Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/1-xYJZZ3E5Iz7vanvFY7E7KzYHrY.roa
File: 1-xYJZZ3E5Iz7vanvFY7E7KzYHrY.roa (raw, json)
Hash identifier: +cSt+gsnZU5so6t4z664R3fMPMy3zrzBH37SnYrDPBg=
Subject key identifier: FB:16:09:65:9D:C4:E4:8C:FB:BD:A9:EF:15:8E:C4:EC:AC:D8:1E:B6
Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Certificate serial: 018C43775EE5BA0B057733A7E54593265480
Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/1-xYJZZ3E5Iz7vanvFY7E7KzYHrY.roa
Signing time: Thu 07 Dec 2023 08:49:05 +0000
ROA not before: Thu 07 Dec 2023 08:49:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47180
IP address blocks: 194.179.140.0/22 maxlen: 22
2a13:f8c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:77:5e:e5:ba:0b:05:77:33:a7:e5:45:93:26:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6
Validity
Not Before: Dec 7 08:49:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1609659dc4e48cfbbda9ef158ec4ecacd81eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:bb:b2:23:e5:6e:80:33:03:c9:54:4e:a6:
4c:45:64:88:c3:24:cf:64:0b:7a:de:4b:a5:82:06:
fd:de:41:74:fd:b1:a7:e7:d6:e2:0c:48:24:a8:02:
22:d9:b2:99:a9:43:96:2e:37:9d:86:ed:67:12:db:
5f:f8:3b:e6:d4:b2:52:20:fd:06:19:11:5e:61:0b:
bf:bb:77:eb:24:c6:3e:ee:64:80:26:4a:a3:ac:2b:
c7:70:ef:90:c1:8d:b9:03:41:6f:32:d7:b6:01:65:
7b:ff:1f:08:c8:70:bf:f5:a4:1d:5b:d5:f4:37:9c:
12:41:54:d7:2f:57:3a:36:9d:11:b2:66:2f:10:f5:
86:ea:72:69:89:bb:7c:96:e6:75:be:8e:0f:46:38:
5b:5a:8a:cd:84:11:f4:c7:66:a3:50:bd:bd:c7:b5:
5b:0b:ab:fa:db:6f:16:13:b9:ea:77:2a:2d:e2:e8:
c0:69:81:b1:83:f2:96:dd:3c:78:3e:56:77:35:a2:
02:3a:58:d8:f2:c4:be:c1:32:29:22:3f:be:4f:35:
18:90:48:28:b7:31:89:ee:b9:68:02:f3:60:d8:5f:
bf:30:ca:b1:3d:98:0d:f6:af:23:03:98:8d:67:91:
14:18:1a:5f:c0:9d:f7:9e:52:34:33:49:28:b4:3a:
f1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:16:09:65:9D:C4:E4:8C:FB:BD:A9:EF:15:8E:C4:EC:AC:D8:1E:B6
X509v3 Authority Key Identifier:
keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/1-xYJZZ3E5Iz7vanvFY7E7KzYHrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.140.0/22
IPv6:
2a13:f8c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:ef:1b:f7:27:ca:57:ef:8c:29:91:0e:d4:72:18:01:13:50:
a0:13:3f:4b:81:18:78:d3:1f:cd:02:72:b7:6b:67:a3:e8:db:
a8:81:85:d8:c5:ec:54:83:b6:a7:9f:56:9e:61:e9:97:60:f4:
2a:38:da:34:a6:cb:33:9c:00:a9:6b:e4:98:fd:f3:bd:9f:87:
10:7e:cd:85:d6:b6:e0:d4:de:61:6b:43:31:ee:87:66:5d:29:
c8:33:c9:49:93:62:43:ad:4d:db:6a:46:be:79:cd:f2:ff:d5:
43:4b:6a:09:fe:99:1e:35:84:4c:24:02:02:d2:ac:78:ed:15:
00:fa:e3:70:9c:67:ef:7b:16:81:ad:2c:96:9e:14:9a:3c:82:
24:13:63:0d:18:c5:eb:ca:fc:64:fe:6c:cc:b9:9f:80:35:36:
e2:22:ad:e1:ac:47:61:66:5b:55:b0:bb:b5:08:24:e3:18:de:
71:5a:9f:96:49:9b:09:d5:8a:a6:5c:70:4d:43:88:1a:b4:e5:
35:e0:e9:a5:0f:1b:1e:6d:38:54:2d:26:71:ee:cd:54:5d:54:
6e:73:8f:8e:4d:7c:e1:b0:33:7e:ad:58:49:00:06:9f:68:7c:
e8:3c:1a:b5:e2:01:4f:70:64:e3:00:66:74:4f:ae:82:bb:2e:
21:bc:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:17:09 2024 by rpki-client on console.sobornost.net