Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gBs7esdpi5CfTY0Seu5xjtn2W6U.roa
File: gBs7esdpi5CfTY0Seu5xjtn2W6U.roa (raw, json)
Hash identifier: Cn8MxfE4cFfuBTi+fjoxTqYvtREVaGbkaOGEFMxITc0=
Subject key identifier: 80:1B:3B:7A:C7:69:8B:90:9F:4D:8D:12:7A:EE:71:8E:D9:F6:5B:A5
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65FA0B74E49B62C09EAB7ADCAF80B3
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gBs7esdpi5CfTY0Seu5xjtn2W6U.roa
Signing time: Sun 01 Jan 2023 08:15:00 +0000
ROA not before: Sun 01 Jan 2023 08:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212414
IP address blocks: 93.179.64.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:fa:0b:74:e4:9b:62:c0:9e:ab:7a:dc:af:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=801b3b7ac7698b909f4d8d127aee718ed9f65ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:56:5b:9b:64:90:53:e6:27:ba:b1:23:ff:
5c:af:f6:ab:0f:8b:60:92:6a:6c:cd:fa:2f:0e:0d:
56:af:08:ce:7a:cb:ce:6e:da:bf:65:ed:21:bc:05:
81:ef:e0:58:40:cf:14:5e:80:21:de:b2:1d:86:a2:
79:aa:e9:6d:4e:7e:f9:2e:6d:60:b4:34:ea:33:b3:
bc:d3:48:1d:22:20:38:ef:2f:b1:c0:63:07:e6:36:
a2:d0:c5:15:f1:22:7f:76:c3:04:e9:ab:c3:ac:83:
f8:57:94:91:a6:0d:da:af:4a:e3:93:51:af:dc:a4:
2b:18:ff:19:9e:d8:79:36:ed:08:79:16:f3:39:30:
15:33:62:3f:b5:2f:06:6f:a4:98:3d:07:fb:0b:8c:
c8:8d:72:7f:5e:7c:eb:9e:73:59:9a:6b:39:02:f6:
e1:12:ff:ab:46:25:d4:05:4c:4b:06:a6:09:39:eb:
26:b9:cb:37:11:d8:a7:8f:67:52:cc:f3:fb:6c:1e:
3f:c0:8a:ca:1a:5c:45:08:7c:c6:01:1b:a9:19:f4:
9c:0a:6c:13:5c:5b:1f:28:5b:b1:4d:8f:cb:dd:08:
13:e9:5a:ea:cc:d5:bd:e7:80:96:cb:6f:aa:d3:43:
43:42:f1:fd:65:c8:f2:e9:b5:c6:ba:e7:42:cc:28:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1B:3B:7A:C7:69:8B:90:9F:4D:8D:12:7A:EE:71:8E:D9:F6:5B:A5
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gBs7esdpi5CfTY0Seu5xjtn2W6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.64.0/23
Signature Algorithm: sha256WithRSAEncryption
05:0a:9e:5f:28:60:94:32:38:69:39:a3:e2:99:50:dd:c8:4e:
6b:ce:83:82:50:2b:f1:eb:de:79:ee:d4:a3:70:b9:ee:47:8e:
36:1d:1c:3e:b1:48:7b:9d:e0:76:4c:87:64:38:99:c4:81:f2:
75:25:20:67:ba:44:46:64:09:7c:e1:25:e5:f2:af:0d:b4:0d:
85:3e:5d:4f:d5:56:7d:1d:c9:01:47:a6:a0:41:49:cf:9e:14:
b4:1d:f5:52:60:e4:c4:40:ab:e1:a9:c2:cd:be:85:8b:fa:38:
b9:64:d8:30:e9:5b:61:9c:91:50:48:4b:3c:7a:8f:c2:bf:a6:
e6:40:f7:1f:d3:cd:d2:af:e9:b8:26:74:79:cb:2c:01:0e:97:
cc:ed:00:16:9c:de:5e:4e:89:88:1d:5f:05:e3:65:0f:e1:e6:
fb:f8:cb:30:ab:3c:33:96:e1:71:a5:84:06:e2:50:97:e9:c2:
f8:63:15:74:2f:94:16:c6:7f:f4:66:50:20:23:f1:eb:9f:0c:
88:2c:18:5c:da:8c:1b:d9:5c:35:dc:15:1d:0f:56:34:8c:4f:
45:0a:0b:64:4a:4a:b6:62:3d:5a:7e:1f:71:f2:44:0d:51:65:
fd:29:f8:b7:a2:72:c8:ad:f3:b8:14:c1:b4:da:1c:9d:aa:af:
94:90:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net