Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/6fw_pDoR_6x4sGHxwROcb-FtYKE.roa
File: 6fw_pDoR_6x4sGHxwROcb-FtYKE.roa (raw, json)
Hash identifier: 4VLF3TVI/U9pBS4bNRetTZR0hx7nqQ2KvXhdlirMJs0=
Subject key identifier: E9:FC:3F:A4:3A:11:FF:AC:78:B0:61:F1:C1:13:9C:6F:E1:6D:60:A1
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 01856DCADD43B8B78C52551936E60A3BC7FD
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/6fw_pDoR_6x4sGHxwROcb-FtYKE.roa
Signing time: Sun 01 Jan 2023 14:44:49 +0000
ROA not before: Sun 01 Jan 2023 14:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8405
IP address blocks: 193.188.154.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:dd:43:b8:b7:8c:52:55:19:36:e6:0a:3b:c7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Jan 1 14:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9fc3fa43a11ffac78b061f1c1139c6fe16d60a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9e:c4:aa:d4:9f:d9:2c:50:12:c5:6a:fd:25:
8c:2e:9a:84:91:33:2b:6b:b6:2d:64:a3:25:5e:54:
c3:88:1d:38:ed:bf:ba:3a:4f:87:a1:de:4c:42:55:
2a:ee:71:3e:3b:be:8f:21:64:c6:70:13:f9:11:04:
c6:25:87:9b:3a:b2:c8:e0:bf:ff:e8:c1:38:39:88:
b2:54:f0:67:6c:75:33:76:cb:57:e8:7c:40:24:01:
8d:6c:b6:64:b3:5f:7b:b8:9d:f0:89:4a:64:00:50:
d2:09:53:e1:43:fa:3d:e0:8b:94:ab:b7:e3:20:9e:
d5:0e:05:e2:b5:74:24:d4:58:ca:49:c5:b6:84:4e:
c7:fc:56:39:62:ff:1e:37:66:57:b5:78:a7:da:76:
cf:e0:15:dc:5c:42:41:2d:ef:d2:a4:db:7a:e8:79:
68:a2:b3:f8:70:87:99:9b:34:77:e2:2d:23:5d:f4:
cb:8c:f4:5d:88:f2:a0:68:b9:d0:4b:5d:27:2a:c6:
3f:fe:74:3d:d7:f9:87:34:da:a6:07:fa:38:13:fb:
77:24:84:85:be:1f:8e:34:64:1f:69:ce:99:a6:04:
e9:7a:3d:9a:ba:ab:d0:f7:c9:cc:76:75:24:ae:13:
f2:a5:92:35:14:a6:b2:b7:eb:f7:20:e2:bc:59:0e:
de:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FC:3F:A4:3A:11:FF:AC:78:B0:61:F1:C1:13:9C:6F:E1:6D:60:A1
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/6fw_pDoR_6x4sGHxwROcb-FtYKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.154.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c0:c6:7e:28:cb:d4:2e:d1:d2:8e:dc:81:9b:05:03:bc:ee:
ed:e1:8e:cc:f8:e6:3a:b7:87:80:e4:29:e3:76:ee:1d:bd:54:
f5:00:92:62:79:1b:02:88:23:ed:ad:81:2c:4d:80:f0:a6:a4:
58:65:6f:d4:1b:55:96:85:88:2e:07:7c:fd:70:1e:ef:f3:0a:
f7:76:9c:ef:00:65:8a:32:86:6c:7e:95:4f:eb:0f:90:19:94:
89:63:ab:53:a2:e2:ca:3e:4a:c0:cf:8e:e4:e3:f0:3e:56:08:
06:d1:19:6d:91:ae:ab:00:83:36:41:f7:c4:74:57:82:d8:6b:
64:7b:94:c2:51:0a:15:f5:03:be:4a:b5:d0:72:91:db:4e:69:
ce:fa:05:da:f4:4c:55:07:94:43:73:1f:7d:8d:65:c2:ab:24:
f8:3d:bb:e0:de:6f:93:41:f0:1e:60:19:90:43:0c:34:7a:11:
eb:bb:ff:01:73:5b:c4:e1:a6:62:3c:b3:c9:b4:7e:3a:3c:e0:
4c:fa:42:46:6b:03:78:cc:05:5a:0a:ef:7c:d0:c9:0a:b6:94:
11:e3:a7:ba:e9:4d:b3:e2:fb:fa:31:e9:da:d5:5e:c3:bc:24:
2b:81:39:80:15:1d:79:35:c5:af:7b:89:d0:bd:12:88:bf:ea:
ea:22:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:30 2024 by rpki-client on console.sobornost.net