Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1sgMDF5iyY23xZtFPORS9FzP6M.roa
File: G1sgMDF5iyY23xZtFPORS9FzP6M.roa (raw, json)
Hash identifier: BKpl8Kfjj/Ding6iASMXY9D6pGFkISFaa5jZ+hfxZco=
Subject key identifier: 1B:5B:20:30:31:79:8B:26:36:DF:16:6D:14:F3:91:4B:D1:73:3F:A3
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018C209850297165B8B9F273483EA8825064
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1sgMDF5iyY23xZtFPORS9FzP6M.roa
Signing time: Thu 30 Nov 2023 14:18:21 +0000
ROA not before: Thu 30 Nov 2023 14:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.11.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:98:50:29:71:65:b8:b9:f2:73:48:3e:a8:82:50:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Nov 30 14:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5b203031798b2636df166d14f3914bd1733fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:e3:b3:8d:51:c9:f9:45:ca:bc:d6:ef:7a:
34:af:c0:c0:fa:4d:52:a9:ef:5e:a9:a5:3e:3d:b3:
18:01:ad:f8:19:fd:35:09:80:47:0c:15:7c:10:08:
e5:36:87:bd:2b:cb:d3:03:54:d4:78:70:e7:c7:57:
0d:8d:73:5e:e8:33:e1:ca:b1:2f:cc:41:a5:f8:a9:
b2:83:c3:06:a0:62:72:4b:d4:2e:9e:10:ec:b3:aa:
b9:4e:51:4a:d8:7f:c4:a7:b8:80:5f:ef:b8:57:16:
a1:00:5d:59:88:04:76:d8:37:8a:1e:f8:a2:13:18:
d7:2d:7b:c1:17:af:96:05:37:0e:ba:65:1d:79:72:
63:76:89:d5:e9:b7:ed:14:d6:3b:8d:e8:8c:7a:d4:
e4:e8:ed:10:29:67:e9:8e:f8:8b:56:16:22:c6:d2:
fb:3e:2b:ba:05:03:92:da:c5:a2:91:67:e3:0a:d5:
77:d4:6c:6b:87:68:10:f8:eb:10:fd:e8:a9:be:7f:
91:c3:a3:f8:27:69:1b:c3:41:b6:8f:30:9f:b5:3c:
c5:3d:1c:fb:3c:4a:1a:4b:98:db:62:f2:77:46:7b:
5f:ad:25:68:0c:ad:84:9a:09:17:22:e1:c2:72:51:
13:16:13:00:92:d7:fd:b3:0e:48:93:7a:ed:22:f2:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:20:30:31:79:8B:26:36:DF:16:6D:14:F3:91:4B:D1:73:3F:A3
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/G1sgMDF5iyY23xZtFPORS9FzP6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
92:3a:db:c4:ab:2e:d7:a9:bc:91:06:44:f9:97:2d:d7:87:cf:
0c:6a:a9:cb:ac:01:01:3e:30:20:3e:65:df:b3:9c:d3:e7:bf:
3f:fb:da:a7:26:d4:63:c9:69:ac:e1:8e:3e:9b:84:8c:b9:96:
84:6f:63:fe:30:93:f9:dc:c5:bc:56:fd:ad:e9:7c:20:58:73:
98:aa:66:00:fa:c0:76:a1:50:f4:66:51:d6:61:94:01:1e:97:
45:e2:2f:75:b2:e1:1d:a9:c7:ae:b4:10:e9:78:cd:54:aa:49:
c2:b0:65:a1:ea:0c:34:15:3e:49:c1:96:94:fa:77:d4:8d:3a:
b3:3d:0c:5f:aa:20:34:20:02:74:4d:ba:56:26:ce:71:b3:a9:
3d:0c:d5:64:5a:14:3a:0d:86:2a:03:aa:97:f9:70:d7:84:ca:
af:a1:1f:91:16:dd:6b:57:06:bc:58:d6:ae:32:86:c8:e4:4c:
37:71:e3:7f:ae:23:f1:f0:35:97:5d:a8:c0:ac:92:92:ff:ea:
57:47:70:6d:6d:2e:8a:06:9f:38:3a:3c:da:e0:66:ae:c9:28:
47:4f:9f:21:d8:f6:21:22:e4:83:38:52:3d:cd:0f:18:83:84:
87:25:b6:c6:b4:86:9c:28:ca:b1:44:e1:16:32:8e:73:27:71:
34:54:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:09 2024 by rpki-client on console.sobornost.net