Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/U69wypn_kLd3DnQ9mpd1Wh8Cf8M.roa
File: U69wypn_kLd3DnQ9mpd1Wh8Cf8M.roa (raw, json)
Hash identifier: TGpyAsbwNyceSS0OKfKYAVvHo2+L2NPfhn+V8nWwIiE=
Subject key identifier: 53:AF:70:CA:99:FF:90:B7:77:0E:74:3D:9A:97:75:5A:1F:02:7F:C3
Certificate issuer: /CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Certificate serial: 0185700B95CBFF1100B315535AFF55446B64
Authority key identifier: A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/U69wypn_kLd3DnQ9mpd1Wh8Cf8M.roa
Signing time: Mon 02 Jan 2023 01:14:45 +0000
ROA not before: Mon 02 Jan 2023 01:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24944
IP address blocks: 194.50.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:95:cb:ff:11:00:b3:15:53:5a:ff:55:44:6b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0937525577cb2af1b285c96431dbd600f57cbe8
Validity
Not Before: Jan 2 01:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53af70ca99ff90b7770e743d9a97755a1f027fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:b7:62:0c:dd:2f:69:53:4c:7f:a6:44:bf:
68:b3:a5:ea:99:db:f9:b7:6a:45:a4:5c:d7:6b:19:
11:3a:df:ce:31:b4:fd:fc:72:c4:e0:e3:5f:3f:2b:
0c:4c:dd:b7:df:da:2e:4b:43:a7:9b:7b:3d:c2:9e:
d4:7a:c7:11:43:ed:cb:9a:ca:eb:51:a5:ad:44:89:
77:25:7c:6a:d4:d1:04:0f:e3:54:c3:2b:0a:c8:39:
eb:f6:cb:c2:aa:55:f8:f0:09:30:8d:ea:7a:78:6f:
d9:28:46:63:d9:50:87:26:7e:0b:8a:e8:17:34:a1:
a5:ee:71:f3:39:49:e4:9a:3e:04:b7:cb:60:6b:a3:
e1:ac:1f:85:84:77:12:fc:82:af:d5:23:b6:d3:98:
9a:2c:1b:a8:86:62:fd:0e:2b:b6:a0:0f:c3:b9:64:
10:71:df:18:ae:bf:85:67:29:69:da:cd:7c:ce:9c:
60:41:82:af:48:4a:66:dd:e8:c1:51:aa:c3:b3:bb:
03:86:6c:83:0a:a2:33:66:e3:3d:a2:4e:cd:65:fc:
bf:ef:47:e5:cc:73:62:a5:57:0b:a8:e9:b1:4b:3e:
d0:09:74:22:40:1d:d9:a0:12:5c:4a:6e:fe:b7:2a:
e5:23:82:0e:bc:c8:db:e9:32:13:3c:44:ed:f8:db:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AF:70:CA:99:FF:90:B7:77:0E:74:3D:9A:97:75:5A:1F:02:7F:C3
X509v3 Authority Key Identifier:
keyid:A0:93:75:25:57:7C:B2:AF:1B:28:5C:96:43:1D:BD:60:0F:57:CB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJN1JVd8sq8bKFyWQx29YA9Xy-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/U69wypn_kLd3DnQ9mpd1Wh8Cf8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d27da2-2754-4d7b-af90-6e02af0a4994/1/oJN1JVd8sq8bKFyWQx29YA9Xy-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.84.0/24
Signature Algorithm: sha256WithRSAEncryption
93:50:e4:cf:f0:6b:a0:46:31:90:f2:42:90:1d:e3:17:8d:65:
a7:4d:04:4d:a1:a5:d4:6c:8a:84:62:12:de:86:b0:e8:21:c4:
ad:59:95:28:7a:3d:74:13:ed:c4:5a:c3:dc:2d:d2:9c:f3:00:
c2:4d:c5:f9:ab:50:f4:66:96:fb:9d:14:63:fc:6c:4b:92:16:
90:fe:28:5d:f7:eb:df:38:fb:55:1d:15:eb:1c:a4:a8:05:b1:
34:0a:a0:ef:17:20:a2:11:45:a0:1e:40:42:d0:90:69:2d:da:
42:b5:a5:07:e2:6f:a2:aa:ed:9a:5c:09:fa:76:35:f7:25:61:
1e:48:a6:19:9f:db:70:b6:75:c5:45:d6:d1:16:1b:5f:2f:db:
fa:a5:ba:37:91:a7:40:71:99:59:d9:d3:9e:41:b7:7f:a3:26:
99:0e:9e:cc:c2:38:63:81:57:14:0b:e2:23:aa:89:57:e3:dc:
f8:57:cc:56:a8:b8:73:7d:62:95:56:86:ea:51:30:41:60:a5:
ed:35:84:34:8d:ba:bc:8f:94:ea:ec:a1:82:e4:a4:c0:1f:ff:
77:27:40:0b:ed:4a:29:76:7c:78:ae:b8:d9:78:f5:0c:0e:ae:
32:78:c9:ff:14:10:68:ac:6c:01:79:21:d8:a7:79:c4:34:90:
3e:d8:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:03 2024 by rpki-client on console.sobornost.net