Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_JjN9z_eHtKi9K13GXzdjpss-OU.roa
File: _JjN9z_eHtKi9K13GXzdjpss-OU.roa (raw, json)
Hash identifier: luhqcM39wbAqHPzdBIRBQ7jgMJSBiZdBIF4p+776wV0=
Subject key identifier: FC:98:CD:F7:3F:DE:1E:D2:A2:F4:AD:77:19:7C:DD:8E:9B:2C:F8:E5
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 018B3D0CE3B5A58C59CFB02DA592A309233E
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_JjN9z_eHtKi9K13GXzdjpss-OU.roa
Signing time: Tue 17 Oct 2023 09:52:16 +0000
ROA not before: Tue 17 Oct 2023 09:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210931
IP address blocks: 93.179.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:0c:e3:b5:a5:8c:59:cf:b0:2d:a5:92:a3:09:23:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Oct 17 09:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc98cdf73fde1ed2a2f4ad77197cdd8e9b2cf8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:e1:d1:b3:09:19:71:24:56:d0:05:82:36:
fe:17:5a:19:f9:e4:68:04:db:33:1c:ab:4c:f8:09:
ac:4d:48:52:1b:e9:67:b2:52:2c:bf:3e:49:03:18:
03:d4:c9:50:ce:de:89:47:2c:67:69:49:98:0b:e9:
b0:a2:7a:8d:6f:5f:4c:39:20:aa:57:63:c7:79:d6:
da:5b:53:5b:8f:7c:ff:01:d8:89:f5:f1:5e:9a:f0:
6d:a1:c3:45:e7:ac:f0:33:6c:29:85:0a:70:53:32:
55:84:fb:4d:7f:50:71:b8:46:6d:9b:4d:54:c3:49:
4b:dc:70:a2:ec:8a:1a:46:03:9d:8f:68:25:52:d3:
5b:10:33:68:f2:4e:c7:98:9a:43:c3:59:de:fd:e7:
a4:2a:b2:15:7b:59:e2:98:f2:d0:b5:5c:fd:d5:5f:
3c:9f:79:10:9a:df:88:43:ef:42:a7:1a:87:12:59:
71:d4:7f:2d:cf:d8:3b:21:1a:82:60:c7:59:29:2a:
30:af:7c:8d:5b:0f:e8:db:d0:b1:4e:7a:57:8f:bf:
e7:51:84:0a:78:4a:72:cc:99:3d:8d:bc:84:7b:c1:
30:e8:fb:80:21:3b:27:58:13:50:be:e7:5e:28:c5:
b3:d4:dc:b2:08:9d:ac:82:81:32:da:d4:21:8e:6b:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:CD:F7:3F:DE:1E:D2:A2:F4:AD:77:19:7C:DD:8E:9B:2C:F8:E5
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/_JjN9z_eHtKi9K13GXzdjpss-OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:96:6d:83:4b:7f:6c:43:7c:25:f0:ec:89:f3:0e:63:25:f1:
9b:26:3c:a1:69:b4:b8:35:f7:42:e7:a4:70:de:9d:c1:7d:55:
fd:49:de:2d:82:d4:6e:f6:26:19:11:29:d4:d2:9e:7c:00:86:
b5:f4:b9:94:c2:7a:53:30:1e:37:67:f0:fb:73:cf:35:09:ae:
d5:cb:a0:be:7e:bc:a4:39:dd:71:ae:74:51:2c:76:26:af:58:
be:43:73:56:4d:be:44:2a:f9:c1:07:60:70:3e:a3:ff:6d:b9:
8a:d0:87:28:47:88:65:59:c8:fa:fd:38:2d:61:e0:c8:f4:37:
15:44:27:41:d8:d1:ab:e3:9e:43:f1:54:98:02:46:f8:1f:9d:
23:cf:ae:74:d2:d2:59:b0:cf:47:1b:3c:5c:57:af:5d:49:f4:
07:67:05:48:01:f0:79:1f:8b:28:88:62:17:6f:dc:fb:28:80:
3d:66:1f:6d:88:e9:c0:66:fc:6b:d5:6d:92:84:bb:8b:97:3f:
ab:40:70:a8:75:cc:7e:4e:63:f8:15:72:d7:07:3f:b8:8c:35:
8e:c4:50:dc:71:11:1a:2d:de:6a:b2:e8:58:09:41:60:ea:d5:
99:cf:50:0f:3d:8e:ac:fb:ae:4f:64:f8:af:a5:b9:27:c5:02:
f6:b9:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net