Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/XxY3Hm8HqivN-3RFEDaIE69CYt8.roa
File: XxY3Hm8HqivN-3RFEDaIE69CYt8.roa (raw, json)
Hash identifier: Rv1nlmVKlUrWm9tu50odtgt3JpYiyo+fnBfjzkkivWU=
Subject key identifier: 5F:16:37:1E:6F:07:AA:2B:CD:FB:74:45:10:36:88:13:AF:42:62:DF
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 018A88716F9897B78CD3C3E4C0E48BDBF93D
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/XxY3Hm8HqivN-3RFEDaIE69CYt8.roa
Signing time: Tue 12 Sep 2023 08:10:50 +0000
ROA not before: Tue 12 Sep 2023 08:10:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57314
IP address blocks: 94.141.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:71:6f:98:97:b7:8c:d3:c3:e4:c0:e4:8b:db:f9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Sep 12 08:10:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f16371e6f07aa2bcdfb744510368813af4262df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:3a:3f:73:96:d9:24:5d:10:20:9f:6b:6b:
34:9b:bd:d5:56:15:01:db:c0:1f:5a:da:c1:60:dd:
eb:69:00:c6:26:00:0f:a0:b5:de:c5:78:9d:38:88:
54:35:0e:b0:ac:99:3b:f5:28:0c:3f:ee:be:d1:f9:
aa:24:6a:16:fe:ec:37:c7:df:de:6d:3f:0c:3d:e4:
4d:6c:ab:8f:9a:15:26:39:74:c7:01:15:45:47:64:
ca:33:57:1d:66:dc:50:6c:4a:43:90:bb:13:0b:ae:
ab:aa:23:b2:96:84:43:63:8b:6b:2d:7a:19:ed:cb:
3f:a7:a8:7f:ab:20:4f:8d:14:d5:81:5c:c3:14:2c:
30:97:3b:e9:23:0e:ee:2c:52:d6:76:98:16:0f:86:
25:1d:be:2a:c3:fc:40:ce:44:07:7a:50:a2:85:35:
e1:f8:ae:91:92:16:8f:05:c9:f7:e4:18:39:65:6f:
cc:e8:b6:6a:8d:01:46:42:0f:8f:60:72:be:f6:af:
91:fd:a5:7f:38:29:6d:ba:99:c6:36:37:e6:19:44:
42:3a:8a:19:43:d6:3c:9d:3e:e5:ca:10:b2:af:51:
7d:23:e9:cf:9c:61:7a:8c:4c:3c:b6:4c:80:51:dd:
51:7b:86:0c:37:45:83:d4:10:9b:a4:08:a1:5c:23:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:37:1E:6F:07:AA:2B:CD:FB:74:45:10:36:88:13:AF:42:62:DF
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/XxY3Hm8HqivN-3RFEDaIE69CYt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.141.116.0/22
Signature Algorithm: sha256WithRSAEncryption
53:db:f0:ca:24:8a:40:35:ab:d5:12:34:e7:e7:54:9c:49:07:
dd:a5:8d:e5:b7:90:30:9c:05:d5:34:05:4d:32:4c:40:ed:c7:
a1:7d:d0:ca:f7:6f:a5:68:ac:e0:72:ac:1f:c5:24:3d:09:c2:
d9:f2:bb:0d:3c:26:2b:7a:4a:45:d5:ce:5c:35:71:f3:4b:a0:
3c:0c:67:1d:47:5b:84:61:a9:6e:54:b2:d2:b9:3f:52:9b:cb:
e8:a8:d4:e2:04:7c:dd:fd:00:bc:e9:4a:33:35:1d:fb:64:8a:
b3:10:d7:bd:fe:8e:43:c0:5b:2d:f3:6f:5f:e7:5c:c9:c0:39:
1b:96:71:93:cb:81:ea:c5:2b:ff:c2:fc:d8:98:ac:ed:6a:5c:
f0:94:d7:90:c0:a7:78:c9:be:6d:fd:cc:e7:fb:a4:e9:e7:17:
a5:62:f7:3a:51:e5:e9:71:94:8a:9a:ab:89:d6:e7:4c:16:2e:
96:7e:a0:6d:28:f4:03:88:b9:d9:95:91:e7:ad:3f:d0:13:e8:
79:f7:6b:08:fd:80:19:f2:f1:9d:84:fe:e1:48:d3:d1:22:ca:
38:fc:cb:44:22:7f:71:ab:3a:96:a0:0d:78:c6:3d:67:f0:47:
a2:08:b4:db:3d:75:af:0a:d8:df:f8:0c:18:d8:65:13:79:9e:
08:54:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:48 2024 by rpki-client on console.sobornost.net