Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/L1UdNhVPnnsm71UhkxNFuoMrVpw.roa
File: L1UdNhVPnnsm71UhkxNFuoMrVpw.roa (raw, json)
Hash identifier: k51gubOW2a3eNtaE8wiKSIL4pJvhfZUJLNHevv4lLog=
Subject key identifier: 2F:55:1D:36:15:4F:9E:7B:26:EF:55:21:93:13:45:BA:83:2B:56:9C
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 01856E142A98CCBEDB7BB150BBD12B53574B
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/L1UdNhVPnnsm71UhkxNFuoMrVpw.roa
Signing time: Sun 01 Jan 2023 16:04:53 +0000
ROA not before: Sun 01 Jan 2023 16:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53667
IP address blocks: 176.124.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:2a:98:cc:be:db:7b:b1:50:bb:d1:2b:53:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Jan 1 16:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f551d36154f9e7b26ef5521931345ba832b569c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:f6:ef:03:e5:cd:db:69:f3:55:61:50:8d:
ed:da:34:a5:fa:0f:13:14:82:fd:68:c2:5a:76:15:
93:60:54:02:a0:8c:4e:f1:98:67:83:66:b7:46:3e:
5b:8b:06:ec:8b:e2:1c:40:d0:55:58:8e:b4:73:5d:
72:47:c0:1b:46:77:32:55:75:99:ab:67:d7:dc:c3:
35:5d:7b:3c:19:db:48:b5:fe:94:ec:0f:0f:fc:07:
87:72:af:16:2f:ef:36:7f:33:b3:93:7d:84:64:c3:
13:7c:2d:68:05:ce:6f:19:86:93:49:39:eb:0e:c2:
44:b9:5c:0f:4b:0c:d5:9d:fb:1b:89:ba:b5:9d:4c:
b3:38:7f:b7:ff:f1:b7:3a:0c:50:8d:91:e9:fb:9a:
e2:67:84:ac:e4:31:cd:3c:09:29:a9:54:72:01:1f:
8d:5d:b1:fb:3d:25:b5:61:1f:e0:d8:c2:3b:f4:72:
97:77:56:dc:3b:e3:96:25:0a:00:50:82:ed:50:31:
5d:79:84:b6:1f:ea:03:cd:80:bb:b6:67:d4:80:e4:
e1:e8:a8:ae:00:33:8f:7d:93:67:d2:32:4f:cd:0a:
71:50:27:0a:ef:3f:31:99:61:2c:83:62:28:1b:ad:
53:61:1a:2d:0b:1c:ed:19:66:30:61:1d:2a:07:10:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:1D:36:15:4F:9E:7B:26:EF:55:21:93:13:45:BA:83:2B:56:9C
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/L1UdNhVPnnsm71UhkxNFuoMrVpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d6:7d:8f:96:d5:93:ed:f1:b3:3e:e1:dd:7c:6d:2f:30:e7:
df:54:d3:40:45:ad:40:a0:69:ac:d6:4e:62:b2:d1:e4:4b:25:
87:b2:70:ab:8d:85:0d:94:3d:0b:c2:81:2e:13:42:4c:53:c0:
63:d9:26:23:64:af:e5:72:f1:5d:38:79:63:fe:f5:5b:1a:02:
63:51:62:61:31:d3:6c:ea:05:e4:3c:cb:bc:0f:71:a7:99:33:
3f:1c:49:ff:6d:0b:85:50:a2:31:5a:8d:b2:18:ed:d7:43:ea:
ad:b6:e8:80:67:7e:ad:88:00:50:cf:1d:51:35:b3:96:77:3a:
61:8b:f8:60:86:4e:82:92:5e:51:f5:0e:1a:3c:70:b2:bb:71:
58:60:74:5b:f4:65:c7:00:63:38:53:74:d3:b5:d7:ab:da:41:
a7:ef:24:48:22:7a:25:1d:2c:e2:c5:3d:03:ce:b9:bd:79:3a:
9a:33:f9:c3:de:22:39:16:6b:36:87:7e:4d:6a:44:c1:cf:15:
82:f6:12:06:10:34:de:2f:89:67:ff:3f:96:31:df:cc:1d:a0:
81:dd:55:15:56:15:95:9e:21:a5:78:04:3f:2f:f5:f5:67:51:
d6:e0:d2:c8:08:c9:9f:16:64:ff:3b:20:4e:bf:73:36:4e:5f:
f3:9c:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:42 2024 by rpki-client on console.sobornost.net