Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/Z1usX16Z1kgDtqkqkZnc-p8QTvg.roa
File: Z1usX16Z1kgDtqkqkZnc-p8QTvg.roa (raw, json)
Hash identifier: 36ve5SdrKQEwK+FMbVi3sG19dp74qjnhc1FY1gaoAGY=
Subject key identifier: 67:5B:AC:5F:5E:99:D6:48:03:B6:A9:2A:91:99:DC:FA:9F:10:4E:F8
Certificate issuer: /CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
Certificate serial: 0186BCE34F259C37FD0061C9F68CB72244FD
Authority key identifier: 5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/Z1usX16Z1kgDtqkqkZnc-p8QTvg.roa
Signing time: Tue 07 Mar 2023 16:24:18 +0000
ROA not before: Tue 07 Mar 2023 16:24:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57388
IP address blocks: 185.139.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:e3:4f:25:9c:37:fd:00:61:c9:f6:8c:b7:22:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b192aa28315f5942d4105d52ebfd6d328f0f405
Validity
Not Before: Mar 7 16:24:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675bac5f5e99d64803b6a92a9199dcfa9f104ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:57:d6:83:91:ce:13:6d:8f:1a:af:53:fe:
e1:67:d2:b7:09:c9:88:8a:f7:14:63:c5:fa:0c:b3:
d2:5a:16:ef:e8:a0:cd:ea:8f:7b:f7:8d:71:49:d2:
22:91:4a:8e:13:f5:24:34:1e:69:a0:0f:fa:60:8f:
13:d0:a6:49:1a:52:96:74:9d:78:28:e6:b5:80:15:
0c:87:f7:aa:b4:1c:eb:0a:99:7c:23:fa:e6:73:3a:
a8:e6:c4:f7:15:5f:3d:af:2f:00:ee:14:59:90:3d:
56:bd:98:44:17:3c:e4:87:9e:a0:45:b9:d7:e3:6b:
f4:c2:06:1a:b0:45:78:a8:36:c5:99:16:57:b0:64:
98:5f:a1:93:05:74:81:7b:b9:12:9c:f5:90:bc:8d:
c7:34:ca:58:59:49:1f:14:8b:d0:60:21:1f:ce:02:
ca:4c:ec:5b:d2:43:b6:af:c3:cb:c4:03:09:87:46:
a7:9c:76:11:26:3a:f9:e1:53:d2:1c:a2:86:eb:5a:
f1:50:13:ad:bb:7f:76:eb:bb:0a:a3:a9:97:3a:1f:
97:80:df:67:d8:d4:d0:35:a2:0b:69:ff:e0:54:6e:
40:16:ec:3f:fc:b8:9b:92:b1:34:e1:10:8e:c0:43:
e2:08:72:6b:92:d2:7c:9a:fd:c2:29:2a:44:9a:2d:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:AC:5F:5E:99:D6:48:03:B6:A9:2A:91:99:DC:FA:9F:10:4E:F8
X509v3 Authority Key Identifier:
keyid:5B:19:2A:A2:83:15:F5:94:2D:41:05:D5:2E:BF:D6:D3:28:F0:F4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxkqooMV9ZQtQQXVLr_W0yjw9AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/Z1usX16Z1kgDtqkqkZnc-p8QTvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee33d3-ff38-4a8d-a2db-3fbc795a6be5/1/WxkqooMV9ZQtQQXVLr_W0yjw9AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:21:78:37:d9:b9:66:ea:90:b6:1b:f5:0b:b7:dc:21:44:18:
04:bd:f4:e1:e3:16:b0:b8:fc:4f:97:6a:40:f6:ed:67:1e:07:
df:f5:4d:a2:da:8e:31:d7:93:62:6e:5a:37:93:f4:ee:d9:c8:
11:01:a6:29:1a:81:6d:28:e7:e2:e3:74:2a:67:d9:3c:36:b9:
8d:2d:2c:f5:f0:95:17:87:6e:5f:0d:14:62:4b:f7:f6:88:f7:
de:bc:31:70:bc:be:ab:51:88:21:a6:53:6d:5e:d7:e2:30:b1:
e0:1e:86:54:fa:7c:7b:65:dc:9e:1a:ac:1f:14:c2:ef:20:cb:
68:d3:7c:97:09:85:3a:f8:2f:84:b8:e7:4b:18:32:29:d6:53:
81:d3:18:a0:30:92:41:4f:0a:53:11:22:41:7a:99:63:61:66:
d4:0b:91:75:5c:f2:16:68:44:a5:78:10:dc:2a:dc:a1:a2:c7:
7b:65:aa:7b:24:6e:c2:0f:a0:03:76:74:2d:ce:9d:a8:33:f5:
8f:ca:1f:a5:af:74:50:27:10:bd:90:04:f5:ab:74:d2:8c:c9:
4b:4b:bb:39:53:7b:7a:0b:92:49:58:21:7c:dc:1b:f1:c3:ed:
e8:d3:f4:1d:18:9d:1f:a0:10:d8:b5:32:2c:b9:bb:57:13:05:
ae:3e:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:08 2024 by rpki-client on console.sobornost.net