Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/sDljouDbJC2enpUW3z7x8Nmxe9c.roa
File: sDljouDbJC2enpUW3z7x8Nmxe9c.roa (raw, json)
Hash identifier: JzUAZ9Qlj0InPam9at4EbW1dhT+CN2e3XbcmyJO6gsc=
Subject key identifier: B0:39:63:A2:E0:DB:24:2D:9E:9E:95:16:DF:3E:F1:F0:D9:B1:7B:D7
Certificate issuer: /CN=60b28e2723955a3f63e47b3230317eae9292ff32
Certificate serial: 0185701EE4DB0955CA736E6DC9F031CC8FEF
Authority key identifier: 60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/sDljouDbJC2enpUW3z7x8Nmxe9c.roa
Signing time: Mon 02 Jan 2023 01:35:50 +0000
ROA not before: Mon 02 Jan 2023 01:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212344
IP address blocks: 2001:67c:1b18::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e4:db:09:55:ca:73:6e:6d:c9:f0:31:cc:8f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b28e2723955a3f63e47b3230317eae9292ff32
Validity
Not Before: Jan 2 01:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b03963a2e0db242d9e9e9516df3ef1f0d9b17bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:cd:34:20:43:8d:42:97:fa:ad:b0:80:b5:
df:e0:d0:61:b6:1c:f4:3d:98:3a:a4:30:36:f5:30:
6d:d6:e1:e7:f6:2a:4b:17:62:20:21:49:26:81:5b:
c6:7c:3c:d4:b1:a0:12:ff:00:db:80:47:ea:a7:67:
59:e1:1e:56:27:53:22:ea:2f:44:23:5b:ca:fc:42:
23:30:4d:73:4b:b9:8b:95:4b:06:b5:1e:60:3d:6b:
cf:a3:94:a9:33:89:cd:52:26:1d:18:01:2f:c8:0a:
11:0e:e4:0e:31:8e:e8:90:81:56:f2:60:69:c6:c6:
e1:e8:e1:a5:16:52:be:26:43:c3:a5:78:d4:52:dd:
b8:15:84:ce:75:0b:b7:4a:4a:fc:d7:61:72:c5:a8:
69:c8:78:13:09:10:27:66:b1:4a:2e:a5:38:6c:fc:
61:fa:4e:38:dd:00:40:55:46:00:74:f5:cb:7c:83:
81:22:97:c6:0d:46:7c:e4:fc:76:cd:23:a6:1b:09:
1c:8b:1c:90:91:9a:78:b0:8d:bb:c6:4a:6d:77:b0:
9f:92:2f:da:b4:81:49:84:64:00:e8:6f:f5:f2:1c:
c4:34:ea:4b:74:74:3a:84:94:68:e8:7d:94:3f:c4:
ec:09:c6:78:25:c2:3a:9b:7b:1e:7e:98:18:9e:79:
6b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:39:63:A2:E0:DB:24:2D:9E:9E:95:16:DF:3E:F1:F0:D9:B1:7B:D7
X509v3 Authority Key Identifier:
keyid:60:B2:8E:27:23:95:5A:3F:63:E4:7B:32:30:31:7E:AE:92:92:FF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLKOJyOVWj9j5HsyMDF-rpKS_zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/sDljouDbJC2enpUW3z7x8Nmxe9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0037eb-5e0b-4c2b-a94c-1dc3b8c61e6c/1/YLKOJyOVWj9j5HsyMDF-rpKS_zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1b18::/48
Signature Algorithm: sha256WithRSAEncryption
17:5b:cd:58:48:8b:39:8f:61:8f:e0:c5:49:5a:3d:48:42:39:
04:e9:d7:da:39:9d:d4:57:87:85:a9:03:ea:00:3c:09:a3:a4:
d8:25:9d:dd:29:36:b2:a5:7e:92:fa:42:d1:82:a9:eb:f6:23:
6d:34:4e:fb:01:f5:a0:3a:53:f3:d1:ab:4a:17:e4:03:99:8b:
e5:c9:f3:0e:c5:da:31:52:93:ef:11:23:6b:12:bd:4b:f7:46:
98:4e:75:87:1f:b3:7d:37:2e:e7:28:68:af:a1:c7:f5:2f:5c:
74:4c:78:73:48:27:fd:d8:4e:a8:4c:3a:01:c3:d2:97:80:06:
b9:92:3e:7e:1d:a6:49:01:0c:16:9f:fd:46:7b:71:b2:86:d2:
2f:d1:64:83:5c:2f:4c:5e:d4:91:29:c2:a6:1f:08:aa:5f:1a:
ff:93:a3:8d:7f:37:65:d1:ea:0d:f9:6c:42:7b:9f:da:88:00:
f8:1d:28:82:1b:90:08:36:7f:33:bf:ba:5a:d0:50:06:fb:84:
2b:09:51:43:f9:2f:96:e8:a6:46:e3:a6:e5:3e:57:45:ca:3b:
a8:e7:86:e8:99:0d:2e:51:98:c6:ad:e7:36:cb:8c:b4:71:66:
12:ed:15:ea:2b:01:2e:3a:3a:56:bb:e5:f8:48:52:2c:5a:0d:
fa:66:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:58 2024 by rpki-client on console.sobornost.net