Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/iHDhU9EWIg1YNa25n46J7T-uZxQ.roa
File: iHDhU9EWIg1YNa25n46J7T-uZxQ.roa (raw, json)
Hash identifier: GBvOfMPRo1KuD1bh1tAAmQEgW13KahVQh/nTkVnFJ6s=
Subject key identifier: 88:70:E1:53:D1:16:22:0D:58:35:AD:B9:9F:8E:89:ED:3F:AE:67:14
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 018570B98C4B408A296E59A2D091CAB46906
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/iHDhU9EWIg1YNa25n46J7T-uZxQ.roa
Signing time: Mon 02 Jan 2023 04:24:46 +0000
ROA not before: Mon 02 Jan 2023 04:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29177
IP address blocks: 194.20.142.0/23 maxlen: 24
194.20.144.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:8c:4b:40:8a:29:6e:59:a2:d0:91:ca:b4:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 04:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8870e153d116220d5835adb99f8e89ed3fae6714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4b:b0:7e:cc:65:b5:5b:fa:53:1c:f7:b1:2b:
10:d6:ae:1d:ba:e5:d3:62:b6:51:d7:e5:76:cb:72:
64:00:c8:32:fa:0f:3e:dc:c7:20:d3:0f:d1:72:d3:
3a:f6:e0:49:a0:cd:0d:a3:b7:f0:dc:38:e2:34:1f:
dc:60:f1:33:31:4d:12:03:fb:f4:8a:1a:40:75:fc:
d2:df:da:8b:5a:cc:c5:12:f2:3b:44:45:31:d8:a7:
4f:2e:3f:8f:ce:4c:2c:a7:21:40:9a:f4:28:b6:54:
30:6a:69:ed:4c:83:8d:17:25:e9:34:f2:35:99:5e:
19:82:5e:86:41:64:f4:73:92:42:65:b4:bc:c2:9a:
6e:29:34:66:be:92:53:51:e9:98:a2:f1:6c:64:00:
32:8c:b7:fc:f3:27:01:cc:bf:7d:85:e4:de:29:48:
9b:38:7c:8a:88:58:92:1a:b8:40:67:b4:28:b6:90:
5e:f4:14:2c:2c:51:af:b7:bb:bc:7b:cb:1c:82:85:
fa:d0:7b:09:7a:64:64:4d:59:d8:25:ca:5e:2b:c8:
1b:7e:ed:42:5d:02:ef:62:9f:1b:09:29:1a:dc:a4:
85:fc:a8:3d:1f:5b:66:1a:db:b0:b4:d5:6f:b6:b0:
67:08:8f:e1:bd:60:55:5c:d5:bf:c7:2b:c4:d6:6e:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:E1:53:D1:16:22:0D:58:35:AD:B9:9F:8E:89:ED:3F:AE:67:14
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/iHDhU9EWIg1YNa25n46J7T-uZxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.142.0-194.20.145.255
Signature Algorithm: sha256WithRSAEncryption
8f:0a:f2:2c:df:db:7d:ed:4d:ac:a7:5a:ae:37:94:52:10:45:
b6:3c:86:54:d9:12:f4:9e:bb:ba:5f:31:d7:f9:8c:db:69:e1:
aa:92:f8:bf:47:4e:7a:f6:dd:83:2e:0b:89:28:ce:c4:6f:d1:
f9:9d:0b:eb:2a:96:ea:f9:ab:27:ae:86:4d:2c:00:1c:7f:eb:
8b:39:69:f3:3b:28:9b:60:a4:ca:6d:97:a3:42:8f:c1:a1:90:
3f:a2:a2:b6:bc:fe:72:a3:ee:9b:16:b3:be:7a:9a:ad:15:0e:
18:54:dd:b3:05:63:95:dc:91:1e:97:9b:e4:28:c8:65:81:44:
89:b8:97:9a:7a:f7:9a:d8:8d:fd:4e:1d:fa:7c:ba:03:44:be:
52:4b:a7:9f:1e:34:f2:82:55:c0:e2:67:eb:af:4e:bc:63:8d:
08:a7:2a:e2:67:74:5c:2c:6f:26:59:3a:21:db:45:4f:e7:e5:
eb:1a:19:85:e1:d3:64:95:b8:29:96:c3:64:fc:18:73:c2:9d:
68:7d:15:d8:d3:68:d8:67:6e:67:1e:b2:78:24:7f:0b:1f:3a:
24:f4:2a:fa:43:d0:7d:12:53:d1:21:5d:08:61:a2:d3:f1:20:
67:d3:c2:dd:44:99:18:43:53:86:73:42:a8:96:e8:5e:b1:a8:
2c:90:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:49 2024 by rpki-client on console.sobornost.net