Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/1-P3pypB6_ZR3EQ1B2u6FHFJC_HE.roa
File: 1-P3pypB6_ZR3EQ1B2u6FHFJC_HE.roa (raw, json)
Hash identifier: d/w9wbXxz1T3SR/zp5JWZ4dqiHC5Krzf5mcbGoX02CQ=
Subject key identifier: F8:FD:E9:CA:90:7A:FD:94:77:11:0D:41:DA:EE:85:1C:52:42:FC:71
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F4E1B3B712B653C0A296F47B6DAC
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/1-P3pypB6_ZR3EQ1B2u6FHFJC_HE.roa
Signing time: Sun 01 Jan 2023 08:14:59 +0000
ROA not before: Sun 01 Jan 2023 08:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198774
IP address blocks: 128.127.145.0/24 maxlen: 24
128.127.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f4:e1:b3:b7:12:b6:53:c0:a2:96:f4:7b:6d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8fde9ca907afd9477110d41daee851c5242fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:c4:37:e0:f6:25:91:55:b7:50:f5:1a:85:
76:8b:e1:90:4e:82:5f:8e:1e:a3:5f:fd:4a:3e:6f:
2a:ff:ce:62:8a:75:a7:74:27:dc:82:d5:71:01:fe:
c3:71:8b:73:f1:ea:cc:5e:7a:e8:a7:05:ac:84:57:
03:89:0a:f0:14:b1:fd:9e:2f:f0:bc:55:7f:56:2d:
02:e4:a2:21:1e:f2:23:4d:a3:1a:17:7b:50:8a:10:
c3:57:1c:b3:69:52:b5:2a:45:9f:88:c6:22:e7:72:
27:21:01:6a:2b:15:25:7b:5b:57:01:49:2e:b0:45:
0c:75:d2:1f:8f:52:23:74:32:71:f9:71:79:bb:96:
eb:9f:6e:31:65:a0:ff:23:41:41:10:59:0c:a6:07:
7d:a9:e1:cd:1a:6d:81:9c:48:e0:db:43:a9:84:04:
10:a4:41:25:ca:c2:42:ec:ac:b3:03:09:82:73:85:
38:3d:d5:4f:20:1f:3d:76:a3:3f:07:66:c9:18:16:
8b:9b:a0:d5:80:02:d0:57:21:58:1b:d8:1b:5f:b9:
ac:a5:cc:38:c8:a5:fe:49:82:f5:81:88:8a:26:7b:
d5:63:93:59:c1:69:b8:a5:a6:4b:4d:50:76:7a:8f:
3e:ba:18:a3:ce:91:fc:56:a0:ec:8e:bf:bf:9d:03:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:E9:CA:90:7A:FD:94:77:11:0D:41:DA:EE:85:1C:52:42:FC:71
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/1-P3pypB6_ZR3EQ1B2u6FHFJC_HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.144.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:98:34:69:ab:71:2f:68:84:6f:c3:82:cd:0a:f0:4c:1f:c2:
13:7c:1c:7e:d9:ee:b9:49:84:90:f6:e8:b4:d5:ce:75:eb:7a:
72:8c:e6:b5:5f:b2:d1:3d:6c:75:ce:6d:e6:91:5a:86:fd:4b:
1e:ee:ca:3c:e7:55:c0:de:fc:87:c8:db:88:81:6d:bd:ca:51:
da:2c:a9:cd:8f:37:df:00:88:32:84:24:d7:7d:ba:15:ed:cc:
e0:94:86:9f:22:50:ac:37:52:f4:3d:ae:c3:19:f5:93:06:0f:
cd:0d:b8:00:f8:d2:8b:a2:f3:40:06:aa:ee:cb:51:a9:ef:ae:
bb:b3:bd:a4:16:e0:13:d3:32:31:96:5d:df:ff:f9:68:be:29:
98:5d:a4:13:06:05:d4:a8:2b:b7:08:19:2d:8a:e0:35:f7:ce:
ff:af:c5:8c:ae:55:c2:f9:be:4e:ad:0b:d9:88:a9:47:e8:92:
e3:b7:2d:6d:3b:af:dc:03:39:31:39:53:b5:46:7d:d1:16:0a:
d3:9d:4d:59:3e:0c:3a:45:c6:53:7d:14:fa:72:59:69:e3:b4:
43:4c:9a:71:36:e8:3f:df:d4:e6:fc:0c:06:cd:ce:00:a0:81:
bd:87:a1:c2:23:60:6e:a8:20:ad:27:f8:db:98:9b:fe:a6:ab:
64:36:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net