Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ckxe6zyo3OEli_KAnnYeO_lwjHI.roa
File: ckxe6zyo3OEli_KAnnYeO_lwjHI.roa (raw, json)
Hash identifier: kX4pMlEIseEpp+uUMDnjmcQ+E8LK27gbG8L7Dzh3sWU=
Subject key identifier: 72:4C:5E:EB:3C:A8:DC:E1:25:8B:F2:80:9E:76:1E:3B:F9:70:8C:72
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018C86D4DD61B16B12016CCB91017AC1A513
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ckxe6zyo3OEli_KAnnYeO_lwjHI.roa
Signing time: Wed 20 Dec 2023 10:45:46 +0000
ROA not before: Wed 20 Dec 2023 10:45:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 185.169.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:d4:dd:61:b1:6b:12:01:6c:cb:91:01:7a:c1:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Dec 20 10:45:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=724c5eeb3ca8dce1258bf2809e761e3bf9708c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:c0:e4:b7:4e:cb:64:30:b3:4f:7e:59:99:
74:cc:51:d5:51:1c:ce:71:ba:bf:71:6a:01:2f:17:
30:bb:92:4f:8c:2a:0f:c4:b0:1d:2f:a9:82:77:99:
34:6c:04:f3:21:c4:74:23:c2:96:33:96:b7:78:df:
13:e6:12:db:9b:c7:22:16:5b:e4:11:ce:20:05:cc:
7e:24:94:80:68:71:14:d2:d7:1e:28:4e:66:27:c9:
96:fb:0c:69:44:37:1a:67:76:51:fa:80:a5:9e:f7:
02:e4:75:55:93:1c:1d:8a:99:d1:64:a4:7a:aa:c5:
c9:5f:19:80:1e:7f:da:81:07:3b:be:6a:a0:41:9d:
65:4f:98:6a:63:86:d0:21:ae:6f:a8:c2:ca:93:f0:
2a:e6:aa:5b:28:ab:a2:07:02:eb:9d:ab:d2:01:74:
af:1e:12:5c:21:2f:d0:a3:5a:0c:bd:7e:91:fb:e3:
01:92:f3:f6:17:13:bd:4f:af:41:c0:34:68:0a:69:
1d:7f:f5:b3:46:df:68:9f:9f:e7:d4:b5:dd:96:66:
16:69:d2:7e:1d:69:ef:32:92:37:5d:09:71:d2:7b:
d0:b5:ad:b9:c3:5f:6f:cf:1c:29:e3:70:27:d8:51:
2f:90:24:27:80:4b:02:40:c0:33:d7:d0:9c:b3:1e:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:5E:EB:3C:A8:DC:E1:25:8B:F2:80:9E:76:1E:3B:F9:70:8C:72
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/ckxe6zyo3OEli_KAnnYeO_lwjHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6b:46:b2:01:71:28:d2:e0:76:da:14:17:95:a3:07:e4:51:
97:43:cc:0e:6c:50:b9:6e:65:e4:44:40:d4:20:8e:13:ec:4d:
92:73:ef:48:db:96:38:00:87:8b:4d:bf:d8:38:ab:c6:6e:c9:
f8:29:24:42:10:ce:a8:45:59:20:d0:3c:40:28:02:63:ec:ed:
3a:bd:6d:3c:cc:d9:64:6d:e2:2a:4e:2a:08:03:a8:c9:04:a2:
e4:1f:36:b3:c5:2f:df:1c:fc:66:8e:07:bd:47:5a:04:30:28:
06:18:91:21:00:92:ed:c1:ae:35:3c:78:a0:a1:54:ec:db:15:
85:d8:46:83:03:12:2d:19:12:22:2f:c3:33:cb:b9:0e:2a:24:
dc:24:79:e7:97:e1:29:3a:f6:01:c1:c6:d7:2e:81:e8:16:86:
a4:4e:8b:e8:d4:cc:3a:6a:43:79:e2:19:4e:a6:45:d7:15:da:
ad:30:41:77:59:8d:17:00:8d:4d:45:76:12:89:1e:cf:a0:50:
97:38:fd:a6:bf:10:1c:29:84:0e:3e:2c:cd:b8:0b:25:f6:34:
c2:a1:19:a8:dd:e8:e0:d9:17:d0:fd:e0:39:4a:e1:8d:1a:57:
06:f0:9d:4b:c9:eb:c5:6a:a9:0a:88:e4:21:a6:48:12:1d:86:
bf:55:43:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:36 2024 by rpki-client on console.sobornost.net