Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/lYD8wUkjg0KkxCGdAmd4V9aJekg.roa
File: lYD8wUkjg0KkxCGdAmd4V9aJekg.roa (raw, json)
Hash identifier: 2jDud3S/A1aXdqBysqmtlc27qhgEZO3xXjgK4gC7TYY=
Subject key identifier: 95:80:FC:C1:49:23:83:42:A4:C4:21:9D:02:67:78:57:D6:89:7A:48
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 018CC26D81BD38D8EC607A004996799444DB
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/lYD8wUkjg0KkxCGdAmd4V9aJekg.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 195.128.162.0/24 maxlen: 24
195.128.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 18:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:81:bd:38:d8:ec:60:7a:00:49:96:79:94:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9580fcc149238342a4c4219d02677857d6897a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:6b:14:ab:24:bc:f7:19:60:d9:23:a1:c6:
56:3c:42:6a:03:ea:9f:01:5e:b0:20:5e:71:da:2d:
69:ba:f8:06:5f:82:d9:9e:6a:a9:6f:24:90:96:d4:
64:d1:6f:c9:cd:ee:a6:bd:20:a9:88:f1:26:00:cf:
10:cb:37:02:4e:bf:a4:79:26:ff:68:40:4b:54:c3:
d0:ed:19:61:14:82:e7:b2:03:35:73:8a:72:d4:1a:
f2:ca:fc:14:46:a7:52:b8:a6:56:ec:cb:e6:b5:2d:
0a:52:17:88:a2:7a:2c:8d:d7:3a:73:83:b1:e1:8b:
41:50:2f:7e:69:d6:69:47:66:5a:af:42:81:9e:c0:
8b:c4:66:73:02:50:31:82:76:e6:7c:0e:3b:cc:36:
7f:e6:80:d0:01:9a:b2:58:57:99:51:2e:29:58:d8:
07:00:e4:34:56:d8:19:d5:36:63:6c:f2:b7:ef:cf:
66:b0:f2:d0:a2:c8:5c:fd:e2:e8:0b:e0:61:1b:4c:
d3:26:bc:51:f2:33:3b:70:12:41:9d:bb:9c:63:0d:
f1:f1:94:af:51:62:14:18:fa:03:ba:e0:ad:2a:97:
af:a8:13:7b:78:32:0e:21:f5:da:24:e1:56:4f:36:
7e:a0:b1:e1:d6:15:67:3b:3f:08:0b:00:02:8d:53:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:80:FC:C1:49:23:83:42:A4:C4:21:9D:02:67:78:57:D6:89:7A:48
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/lYD8wUkjg0KkxCGdAmd4V9aJekg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.162.0/24
195.128.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:83:18:37:1c:e4:1f:f7:89:17:55:e4:1e:d2:49:84:a6:8c:
4e:38:c8:57:5b:47:cf:b9:6f:7a:01:d9:43:62:df:3d:de:a8:
46:43:6d:7b:ab:c0:9b:fb:5b:ff:18:fe:0c:76:8c:2d:d2:db:
98:50:64:a8:cf:6e:1a:ca:29:3f:51:0c:be:4e:76:b2:cf:38:
f6:38:da:06:85:77:d0:cb:20:4d:93:31:0a:4e:b3:2b:cf:9b:
a4:46:d2:7c:26:03:eb:6e:da:97:f0:72:b9:a6:25:c2:d8:b1:
c4:69:3d:47:61:9e:00:70:7b:54:0c:60:79:2e:15:ce:c8:f3:
04:19:3d:8f:b6:53:14:59:ab:db:cb:88:94:d8:78:9f:2a:51:
48:54:60:27:68:b0:6f:9c:96:9e:ac:39:09:8b:67:c5:91:90:
ac:5c:0b:a7:b1:6d:e7:c1:fa:4f:81:fd:01:82:79:03:eb:e8:
9e:28:e2:5b:d2:67:3d:d1:9a:b0:4f:9d:6b:ae:09:ab:d8:95:
03:11:f5:30:d3:39:ed:fe:34:8b:30:21:4b:ad:9a:6d:39:15:
fb:ad:ac:53:3a:10:07:27:14:52:a0:3c:b0:b2:a0:be:66:33:
24:a6:d3:f2:50:42:9a:ea:0a:58:eb:01:55:1a:35:de:c4:15:
6a:86:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:38 2024 by rpki-client on console.sobornost.net