Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/wM9YlTuoIBpI2HlYPWiyx3WWjV4.roa
File: wM9YlTuoIBpI2HlYPWiyx3WWjV4.roa (raw, json)
Hash identifier: ZEeJgrzxfOEFZv0ESNjAT5OJeQmbb2Gbf6wgQZbVZtw=
Subject key identifier: C0:CF:58:95:3B:A8:20:1A:48:D8:79:58:3D:68:B2:C7:75:96:8D:5E
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 01856B6EAD07AD7417A651F56A555A0F1757
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/wM9YlTuoIBpI2HlYPWiyx3WWjV4.roa
Signing time: Sun 01 Jan 2023 03:44:53 +0000
ROA not before: Sun 01 Jan 2023 03:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61006
IP address blocks: 185.96.72.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:ad:07:ad:74:17:a6:51:f5:6a:55:5a:0f:17:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Jan 1 03:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0cf58953ba8201a48d879583d68b2c775968d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:1d:7c:10:32:95:56:7e:02:dc:a8:32:46:
4d:93:ee:c7:e1:d4:0b:58:81:b8:ba:d3:45:aa:08:
93:39:05:53:38:29:1e:bc:24:69:09:25:da:12:94:
71:c7:c8:ae:18:fc:77:b0:0f:be:41:53:2d:9e:3c:
48:c4:5b:dc:cb:2b:64:cc:b9:fd:bf:67:6c:e9:4d:
ea:33:71:cb:6b:f7:ce:11:87:9d:e0:e6:a8:0d:93:
20:7e:de:4d:5d:6b:40:e5:f9:4f:f4:18:20:28:be:
95:93:a9:26:20:17:9e:82:5d:ee:1e:85:c4:b4:82:
6a:a7:06:40:1a:ed:39:ff:b4:86:e7:99:ab:9e:14:
da:01:0c:15:02:04:1e:e4:e4:dc:8b:7a:88:42:b8:
60:53:6d:7f:63:ce:4a:28:c6:05:51:4b:dc:91:01:
1c:be:c9:77:1d:25:d1:13:ab:7f:e6:5f:44:17:56:
04:ff:b0:86:1c:8a:8e:0b:8e:cf:4d:4f:eb:c1:81:
f3:ca:51:8f:8d:8f:c1:08:c3:eb:44:0e:ef:f8:14:
9e:08:81:d5:6f:83:3d:84:b3:20:c4:9e:1f:65:2b:
d4:fb:54:d3:1f:1c:59:6b:7e:a1:f9:b2:53:64:ec:
69:50:29:3d:9c:a8:f5:87:36:cf:fe:7d:f8:43:9b:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:58:95:3B:A8:20:1A:48:D8:79:58:3D:68:B2:C7:75:96:8D:5E
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/wM9YlTuoIBpI2HlYPWiyx3WWjV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.72.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:5f:5b:60:5d:3d:e4:dc:ac:06:92:ae:b9:90:ad:87:76:ce:
ec:3f:3d:05:bc:e0:39:e7:19:47:c2:65:93:4c:da:ad:16:a3:
7b:dd:a9:25:c3:64:d4:84:c1:31:96:2e:a1:5a:22:45:a4:19:
99:b7:d8:34:b7:fb:52:9a:d1:3c:9e:80:aa:7a:ba:7f:75:c3:
a6:ae:a8:c5:65:e2:64:5a:5d:e1:58:b2:7e:43:a0:09:c7:60:
7c:10:4d:db:4a:f8:7d:71:8d:b8:5b:36:63:0b:c7:90:2b:8f:
98:b6:85:e3:0a:b3:78:c2:48:82:a9:cf:ac:d6:08:83:03:04:
c6:4b:cf:8b:55:15:23:30:bf:e0:a9:b3:61:55:1d:d2:90:6b:
bd:87:74:49:73:dd:90:aa:8d:ac:e3:d2:df:1e:e6:fd:b0:b6:
d6:b9:9f:6e:b3:7a:3b:5f:9e:7d:a3:c6:a1:9e:d3:c2:4c:72:
63:a0:64:ff:b0:4f:db:b8:a7:2d:57:4e:a9:80:c8:0e:77:9e:
ed:b4:62:37:1c:fa:f4:4f:de:c0:70:cf:3a:b9:01:05:36:c2:
35:1a:87:81:db:f7:dc:58:9b:ab:df:84:34:e4:90:a9:c8:54:
f4:dd:e8:58:e8:14:8d:46:fd:2f:d0:ba:2a:84:8d:44:e4:60:
00:73:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:54 2024 by rpki-client on console.sobornost.net