Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/3pSizvxOgp_HgbAGbYQ1GXIZKiI.roa
File: 3pSizvxOgp_HgbAGbYQ1GXIZKiI.roa (raw, json)
Hash identifier: g2UDLQZn49Vwq6ahQyZb9Gzujn4JPKC70P8j3BEYJs0=
Subject key identifier: DE:94:A2:CE:FC:4E:82:9F:C7:81:B0:06:6D:84:35:19:72:19:2A:22
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 01856FF050280E05961C1BD2E2436EC9750F
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/3pSizvxOgp_HgbAGbYQ1GXIZKiI.roa
Signing time: Mon 02 Jan 2023 00:44:58 +0000
ROA not before: Mon 02 Jan 2023 00:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 192.53.103.0/24 maxlen: 24
141.25.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:50:28:0e:05:96:1c:1b:d2:e2:43:6e:c9:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Jan 2 00:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de94a2cefc4e829fc781b0066d84351972192a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:53:2e:db:d3:cc:de:5f:c2:f0:81:d3:75:
27:63:b3:ac:59:54:5e:6b:63:a1:14:03:4e:9b:ae:
12:10:f0:db:5c:f0:f8:94:66:23:84:b3:65:3e:06:
50:ce:95:e8:d2:b2:73:76:4d:56:d6:a3:03:38:53:
8b:92:e7:a7:e1:21:8e:97:5c:10:9a:3a:09:f8:43:
76:4f:c5:f3:4e:82:ad:a8:2e:15:5f:ec:ce:d0:34:
89:e4:80:64:7e:79:38:fd:81:b2:9b:14:3e:c0:6e:
13:db:c3:3f:6e:40:7d:58:d1:d4:d4:65:ae:79:01:
70:43:03:af:69:fd:ef:0b:8c:01:53:ba:ae:e6:fe:
fe:c4:6d:a4:f5:6f:4a:fe:ee:9b:85:0d:2b:76:e6:
db:19:40:42:45:43:0c:9c:17:87:6f:5c:56:63:6a:
d5:47:d7:b5:6a:98:ce:9a:40:af:e4:6f:fa:62:55:
f2:41:6f:16:c1:23:43:41:d7:48:a6:2e:d9:33:b5:
47:9b:39:3a:96:42:be:0a:87:c5:a9:22:ce:f8:3c:
51:83:15:23:89:1e:a2:75:e5:f3:eb:2e:94:7d:1d:
77:01:df:15:76:6b:ab:60:d2:ca:5f:78:49:b2:6d:
39:cb:e8:f3:c8:93:bf:6b:56:98:df:91:10:4a:74:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:94:A2:CE:FC:4E:82:9F:C7:81:B0:06:6D:84:35:19:72:19:2A:22
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/3pSizvxOgp_HgbAGbYQ1GXIZKiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.25.0.0/16
192.53.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ea:a9:69:0c:1c:fc:db:cd:2b:49:fb:da:90:8e:6f:7c:2b:
8c:05:9a:ca:c2:c3:98:e9:ab:0c:7e:55:ae:6a:79:73:87:b6:
77:72:0d:92:74:a2:e2:c6:0d:c8:be:64:1b:d7:c6:11:32:b3:
f8:5f:23:15:54:7c:cd:c3:4d:99:3f:4d:f9:eb:a2:7b:5e:55:
d2:f8:39:2f:14:06:38:f4:2f:90:eb:4b:22:ec:97:0e:11:9f:
2e:fc:70:fe:b6:48:b3:54:29:4a:72:09:64:3b:5a:45:14:bf:
72:1b:d3:99:7a:15:9d:67:69:3f:9f:db:8d:d0:1e:03:26:6f:
44:02:c7:fe:5c:5f:ca:a3:7e:85:a8:3f:c9:2e:bc:88:3b:ef:
7d:67:b1:9e:68:42:30:2a:09:eb:6f:fc:46:49:57:83:3c:f7:
f3:97:16:74:ce:a7:f5:6a:ac:65:66:9f:b4:a7:79:40:a0:7f:
59:38:38:00:9b:dc:b1:c7:8b:d0:a2:70:b7:87:f3:de:e3:2c:
2e:89:d3:68:3b:55:39:70:8d:6a:a4:49:a1:a3:45:89:e7:50:
5a:37:2f:5f:ed:0c:fb:ee:2b:3e:31:8b:41:38:a3:6f:a8:5d:
d4:32:72:16:1a:a1:b7:1b:e6:93:56:b2:ec:f8:4b:3e:e2:14:
4e:8a:d0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:28 2024 by rpki-client on console.sobornost.net