Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ofs2HO2zNyR49mCkpRe0NplSSCw.roa
File: ofs2HO2zNyR49mCkpRe0NplSSCw.roa (raw, json)
Hash identifier: pnAP1YjO+1WM6vk4QRwzZAuf3qy6qC2Zk7Hqq6WTSHk=
Subject key identifier: A1:FB:36:1C:ED:B3:37:24:78:F6:60:A4:A5:17:B4:36:99:52:48:2C
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 01857170A35EB4E22BE8287D66FA18BD973A
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ofs2HO2zNyR49mCkpRe0NplSSCw.roa
Signing time: Mon 02 Jan 2023 07:44:45 +0000
ROA not before: Mon 02 Jan 2023 07:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 141.226.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:a3:5e:b4:e2:2b:e8:28:7d:66:fa:18:bd:97:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 2 07:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1fb361cedb3372478f660a4a517b4369952482c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:29:46:6f:36:cb:c3:bc:16:87:0e:be:41:
87:84:9e:d5:26:1f:aa:84:38:fb:20:2b:87:33:80:
2b:2d:29:e6:72:89:36:cc:bf:b1:48:4b:70:90:77:
16:ea:0c:e9:c7:c0:bc:0e:50:65:84:62:08:74:bc:
01:b0:97:aa:76:65:88:9c:bc:a4:d2:f2:49:63:6e:
78:7d:35:69:e6:52:9d:30:a5:78:b9:b6:12:ac:30:
ad:c5:2a:89:5e:3c:ad:68:b2:51:a6:f6:5d:a8:47:
4a:22:7e:e7:8d:46:34:38:8a:6a:49:56:32:55:2d:
96:41:f7:0e:7a:c2:fb:27:63:3e:f7:40:77:c4:a1:
cf:7f:26:38:38:51:a4:84:d5:0a:06:68:9b:28:3e:
f6:7e:c7:fb:b0:75:1d:d5:2a:00:09:eb:f7:3a:49:
1b:03:13:46:00:43:b4:f4:e0:66:7b:37:5e:0d:45:
54:9e:95:1a:12:87:45:66:0c:b7:33:cb:4b:26:04:
43:90:6f:d0:12:8a:77:66:d2:2d:86:9a:d2:75:ba:
50:ee:fc:c4:c0:3d:a2:18:c9:37:4c:63:98:1d:13:
25:3b:5b:f0:59:65:42:23:f4:5a:5c:d5:16:6c:66:
ac:fd:a1:21:3c:27:a3:e5:09:d0:78:de:48:24:4a:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:36:1C:ED:B3:37:24:78:F6:60:A4:A5:17:B4:36:99:52:48:2C
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ofs2HO2zNyR49mCkpRe0NplSSCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.242.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ae:5c:dd:99:27:6a:96:0e:7a:df:5a:2e:11:8a:56:76:b2:
06:be:da:82:7c:fc:13:8e:1e:4d:1a:85:92:6e:58:db:9f:1e:
4d:09:ec:ef:ed:86:8a:1e:02:5a:af:5b:93:95:18:db:dd:43:
17:ca:d6:2c:f6:3a:06:79:80:ec:8b:ac:50:6d:7b:07:07:ef:
dc:55:a7:7e:dc:bf:37:65:d7:f4:0e:3d:b4:71:22:be:18:31:
45:c0:99:5e:04:78:c4:38:3f:c0:03:ed:3e:c3:51:60:70:59:
e1:09:c8:6e:08:5a:f5:b9:44:13:01:83:f4:51:68:e1:14:fe:
80:39:05:8c:c4:e1:50:7d:e8:5c:b8:c5:2a:37:ca:f0:ae:9c:
2c:fd:e0:71:ce:39:e9:04:83:dd:3a:ab:a8:d0:a9:08:a8:87:
50:be:25:21:da:e3:ac:00:08:4d:f9:17:2d:60:44:cb:f0:8d:
a6:48:f7:11:2c:b1:01:13:fb:ff:f7:36:c1:16:e1:cc:6b:46:
9a:07:9b:75:de:e2:0d:c7:d8:af:69:ea:de:d8:b0:38:15:66:
b3:8e:62:c2:30:f7:0c:9e:16:7e:a2:b0:3c:0a:c3:1c:fb:8d:
5b:32:ce:e8:3c:cd:1d:cc:ae:b4:cc:46:59:91:2c:40:c4:5d:
62:bf:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net