Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/41vqw4vzxWkPYzkdq6O3nWBK_xs.roa
File: 41vqw4vzxWkPYzkdq6O3nWBK_xs.roa (raw, json)
Hash identifier: hKy9aQfSNXjMfror8n6bKMkOKvHC6bhdWpa+wzGWrSA=
Subject key identifier: E3:5B:EA:C3:8B:F3:C5:69:0F:63:39:1D:AB:A3:B7:9D:60:4A:FF:1B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 018570672DE8DBF1A5BEBF9673FBF4D8F6F9
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/41vqw4vzxWkPYzkdq6O3nWBK_xs.roa
Signing time: Mon 02 Jan 2023 02:54:48 +0000
ROA not before: Mon 02 Jan 2023 02:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 85.209.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:2d:e8:db:f1:a5:be:bf:96:73:fb:f4:d8:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Jan 2 02:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e35beac38bf3c5690f63391daba3b79d604aff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:01:2b:7b:46:87:6b:48:52:04:2e:69:67:
4c:32:e3:4d:89:4e:a4:ba:a6:78:8b:27:77:8c:0a:
e8:ec:e4:90:c1:e7:8f:b5:0d:57:d1:ba:ac:30:70:
e9:96:52:23:f1:8d:88:80:8f:a7:e4:e8:14:9e:3c:
c6:ca:01:ed:8a:fe:76:65:e9:15:e6:28:43:a2:79:
7d:b0:cc:44:35:3d:f0:10:92:5c:65:6c:5c:49:5a:
df:74:be:ed:4f:e9:03:0a:9a:2d:35:18:e6:99:c1:
df:0b:71:9e:86:c4:eb:9f:cf:28:32:da:93:88:67:
73:5d:4d:90:13:47:44:2d:2e:02:8c:c0:c7:e3:03:
5b:54:66:72:1e:44:53:53:2c:0f:76:c6:61:04:69:
59:17:fb:a5:93:4d:ed:02:9a:bf:a7:5d:aa:a1:ba:
ef:a8:6d:bf:1d:77:e9:de:3c:a4:ba:ca:c6:48:29:
47:f0:e5:94:f7:12:1b:13:49:34:cd:2d:75:7a:0b:
9a:8e:f1:83:60:bf:dc:33:00:ac:8e:e3:b7:94:22:
3b:df:6c:54:48:ad:87:db:64:03:03:ac:de:58:fd:
5c:f4:8f:0a:17:9a:c3:e8:b9:1b:7b:0e:66:fb:96:
cf:db:bc:ef:0d:8a:02:a2:fb:2f:eb:c1:5a:f9:cf:
36:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5B:EA:C3:8B:F3:C5:69:0F:63:39:1D:AB:A3:B7:9D:60:4A:FF:1B
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/41vqw4vzxWkPYzkdq6O3nWBK_xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
07:fd:93:a4:a5:a8:df:f3:27:00:d3:44:00:e9:17:6f:86:79:
cb:db:11:2c:34:b9:f2:ab:44:7d:a6:bd:da:92:4b:55:42:a6:
03:51:74:67:4a:92:73:c1:97:69:99:03:8f:1d:61:02:38:23:
5f:95:5e:d8:0c:d7:a5:26:a8:5c:c8:0d:c3:8b:8f:e7:29:54:
7b:a1:e0:37:97:50:19:71:ec:1d:f8:d7:cb:4c:f3:f0:6f:6e:
56:51:e1:b3:86:3c:7c:e8:3b:f7:a2:e9:c4:0e:c0:98:ca:67:
bc:22:7d:28:a1:5b:6f:cf:1e:dd:76:fd:6a:12:73:fa:47:ea:
ea:2b:c2:8a:3f:99:05:e9:e2:c1:81:cd:3d:e2:81:ce:c6:60:
33:75:3f:07:30:91:3b:1d:55:67:ea:40:77:69:54:cf:63:88:
21:42:ae:0d:c9:22:ff:cc:b4:3d:ab:e2:ac:12:a7:9b:2b:b6:
ed:ae:6c:df:be:bc:50:27:90:d6:fb:3c:4f:1e:8a:e3:8e:fc:
1b:b8:d7:fd:32:b6:0d:67:52:11:bc:6a:a8:4e:e2:ff:26:78:
b5:48:5a:b0:c4:71:db:d6:91:9b:b4:9f:eb:c8:a7:e6:f6:4f:
13:e8:14:3d:ba:78:a7:80:40:a5:e7:33:07:89:97:59:d8:0c:
eb:4f:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:41 2024 by rpki-client on console.sobornost.net