Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/myRP8CuvQqD3tIyErgCTC6ItKeA.roa
File: myRP8CuvQqD3tIyErgCTC6ItKeA.roa (raw, json)
Hash identifier: NE9aNDtJgNrtDjxs24QqBZEl0FukehcCXhRj8ZN8zLI=
Subject key identifier: 9B:24:4F:F0:2B:AF:42:A0:F7:B4:8C:84:AE:00:93:0B:A2:2D:29:E0
Certificate issuer: /CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Certificate serial: 0185715E75D38C85E1866665445678EDC61E
Authority key identifier: A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/myRP8CuvQqD3tIyErgCTC6ItKeA.roa
Signing time: Mon 02 Jan 2023 07:24:53 +0000
ROA not before: Mon 02 Jan 2023 07:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 193.5.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:75:d3:8c:85:e1:86:66:65:44:56:78:ed:c6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a186a76a1899dbf9029e1aefd905177bb09d368d
Validity
Not Before: Jan 2 07:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b244ff02baf42a0f7b48c84ae00930ba22d29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:bf:4a:8c:43:95:89:76:3a:23:3e:ba:29:
00:04:4a:a4:75:62:ca:84:21:be:6d:6b:01:3b:e3:
c5:a0:83:8f:3d:b7:b1:bd:0f:b1:07:f4:73:4b:42:
5f:9f:5d:47:99:0c:dd:3d:32:36:a1:cd:8e:66:ea:
68:0a:20:0e:59:4a:09:e3:d0:9f:be:cd:72:90:7f:
b5:a0:d6:e7:ab:3a:df:1c:65:7c:17:fc:9b:6e:f4:
46:0b:59:d9:01:42:ff:10:c5:e1:4d:e4:01:12:a4:
8c:21:d5:25:b4:89:0b:89:66:81:48:39:2f:ae:d7:
a6:01:14:41:1b:c7:4b:45:8d:ff:d8:bb:91:6a:14:
9b:c1:b4:28:1a:58:50:3f:57:69:ee:48:c6:51:b3:
71:41:d4:b3:de:e5:9c:2e:4a:b1:3d:49:31:d7:97:
d9:84:93:b5:bb:71:9d:ba:2b:c8:14:19:6a:ac:fe:
40:c9:1a:ea:5d:39:24:40:b8:fd:a7:4e:57:a4:64:
0b:3e:8b:26:f1:17:0b:54:5d:71:12:90:b6:ba:e7:
1c:89:f3:97:69:2e:62:d4:03:22:e6:2a:81:1a:fd:
d5:4c:b3:cc:3f:72:e1:90:0b:e2:b4:b2:f3:4d:c7:
2a:e7:40:bd:d5:c0:dc:e3:25:68:93:41:77:a7:d7:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:4F:F0:2B:AF:42:A0:F7:B4:8C:84:AE:00:93:0B:A2:2D:29:E0
X509v3 Authority Key Identifier:
keyid:A1:86:A7:6A:18:99:DB:F9:02:9E:1A:EF:D9:05:17:7B:B0:9D:36:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYanahiZ2_kCnhrv2QUXe7CdNo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/myRP8CuvQqD3tIyErgCTC6ItKeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/8595c8-4834-4d54-a391-312e5b491146/1/oYanahiZ2_kCnhrv2QUXe7CdNo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0b:b3:e6:00:ff:34:3c:da:05:b0:3d:86:a0:b7:2c:fe:15:
c6:75:23:cf:95:f7:21:69:46:e4:d9:fd:12:f5:f1:c9:58:51:
14:7f:57:a1:49:bd:af:ec:f1:96:0f:19:c6:0f:27:73:c3:b4:
5f:e3:43:54:4d:36:fd:b3:5d:8d:4e:bc:06:f3:a4:d6:49:c3:
9a:ef:71:ea:c6:89:15:67:7d:73:c6:44:1e:76:93:99:17:36:
eb:48:fa:d2:98:6e:d0:b5:b9:6e:fb:09:88:44:a4:b0:ce:25:
da:04:62:47:7b:98:2e:99:0b:16:1e:6e:82:78:6e:ab:8f:73:
f3:40:f3:a5:37:9a:c5:81:90:c3:ab:98:79:b7:dc:81:98:9d:
e8:86:43:e6:4d:3f:73:5d:69:2e:50:8f:6e:ee:45:a7:92:00:
67:4b:2d:3f:89:2d:95:12:b7:23:11:3f:27:05:fa:86:ef:20:
34:e4:b3:ce:1f:78:04:95:03:01:d0:ad:25:5c:3d:82:96:13:
0d:5e:fb:b4:f1:96:c9:ed:cd:1e:b5:06:9d:9b:6a:32:0d:e0:
9c:f3:d2:6b:10:6d:9b:60:63:06:f4:7f:7e:df:7d:73:bd:1c:
e0:12:1a:4d:64:e2:ac:09:c1:aa:ea:93:71:02:ea:1e:e1:2d:
40:7f:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:06 2024 by rpki-client on console.sobornost.net