Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/d5KogTXCuNLWRYdw5pRbCCqj5n8.roa
File: d5KogTXCuNLWRYdw5pRbCCqj5n8.roa (raw, json)
Hash identifier: fNFzNSh4dvpYXZyi92jx2eybBmhLVxqQqwAr4b7Jrzo=
Subject key identifier: 77:92:A8:81:35:C2:B8:D2:D6:45:87:70:E6:94:5B:08:2A:A3:E6:7F
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 0189AB2D6726FF5E86725D284DC3419D0B3A
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/d5KogTXCuNLWRYdw5pRbCCqj5n8.roa
Signing time: Mon 31 Jul 2023 09:00:26 +0000
ROA not before: Mon 31 Jul 2023 09:00:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197487
IP address blocks: 176.113.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:2d:67:26:ff:5e:86:72:5d:28:4d:c3:41:9d:0b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: Jul 31 09:00:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7792a88135c2b8d2d6458770e6945b082aa3e67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:95:f1:3f:a9:14:6b:25:91:7f:cb:d2:8a:
c3:9d:42:a7:f3:a4:1e:83:13:d5:89:b6:98:78:2d:
37:2f:85:90:84:26:50:1f:3c:cc:0d:26:01:f8:f2:
84:d0:02:ca:c4:43:3f:6f:d2:ae:0b:de:78:f7:2c:
5a:4b:5c:2c:2a:37:42:de:48:0a:2c:05:14:9c:1b:
44:9a:01:39:d9:76:03:f9:67:f5:47:dd:c8:31:91:
45:f7:ca:01:87:83:96:c2:ec:c2:b3:9e:60:03:d2:
dd:31:e5:e0:d6:c1:37:dd:5b:4b:7c:bc:5a:d8:cf:
08:00:c9:21:fe:f0:bd:c8:8d:d8:2e:8a:03:a8:ae:
f5:f9:9f:b8:df:4c:62:ea:53:7a:6d:28:8a:8c:e4:
37:31:60:20:bd:64:2f:e3:dd:f4:19:25:12:7b:97:
7c:98:f2:c9:30:62:a3:c7:1f:63:0f:d0:0f:e2:9b:
b7:b8:46:14:60:79:bd:43:af:1c:4d:21:6c:4f:29:
bf:49:bd:21:ab:86:94:61:51:28:6a:77:b1:35:50:
8c:87:fd:71:fb:55:fd:40:95:83:1e:1e:0d:6f:c4:
b4:6b:ab:b6:c8:9d:25:9a:ec:bb:ec:b9:8c:b4:68:
cf:37:76:30:9d:18:d7:f9:58:26:5e:c2:01:99:90:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:92:A8:81:35:C2:B8:D2:D6:45:87:70:E6:94:5B:08:2A:A3:E6:7F
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/d5KogTXCuNLWRYdw5pRbCCqj5n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.113.0/24
Signature Algorithm: sha256WithRSAEncryption
24:e0:73:d7:87:e8:af:78:53:b3:fe:89:57:9e:2b:4a:35:02:
a1:02:88:e2:3f:f7:d6:3d:25:7b:06:d1:64:ea:e0:c0:61:ae:
94:36:ab:b5:90:c7:1c:77:c4:59:9b:0e:4d:fe:6c:b1:c9:00:
5c:7f:ac:7e:f0:f2:36:37:12:c3:26:64:7f:83:12:a7:3a:86:
ab:59:db:fe:40:cd:7b:3c:c7:65:2c:49:74:bb:3f:b5:42:e8:
4a:81:20:c9:5f:3a:ee:16:ef:e5:09:c0:d3:a5:39:d4:6e:e8:
20:46:92:e7:53:bd:81:a5:88:9b:54:37:6b:96:15:12:f2:f7:
25:30:61:0f:7f:7e:8e:3e:6b:90:f1:45:5c:34:77:3f:5d:1c:
cb:16:01:63:f2:a4:9f:53:4c:a6:c8:a2:7e:63:47:37:6e:d3:
54:90:f3:04:d1:32:6c:6e:27:43:d2:4d:7b:2d:fe:5c:ff:f5:
3a:cc:2f:ae:7b:64:ca:37:b3:42:ce:c7:15:5c:bd:87:4d:96:
52:25:32:6d:2d:95:d2:4a:cf:27:dc:f3:92:e9:3f:d5:2e:02:
23:9c:06:63:1b:d6:a2:14:ee:75:1a:e2:15:d3:02:6d:ed:b4:
c0:e1:2f:e4:c4:0e:ee:5d:3c:14:e5:a7:f2:e3:6b:df:3b:eb:
4a:70:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:35 2024 by rpki-client on console.sobornost.net