Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/GgufSCEukNxm3eV1RTjuPm6rCjs.roa
File: GgufSCEukNxm3eV1RTjuPm6rCjs.roa (raw, json)
Hash identifier: JyU/IaTHAk5ZJcyrFUolWKvxVmYUWu53r43PRGBwjbg=
Subject key identifier: 1A:0B:9F:48:21:2E:90:DC:66:DD:E5:75:45:38:EE:3E:6E:AB:0A:3B
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 0185738399036DECB84D466EFA169E7C77F4
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/GgufSCEukNxm3eV1RTjuPm6rCjs.roa
Signing time: Mon 02 Jan 2023 17:24:42 +0000
ROA not before: Mon 02 Jan 2023 17:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49078
IP address blocks: 195.88.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:83:99:03:6d:ec:b8:4d:46:6e:fa:16:9e:7c:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Jan 2 17:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a0b9f48212e90dc66dde5754538ee3e6eab0a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:d8:33:c4:4a:25:6d:38:d2:f2:13:1f:39:
68:08:bd:0b:b5:88:d7:0e:18:ce:46:11:04:ad:2c:
0c:68:ce:17:b0:6c:48:74:74:ff:1a:68:c2:80:94:
39:44:fa:f0:f1:fd:2a:04:56:c4:0c:f6:9d:da:7f:
a8:d7:30:1f:8a:2f:2c:85:c7:5d:64:67:53:90:5b:
28:68:78:86:79:9d:5d:b5:1f:58:54:2a:f6:a0:f5:
57:a6:1d:f5:52:38:24:2b:09:77:e9:a2:6c:85:a3:
10:03:d4:f5:48:fa:20:c5:99:f3:15:7c:07:c8:64:
3f:95:03:e2:50:ed:91:50:df:42:dd:2c:b6:3f:98:
b4:e3:64:2c:5b:8b:51:0c:0d:7f:b4:3c:93:a5:5d:
fa:04:df:f1:b7:16:e0:6a:6b:9c:13:4f:9c:b0:d1:
ba:8d:ea:68:37:18:2f:19:a1:6b:a1:05:2d:d1:cc:
c1:ea:f7:e6:59:58:60:b7:01:43:ad:8b:1a:4e:aa:
c8:08:c8:17:17:df:cb:ad:2b:0c:e7:2f:b7:2c:fa:
f2:3e:5a:1e:11:c3:21:d7:6f:8b:8a:3e:04:53:51:
f5:98:3e:81:27:c0:d3:2a:b9:eb:1b:66:74:e8:13:
96:1f:ed:75:76:c4:fb:cd:da:c0:0a:29:c9:7e:a8:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:9F:48:21:2E:90:DC:66:DD:E5:75:45:38:EE:3E:6E:AB:0A:3B
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/GgufSCEukNxm3eV1RTjuPm6rCjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.183.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fc:22:b3:a5:7e:3c:c9:96:0f:46:e2:a9:73:5c:93:34:81:
01:0b:52:52:f2:79:3a:22:3d:60:69:02:84:d2:03:1a:30:9f:
99:79:d2:6f:56:34:9a:6f:7b:5b:df:f4:30:59:2b:46:42:f2:
e7:c8:cb:77:6d:68:fa:ae:22:1c:63:35:c6:2c:f4:25:ab:6c:
a1:12:23:71:2b:25:b9:68:68:5a:de:6b:75:7f:03:a2:c1:a8:
fa:94:2d:c2:e0:73:53:5d:1a:ef:f6:58:01:99:93:00:bb:45:
0d:09:1a:43:e8:5a:d3:c8:70:a0:9e:bf:bb:93:e5:6c:ea:d8:
11:4a:eb:0b:09:fa:56:08:eb:ec:8d:88:60:5d:da:0c:5c:9d:
8d:c5:a6:e9:05:fa:88:72:e8:03:b6:3c:e6:e5:7c:a4:1b:4c:
9c:80:ab:7d:98:ea:4a:97:8a:e6:98:7f:82:fd:88:9f:79:15:
8a:8c:63:96:0e:60:9e:41:4c:d5:32:7f:d9:d3:9e:7c:2c:16:
48:3a:81:f2:91:3e:e7:df:9f:47:57:35:12:2c:fb:03:d8:99:
7d:01:69:e6:76:30:01:00:ee:eb:f4:44:ca:97:c4:fd:15:93:
d5:cf:fd:c5:09:46:04:44:96:f9:50:c7:84:fc:c6:32:ec:f4:
cb:47:60:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:17 2024 by rpki-client on console.sobornost.net