b:67:
79:56:0e:a1:c5:e9:f9:c7:8f:d0:01:82:19:bc:e0:
9f:62:88:f7:b5:a6:f8:6b:cc:08:19:ca:04:79:c6:
7d:49:d9:5b:03:34:42:ab:5c:c9:62:31:cc:c2:94:
a6:06:78:8c:8f:2b:78:2c:05:c8:c1:37:1b:ce:e8:
a2:01:88:9c:26:74:50:a6:5b:24:d6:f9:c8:96:d2:
7c:f3:e7:a4:b5:8f:a6:54:62:b8:8c:59:8e:d2:dd:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6B:D1:72:D1:DB:B3:DB:80:A9:15:F0:AE:20:87:FC:30:71:9E:2A
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/82vRctHbs9uAqRXwriCH_DBxnio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.6.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5b:95:07:4b:0f:da:ef:f2:06:79:42:f2:e4:72:c9:fd:f6:
79:1b:95:6c:c2:c1:42:8f:d7:19:7f:89:6a:75:4c:f7:a4:98:
61:24:5e:1a:3b:ce:b3:1e:c2:d8:06:92:0e:a2:cd:ac:c2:f6:
cd:1d:4c:f9:09:39:c8:2c:cd:df:4d:93:f9:fa:88:6d:b3:62:
5a:43:72:69:12:70:dd:72:e3:f6:d3:fc:c3:a1:00:2a:a1:25:
00:a2:39:eb:77:0d:a0:58:a3:a2:50:99:18:25:a9:88:a7:89:
04:a2:a1:3b:a1:01:aa:64:43:62:8d:1d:3f:24:0c:4c:05:4d:
30:a2:95:49:33:01:e2:07:5a:35:01:21:ec:24:10:13:a5:6b:
c5:c7:06:24:3f:53:ee:60:39:85:2a:9e:4f:55:dd:44:04:8f:
c2:23:63:f0:13:7c:7d:b1:d2:fa:4e:fa:33:8c:e2:f8:29:6c:
31:d3:3d:2d:61:c7:e2:af:94:c6:56:9b:3f:30:3c:a5:05:ae:
87:67:48:d1:7b:48:dc:c1:cf:bf:c8:6b:0a:85:9d:52:be:f0:
bb:15:ed:95:29:dd:dd:35:ac:33:ff:b3:d2:4a:c9:68:95:6b:
f0:10:95:ed:6b:c6:b7:61:d0:40:93:0d:e7:5c:8a:60:ea:f5:
42:2d:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:17 2023 by rpki-client on console.sobornost.net