Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/ieS_FC-n-rXyk4GFX3fyzmOoYgE.roa
File: ieS_FC-n-rXyk4GFX3fyzmOoYgE.roa (raw, json)
Hash identifier: wqKuF/zbSGXSYGhThnxrQ8NUX910dm7+rLhMXQUF5zU=
Subject key identifier: 89:E4:BF:14:2F:A7:FA:B5:F2:93:81:85:5F:77:F2:CE:63:A8:62:01
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0189E032943D12963AB10F69C0D56E3D6ABA
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/ieS_FC-n-rXyk4GFX3fyzmOoYgE.roa
Signing time: Thu 10 Aug 2023 16:05:58 +0000
ROA not before: Thu 10 Aug 2023 16:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205007
IP address blocks: 138.124.125.0/24 maxlen: 24
138.124.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e0:32:94:3d:12:96:3a:b1:0f:69:c0:d5:6e:3d:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Aug 10 16:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89e4bf142fa7fab5f29381855f77f2ce63a86201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:46:40:ce:02:aa:f2:24:36:37:9e:66:78:
95:23:45:65:93:10:4b:49:9b:be:91:5b:bd:c8:0a:
21:d6:46:02:04:ce:12:af:88:01:d2:ca:c3:2e:8c:
9c:c5:61:b8:0a:e0:a5:bd:0d:94:e0:04:a7:05:56:
c6:41:fc:cc:80:3e:7d:0e:4b:c9:ca:2a:b9:0b:fa:
2c:b6:43:b0:0e:d4:a5:7f:e0:fe:95:ff:84:57:c9:
f0:b7:3f:d8:49:a0:72:db:f7:07:e4:fe:f2:66:7f:
48:a7:f1:8c:64:99:d4:58:8e:92:3e:45:ab:ab:75:
a6:8d:09:1d:2e:be:d9:37:59:7d:65:01:80:30:79:
5a:2a:39:e2:90:a4:3b:50:86:b9:47:d0:d5:a6:9c:
49:b7:10:ba:ce:cd:e9:9f:37:66:7d:9f:17:c4:79:
be:ad:2c:a0:3f:d9:ae:fd:0e:48:79:c6:f5:ec:0d:
a0:74:0e:63:e6:1b:9d:d9:1b:79:85:62:d7:69:f1:
71:da:fb:05:36:47:fb:66:6b:ac:27:a6:2e:7f:04:
d0:3f:b0:b6:d2:60:ca:59:dd:b9:de:f1:6c:49:2e:
e9:7d:15:2e:39:d9:d6:0b:03:7a:6d:18:67:3f:f6:
7e:ff:f5:2d:e6:eb:ca:33:04:77:ca:75:1d:54:ee:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:BF:14:2F:A7:FA:B5:F2:93:81:85:5F:77:F2:CE:63:A8:62:01
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/ieS_FC-n-rXyk4GFX3fyzmOoYgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.31.0/24
138.124.125.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c7:05:7d:a4:a1:33:c1:7e:53:cd:94:69:77:66:1a:02:04:
3f:53:ae:0f:3b:c3:bb:51:dd:c3:76:1b:c0:08:9d:0a:3c:02:
53:29:fe:ce:cb:32:5c:e0:6a:32:e8:28:21:bb:56:67:3b:07:
4e:2b:4e:d1:d1:04:a7:97:d4:07:17:b1:1a:9f:c7:ac:c7:00:
21:f3:f6:28:b9:c3:4d:f4:09:d6:0e:ba:65:5d:a4:be:f9:d6:
a5:08:f1:c5:e3:4b:53:6d:a2:83:f7:a7:56:3b:54:68:87:91:
5d:0e:f6:4d:6a:1d:87:23:db:2c:dd:c5:70:06:f1:f1:ec:79:
e3:8d:27:53:6f:72:db:db:f9:df:72:c7:2b:03:39:ae:10:09:
8f:39:43:21:04:95:3a:da:12:03:67:03:bf:45:57:f8:89:73:
5d:d5:b6:2f:97:33:76:ca:35:e8:9e:90:d3:5f:8f:e2:fc:5a:
b6:c3:71:2f:07:2f:1d:42:23:55:74:68:6b:9f:82:17:2f:b8:
16:02:66:85:44:53:63:5d:b0:4a:57:fd:b4:1e:5d:6d:6c:bf:
7d:f0:33:2a:ea:a0:41:1a:80:fd:89:44:ba:2b:5b:96:ec:40:
9a:d7:58:44:26:9a:45:5b:9a:32:b8:8e:58:d3:0a:57:7e:ed:
5f:0e:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net