Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/W5XTLLyZybTUSq56EPL_kmFXAD0.roa
File: W5XTLLyZybTUSq56EPL_kmFXAD0.roa (raw, json)
Hash identifier: I5cRKmUF3hY6/PXIcrbPaI+IXgsnx/3VOd8lqmgCT7g=
Subject key identifier: 5B:95:D3:2C:BC:99:C9:B4:D4:4A:AE:7A:10:F2:FF:92:61:57:00:3D
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01856F14E6ECD4C9D9E776B0F7A0D9746F5A
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/W5XTLLyZybTUSq56EPL_kmFXAD0.roa
Signing time: Sun 01 Jan 2023 20:45:18 +0000
ROA not before: Sun 01 Jan 2023 20:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203930
IP address blocks: 212.110.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e6:ec:d4:c9:d9:e7:76:b0:f7:a0:d9:74:6f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Jan 1 20:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b95d32cbc99c9b4d44aae7a10f2ff926157003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:26:d3:ce:0c:51:06:a0:4c:2f:5f:49:d3:
03:e3:ac:dd:f8:af:75:f9:cb:25:3a:69:e0:34:51:
86:45:af:fd:10:88:81:46:69:dc:65:18:6d:08:a5:
74:22:ce:09:c0:a0:83:ff:57:c9:b2:7f:b7:18:8d:
5a:97:64:4d:93:6f:1a:19:1c:25:06:50:c4:e0:b0:
24:07:a2:48:d0:42:0f:04:49:bf:87:45:d0:fc:67:
40:99:75:8f:ca:5d:fa:f0:9b:0b:a7:da:27:52:98:
3d:9a:ef:44:7d:78:4a:f4:23:d9:4f:5a:1c:7e:82:
7c:b0:50:bb:8b:12:43:49:2b:89:05:09:1d:3d:11:
e3:8f:72:19:c4:a7:e5:a8:14:31:7f:28:da:d7:c6:
ec:8d:c0:92:90:e4:ff:77:10:ce:6b:36:ea:0b:8b:
45:58:be:1d:0d:c1:b5:04:8e:62:af:52:85:d5:c7:
43:05:43:53:17:9b:f5:0e:2a:da:a5:fd:50:aa:f8:
e6:7d:72:58:21:5d:e1:0d:9a:bc:56:33:94:e5:dc:
4c:86:b8:2d:0b:b4:ea:c2:b2:89:8c:d4:f4:1d:32:
08:95:44:4b:13:52:50:40:6f:36:88:e8:9e:b7:cb:
41:c3:57:2e:b5:88:cc:c4:8a:c0:84:38:4a:a8:89:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:D3:2C:BC:99:C9:B4:D4:4A:AE:7A:10:F2:FF:92:61:57:00:3D
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/W5XTLLyZybTUSq56EPL_kmFXAD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.143.0/24
Signature Algorithm: sha256WithRSAEncryption
35:52:3a:92:4a:ec:d6:63:88:9d:07:10:a4:87:74:0c:89:df:
8e:c9:ab:48:bd:a1:8e:89:29:66:fb:18:7f:df:f2:68:ed:04:
98:4e:f0:5e:db:cd:85:ab:06:74:d0:ef:35:76:d3:77:8f:04:
3e:39:f2:d5:ec:87:22:0f:6c:26:57:33:a2:6a:b7:b4:85:e2:
c8:71:01:fe:dc:74:1f:2f:2b:3f:f5:74:49:34:76:33:ff:41:
00:c4:f2:4b:d0:9d:1d:63:36:dd:be:ee:04:f4:b9:dd:f2:a9:
6b:c1:97:38:80:9b:14:71:0a:c4:d5:24:1e:5d:85:70:7d:ac:
dc:35:53:03:61:80:5a:06:de:cc:f9:33:a5:2e:f7:e8:16:83:
fa:e8:b5:7b:3f:df:25:72:8f:4b:d7:d3:45:d2:21:03:72:e6:
b1:b5:3f:1c:22:cf:99:60:08:90:00:f7:bf:2d:42:fd:a8:88:
4b:bb:00:c8:24:e0:2b:69:1f:d6:54:91:ce:c9:8d:61:1c:8f:
41:13:71:88:ad:d1:ea:ff:3a:25:8c:fb:8c:12:6d:21:5f:06:
c5:c4:31:03:72:b5:ef:02:8d:c1:6f:b1:50:88:83:d1:95:86:
54:2a:aa:ef:ef:d3:5b:e5:98:41:a8:2d:ed:30:0e:b8:09:ce:
2d:b2:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net