Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/CsPLBI13_hdHnAwEsp9zdS_UNUk.roa
File: CsPLBI13_hdHnAwEsp9zdS_UNUk.roa (raw, json)
Hash identifier: kHyIgfaJ7sU+cQ8mgUeOyfFdjnFGupKsB+tGKxL2Llc=
Subject key identifier: 0A:C3:CB:04:8D:77:FE:17:47:9C:0C:04:B2:9F:73:75:2F:D4:35:49
Certificate issuer: /CN=a477c6fe4b7bac1b623dcdc72bb6c62f00261f1e
Certificate serial: 01856CAF47327B577E84C5B51BEF44815F74
Authority key identifier: A4:77:C6:FE:4B:7B:AC:1B:62:3D:CD:C7:2B:B6:C6:2F:00:26:1F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHfG_kt7rBtiPc3HK7bGLwAmHx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/CsPLBI13_hdHnAwEsp9zdS_UNUk.roa
Signing time: Sun 01 Jan 2023 09:35:04 +0000
ROA not before: Sun 01 Jan 2023 09:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201557
IP address blocks: 185.25.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:47:32:7b:57:7e:84:c5:b5:1b:ef:44:81:5f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a477c6fe4b7bac1b623dcdc72bb6c62f00261f1e
Validity
Not Before: Jan 1 09:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac3cb048d77fe17479c0c04b29f73752fd43549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:69:2f:9f:37:76:48:fa:0d:a7:dd:ad:d0:
60:85:02:09:b0:50:a7:4a:dd:08:90:6d:28:ec:5b:
65:18:96:bf:03:7b:72:1f:4d:7b:e7:dc:13:aa:37:
fa:99:86:b9:cf:7f:3c:f0:ae:8e:a1:84:dc:9b:ee:
8d:a7:35:06:6a:21:54:05:07:04:38:71:44:45:62:
4a:e2:d4:47:f8:8c:ad:5b:5a:11:cb:c8:af:c6:73:
4a:5e:4d:bf:e2:72:0a:f8:95:6f:8b:bd:2d:8e:3b:
a7:c9:86:9c:0a:f0:c3:c5:18:28:e0:6c:f4:c5:af:
ef:fb:12:4c:44:29:ee:10:e7:a4:c1:c0:50:76:0a:
a2:eb:2a:e9:a8:f3:fd:fc:19:4b:7a:32:ed:55:d9:
33:15:5a:ba:8c:bb:6e:c4:89:4c:82:5e:18:3b:8a:
51:26:98:54:10:5b:24:4b:d1:fa:90:25:92:32:3a:
be:04:a0:26:c5:f6:54:50:2b:c7:32:ba:c6:35:87:
e3:7e:12:7e:07:c8:31:a5:5c:84:80:d0:8a:54:14:
8b:31:2c:b4:d5:9e:ba:3c:d5:fe:5c:9e:55:92:c3:
9f:8b:61:da:03:4f:44:15:1b:66:8f:1b:fb:99:ff:
7d:a2:25:ef:24:99:f6:be:cc:b0:c4:48:9a:e7:6f:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C3:CB:04:8D:77:FE:17:47:9C:0C:04:B2:9F:73:75:2F:D4:35:49
X509v3 Authority Key Identifier:
keyid:A4:77:C6:FE:4B:7B:AC:1B:62:3D:CD:C7:2B:B6:C6:2F:00:26:1F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHfG_kt7rBtiPc3HK7bGLwAmHx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/CsPLBI13_hdHnAwEsp9zdS_UNUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/559c88-92bc-4772-84f3-69f13af5432d/1/pHfG_kt7rBtiPc3HK7bGLwAmHx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.200.0/22
Signature Algorithm: sha256WithRSAEncryption
71:a4:49:c8:91:a8:e1:ed:69:56:0a:3a:31:a4:8f:92:21:8e:
0d:b2:74:cd:11:84:27:f5:1b:e1:83:bd:42:f0:f0:9b:9e:7b:
8b:f5:cf:61:1d:23:8d:07:54:f0:09:d9:95:8d:37:ba:9f:f1:
cc:ef:78:55:18:b2:64:70:46:48:37:b9:58:5c:be:ed:34:96:
69:1b:f0:9e:08:bc:6d:f9:6f:14:9e:2f:f0:60:94:85:c8:f3:
dc:9c:5b:ee:f4:c8:90:26:9f:b4:46:63:81:4b:1b:cf:5b:1e:
b3:ed:77:a1:77:8b:a9:f1:b5:a6:aa:bd:a5:e6:2a:61:77:32:
ac:23:27:97:3a:ed:2c:36:fd:f7:81:94:c0:86:bb:a0:81:ee:
4f:ad:ad:1c:8d:32:29:65:7f:98:e2:66:9d:f8:3a:7d:a2:ae:
67:bc:6e:f1:96:12:d4:e6:c1:4b:d9:20:9d:a4:09:ff:47:93:
0d:54:40:b3:d6:32:23:0e:9a:c1:14:e5:db:07:92:5f:33:7e:
18:d7:1a:16:af:a8:bc:3c:ac:23:1a:a1:6b:a9:4f:ca:14:d5:
ff:47:46:d7:6f:67:f1:ea:26:d4:0e:d5:42:bd:77:a5:15:4a:
76:b0:2c:31:4a:32:2f:e0:f5:38:f0:b5:bf:4f:15:bf:62:e7:
45:f6:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:09 2024 by rpki-client on console.sobornost.net