Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/i-XrbNPBvxa7nFauhIw9u3xIqhw.roa
File: i-XrbNPBvxa7nFauhIw9u3xIqhw.roa (raw, json)
Hash identifier: i983q9RbSrbCg2seJvFCrGTUnMmlLX8Yi99aJ/E4qBs=
Subject key identifier: 8B:E5:EB:6C:D3:C1:BF:16:BB:9C:56:AE:84:8C:3D:BB:7C:48:AA:1C
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 01857246CD010C0843D76990A57105EC264E
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/i-XrbNPBvxa7nFauhIw9u3xIqhw.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48563
IP address blocks: 89.39.174.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cd:01:0c:08:43:d7:69:90:a5:71:05:ec:26:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8be5eb6cd3c1bf16bb9c56ae848c3dbb7c48aa1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:cb:9a:c1:33:16:ba:fb:62:83:b2:fa:bb:
73:97:19:e7:8e:f0:b1:ef:da:cf:15:c3:c3:1c:75:
90:b9:e4:bf:61:9e:1d:a1:f2:71:81:e9:0b:6d:d5:
ec:f6:b5:5c:48:33:16:c1:a2:db:79:fe:6c:e5:a9:
ce:90:05:ca:82:9e:37:3c:02:bb:08:b0:19:a4:71:
8b:4e:53:38:d1:99:74:01:92:84:39:40:3c:24:24:
68:8b:57:f4:82:11:ab:cb:6a:9f:f1:85:71:60:24:
49:27:fc:f1:45:da:49:84:90:49:ec:d5:17:4a:6b:
46:db:fb:9d:c2:4e:9a:f0:f1:76:20:41:84:29:bc:
d5:1d:0c:b0:c9:ae:08:91:52:72:0c:82:94:66:9e:
2e:c2:df:c2:29:f7:19:4c:3e:d5:75:5e:3d:d5:5d:
40:18:4e:c9:37:fd:ee:64:6e:e7:a7:00:48:29:2a:
8c:7d:5b:57:01:cf:22:f5:99:3a:a4:7c:bf:48:bc:
2b:bc:6a:74:49:2a:8a:87:45:2c:ef:5f:4c:35:57:
7d:36:81:10:27:ea:60:8c:18:4e:f0:ed:af:47:42:
26:fe:90:55:31:fa:91:91:27:74:0f:fe:d4:21:ad:
d1:e0:cb:b8:d4:0d:65:3e:98:cf:68:f8:e2:af:0e:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:EB:6C:D3:C1:BF:16:BB:9C:56:AE:84:8C:3D:BB:7C:48:AA:1C
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/i-XrbNPBvxa7nFauhIw9u3xIqhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.174.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:b5:08:06:fc:7f:52:5d:4a:fe:8e:22:af:9a:63:05:fe:66:
3b:47:e0:2d:f3:f7:5d:df:1e:f7:65:9a:66:96:2e:6b:4d:2a:
ba:0f:e0:a7:65:90:9a:ef:e3:bb:3e:eb:df:5b:4d:b3:a3:5f:
cb:a7:40:0d:87:5d:9a:33:18:6d:6c:01:c4:2f:41:54:6c:66:
2c:57:29:c2:54:83:98:62:78:c7:37:be:9c:04:b1:c5:f8:59:
f5:16:59:75:76:02:44:be:28:7c:e5:d9:88:9f:94:cc:85:2f:
82:42:30:05:2e:8c:32:ea:26:01:c4:59:a4:29:ec:25:cc:be:
a1:f6:f5:65:d3:a8:77:35:e7:28:4a:53:4f:10:48:59:00:8d:
31:65:21:32:a9:70:61:fe:90:78:29:6e:53:ca:5f:88:02:7d:
e5:a1:b4:a0:dd:60:13:1f:85:9c:cf:e6:bf:16:38:f9:81:6f:
c4:14:a8:d3:50:bb:4a:10:8f:0a:4a:3c:8a:dd:ec:e4:6e:24:
4b:e1:f0:a3:6f:5a:d3:53:3f:33:ca:64:f9:f4:7a:f7:35:58:
8d:4b:17:ab:27:25:42:25:ed:2c:e3:a8:b1:d6:f9:57:10:89:
17:9c:c8:c9:f9:0e:3a:cc:67:48:2b:d4:ef:1c:b8:3b:ae:ed:
76:8b:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:39 2024 by rpki-client on console.sobornost.net