Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/7N6R_J9f15QaIpf-0DIvHArU-Mc.roa
File: 7N6R_J9f15QaIpf-0DIvHArU-Mc.roa (raw, json)
Hash identifier: vCy+EUH94tKYg+YbviSnt2X8/otY63hTGhELE6ifp70=
Subject key identifier: EC:DE:91:FC:9F:5F:D7:94:1A:22:97:FE:D0:32:2F:1C:0A:D4:F8:C7
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 01856E1429C378B16B569D5CACAA3560B230
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/7N6R_J9f15QaIpf-0DIvHArU-Mc.roa
Signing time: Sun 01 Jan 2023 16:04:53 +0000
ROA not before: Sun 01 Jan 2023 16:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48682
IP address blocks: 193.169.133.0/24 maxlen: 24
176.124.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:29:c3:78:b1:6b:56:9d:5c:ac:aa:35:60:b2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 16:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecde91fc9f5fd7941a2297fed0322f1c0ad4f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:77:7d:79:a5:f7:d0:10:52:16:4e:7c:ad:c9:
9b:aa:6c:01:6a:e1:74:bd:e1:de:3d:bc:9b:bf:c2:
69:a6:28:92:6d:ee:bf:0b:f4:76:59:7b:9d:3a:a0:
3c:ac:d2:61:ba:8b:f0:8f:69:4d:5c:a2:cd:42:f2:
cf:ab:ba:76:69:fc:5f:a0:9e:72:c6:39:25:10:db:
88:97:55:47:53:4b:4c:d1:70:66:a8:b2:c1:6a:c1:
a6:23:2d:cc:47:df:73:8e:68:90:81:43:a6:65:1f:
a3:7c:df:f8:53:c4:62:f4:3f:86:a3:90:d3:5e:e6:
df:17:d3:52:f8:50:a2:49:ad:36:6d:66:3d:72:48:
6b:72:2a:2a:10:4f:bb:c3:d9:0a:00:e7:3d:fe:ef:
cb:fe:69:a6:dd:8e:bb:5b:ba:c8:e3:36:b9:dc:f2:
ef:90:5f:1e:2b:c2:58:54:b8:68:26:39:b7:6a:72:
f7:1a:c2:d4:bb:d6:e3:95:38:50:eb:89:7d:89:1b:
20:1b:cd:f9:db:e5:26:87:e9:58:83:43:08:44:97:
fa:dc:fe:23:5a:24:7b:e7:05:58:53:0d:78:a0:3a:
85:82:1f:5b:1d:b8:cf:d2:d8:42:12:4e:b3:73:67:
08:df:d3:f8:20:18:fe:6b:1b:7f:a3:b9:ea:43:f2:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DE:91:FC:9F:5F:D7:94:1A:22:97:FE:D0:32:2F:1C:0A:D4:F8:C7
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/7N6R_J9f15QaIpf-0DIvHArU-Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.70.0/24
193.169.133.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4d:1a:1c:ef:2a:87:6b:7c:33:96:96:3b:44:fe:1b:2e:6f:
6a:22:d3:1c:bb:c5:09:01:f0:57:e4:ab:e4:f9:08:0e:05:0d:
cf:eb:19:8a:41:52:7d:a5:8d:75:93:c9:5c:cd:fc:fb:aa:18:
53:c7:24:c5:86:ff:c2:f2:59:99:9d:af:e2:bd:ac:9c:c6:f3:
c1:02:80:a8:9c:a3:43:a9:0a:be:de:92:64:63:64:5b:ef:6d:
af:87:79:2e:d0:ee:3b:65:68:a6:04:9a:16:be:a0:85:ff:bf:
d2:16:10:a6:ad:1a:1c:5c:70:82:fd:e1:29:9b:a7:01:d6:57:
2f:35:31:75:3e:85:57:47:53:45:d5:07:47:c0:71:f6:ff:1c:
2c:fa:a0:46:40:07:f9:9c:8f:2f:09:6c:e3:79:8f:0f:e4:ee:
34:3e:ef:d1:d3:a5:3e:e5:1e:4f:bb:ca:db:a2:af:60:58:15:
d1:ac:35:76:91:da:8b:a8:9d:bc:8b:3e:a8:e1:47:8b:84:60:
db:7d:12:5c:12:fd:ae:fe:73:49:bc:af:31:0f:ed:83:47:83:
87:8b:66:fc:d3:6a:3c:9c:f2:cc:b3:5f:75:f8:c7:d2:ff:58:
cb:39:78:62:8b:75:5a:e0:d4:54:9c:d2:7d:0a:86:0b:5e:c6:
9e:b3:78:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net