Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/eDGG_esG_SUFDxKhBE71UjdP14o.roa
File: eDGG_esG_SUFDxKhBE71UjdP14o.roa (raw, json)
Hash identifier: +bUY12V+UGaTRygpyH8K5plQwTruDCmgsa3ooXhyEtY=
Subject key identifier: 78:31:86:FD:EB:06:FD:25:05:0F:12:A1:04:4E:F5:52:37:4F:D7:8A
Certificate issuer: /CN=17be827a580de61538ddefa28239468c4e901b40
Certificate serial: 01856CC16C24B24AC3188A99892EE78209EC
Authority key identifier: 17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/eDGG_esG_SUFDxKhBE71UjdP14o.roa
Signing time: Sun 01 Jan 2023 09:54:53 +0000
ROA not before: Sun 01 Jan 2023 09:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60700
IP address blocks: 176.120.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:6c:24:b2:4a:c3:18:8a:99:89:2e:e7:82:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17be827a580de61538ddefa28239468c4e901b40
Validity
Not Before: Jan 1 09:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=783186fdeb06fd25050f12a1044ef552374fd78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:18:3b:a3:03:14:ab:0f:84:fa:7d:d5:59:
c4:d0:c2:46:40:a3:fb:03:30:8a:39:4a:ad:7d:92:
fa:6a:f0:d1:6b:e0:e6:96:a2:4f:79:fc:4c:f3:81:
57:29:72:9c:c4:7f:c7:b1:92:aa:cc:f9:2c:9c:10:
b7:88:78:88:de:06:b8:a5:5d:e6:bc:28:79:d1:ec:
6e:28:f7:9d:d3:4d:47:46:26:41:63:49:5e:f3:72:
5e:9c:9b:dc:68:c5:c8:05:15:76:f4:42:b5:57:4e:
64:e9:0a:9c:b2:f9:74:f0:ec:bb:12:fe:da:72:65:
c8:43:c7:f5:57:58:52:89:ef:56:c9:63:bc:48:17:
e3:97:d4:41:4d:1a:50:f2:14:94:4f:ff:fd:58:87:
ff:ca:81:aa:fa:0c:8c:b3:78:57:ec:a9:71:7b:00:
3b:bd:42:c3:85:c6:f9:09:28:ae:23:8e:bf:9d:4b:
9b:08:20:9e:ee:1d:a8:9f:bf:55:f6:20:0d:3a:68:
20:97:06:e8:ec:4b:ca:9d:d8:ff:6a:0a:71:79:98:
b1:2f:a5:fd:29:ce:d3:0b:de:c6:76:70:4e:3c:36:
78:25:a1:aa:67:ae:5a:24:c1:83:e5:40:e8:e8:f5:
d9:ac:e6:1e:c8:1d:83:6f:25:4b:d9:a6:57:c5:76:
85:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:86:FD:EB:06:FD:25:05:0F:12:A1:04:4E:F5:52:37:4F:D7:8A
X509v3 Authority Key Identifier:
keyid:17:BE:82:7A:58:0D:E6:15:38:DD:EF:A2:82:39:46:8C:4E:90:1B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F76CelgN5hU43e-igjlGjE6QG0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/eDGG_esG_SUFDxKhBE71UjdP14o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/490e01-caf9-4d44-8f57-a1d9d0f88629/1/F76CelgN5hU43e-igjlGjE6QG0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:12:02:de:c7:80:ab:68:dc:07:95:ca:f2:c6:c6:52:3c:e4:
78:65:86:d3:61:64:2b:bb:c6:fc:0f:9c:d5:9d:c1:59:28:97:
d5:09:cf:f1:95:17:7d:10:ec:e0:ec:7b:7e:60:1b:5a:47:e7:
ba:18:5a:ad:57:72:6f:ae:aa:b9:1c:85:21:23:43:81:4a:59:
e9:7b:f0:66:69:27:94:b5:13:52:82:be:2c:3d:2f:73:46:45:
f5:b7:31:de:4a:ed:bc:ae:67:0c:99:ca:77:07:33:98:ce:ea:
99:ea:6e:0e:83:0f:1c:84:a9:dc:45:de:8f:23:51:af:9e:a9:
28:08:20:d5:17:f3:d2:3a:5e:a1:cf:6b:d3:45:1f:cb:a5:1f:
72:f6:8c:e1:a4:2d:47:fc:22:e8:fd:98:17:18:e7:96:32:3d:
03:69:0c:c4:fd:47:fd:77:b0:b8:1f:c2:19:8e:2d:c7:83:99:
dd:9a:e5:29:3e:e6:5e:01:07:ba:35:53:cf:b3:ef:4b:f1:12:
7f:02:40:80:ae:18:ff:38:c5:71:71:bf:ca:5b:c1:9c:84:97:
b8:13:14:a0:52:12:e2:ec:40:cd:37:fb:56:61:b6:41:55:53:
9d:53:37:ca:ca:d0:03:3e:72:1c:f0:35:e2:cf:38:98:2b:36:
00:5b:36:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net