Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/aK8UF_xITnTK6jZgBavlY2YZm1c.roa
File: aK8UF_xITnTK6jZgBavlY2YZm1c.roa (raw, json)
Hash identifier: cqAWncf1stWbhCdnRGEfoE6zL/EUv5yiLmifvY52CBI=
Subject key identifier: 68:AF:14:17:FC:48:4E:74:CA:EA:36:60:05:AB:E5:63:66:19:9B:57
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 018570FBA629B4F8FAC71122CAEEA4B783A0
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/aK8UF_xITnTK6jZgBavlY2YZm1c.roa
Signing time: Mon 02 Jan 2023 05:36:58 +0000
ROA not before: Mon 02 Jan 2023 05:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41203
IP address blocks: 89.207.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:a6:29:b4:f8:fa:c7:11:22:ca:ee:a4:b7:83:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Jan 2 05:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68af1417fc484e74caea366005abe56366199b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:31:de:10:38:89:8b:92:90:b6:65:1f:df:
4c:c8:ff:9f:d2:da:67:42:e4:49:b6:4d:e3:20:ef:
d2:21:82:81:30:fb:c6:b7:4e:d9:23:0f:8d:dd:34:
38:10:c1:9f:97:27:f2:69:03:6d:a4:5a:b6:1b:30:
04:eb:fe:15:09:e5:43:9b:cf:1c:5d:2f:be:0a:87:
42:2a:e8:17:9f:55:c7:c1:3b:64:bf:7c:96:20:42:
07:29:69:2c:72:bf:d6:62:71:3f:47:ad:2a:7b:d9:
5d:5d:77:a5:77:e7:52:b4:d6:4f:a7:77:e0:e1:76:
d6:4c:af:db:ab:d3:55:21:18:f2:50:43:14:81:a3:
d5:96:8c:c3:8c:c0:47:e7:48:64:3c:fd:c6:e1:ee:
9e:80:de:28:45:0b:53:a6:1c:c2:39:38:14:2f:64:
10:00:9b:bf:45:f2:10:54:6b:40:52:e8:a4:72:4e:
83:d6:3d:fb:6e:22:55:19:30:44:f6:88:fd:54:01:
4a:6d:27:17:29:d5:3e:86:09:5b:4b:3e:d0:8b:90:
42:a4:b8:cf:cc:91:12:31:d7:ab:75:05:ac:ec:be:
59:8a:8c:02:2b:81:19:dc:a3:d3:f5:9b:07:98:ca:
58:08:5e:31:0c:35:67:3d:44:15:3b:1d:ca:d9:2c:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:14:17:FC:48:4E:74:CA:EA:36:60:05:AB:E5:63:66:19:9B:57
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/aK8UF_xITnTK6jZgBavlY2YZm1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.48.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:4e:69:39:b7:a0:4c:bb:df:c9:56:98:05:09:45:eb:15:d0:
59:37:b0:8b:a6:31:0e:e5:ec:f4:27:8b:6c:8c:01:ee:8e:cd:
a1:2b:33:5d:e7:d3:9e:f7:81:fc:35:76:0d:2e:c6:5e:06:13:
ee:22:1d:8c:e1:81:e9:bc:5c:2c:aa:3e:cd:76:3f:1e:fd:a6:
b0:84:67:79:ce:3a:88:18:a0:69:af:a4:df:7e:96:d8:51:e9:
f6:6a:d1:fe:4e:e7:0f:56:b3:0e:0c:ad:3d:a7:f9:e9:8d:44:
c2:e3:93:32:34:93:8f:3f:ed:a3:c6:a1:60:33:e2:31:97:8d:
5f:67:12:65:4d:66:86:c9:3e:c5:ca:77:05:03:53:06:42:58:
1c:08:ee:c3:38:7d:d1:bd:56:d4:96:5c:fe:8e:4f:e1:c7:79:
ab:2c:0c:4b:44:95:ab:05:2d:0b:de:60:f4:9f:04:5e:40:38:
d6:c3:f6:4f:6c:df:71:7f:5c:cd:ad:dc:e8:7b:05:18:81:29:
c4:77:d0:56:20:e6:45:d8:5a:39:8d:92:58:1d:0d:be:64:88:
34:9c:57:dd:a3:75:e2:7e:55:0c:4d:ae:9e:e7:63:e0:62:e0:
13:c0:97:f4:c1:de:22:c5:3f:d1:ca:69:cb:40:d3:a9:b9:6f:
8f:b9:dc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:15 2024 by rpki-client on console.sobornost.net