Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/61zSdamqbcp3uRfQdLZXqGbStQU.roa
File: 61zSdamqbcp3uRfQdLZXqGbStQU.roa (raw, json)
Hash identifier: HaKq9t8aMbcofvRCwUFaH1h5QcUkY7rWWOhdMPnD9I4=
Subject key identifier: EB:5C:D2:75:A9:AA:6D:CA:77:B9:17:D0:74:B6:57:A8:66:D2:B5:05
Certificate issuer: /CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Certificate serial: 018ADE20B4799DC80AB371A6CC45F3732913
Authority key identifier: E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/61zSdamqbcp3uRfQdLZXqGbStQU.roa
Signing time: Thu 28 Sep 2023 23:29:59 +0000
ROA not before: Thu 28 Sep 2023 23:29:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49588
IP address blocks: 176.101.192.0/19 maxlen: 19
193.169.134.0/24 maxlen: 24
193.169.135.0/24 maxlen: 24
2001:67c:2c44::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:20:b4:79:9d:c8:0a:b3:71:a6:cc:45:f3:73:29:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8cf15bf6b1f2690f20901d1896e2d880fe8886e
Validity
Not Before: Sep 28 23:29:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb5cd275a9aa6dca77b917d074b657a866d2b505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:7a:3a:14:09:ea:61:b8:45:fa:23:2d:48:
0d:ce:ad:55:4d:83:1a:70:58:8e:25:5b:23:8c:73:
8c:05:d7:24:59:c1:2c:d3:26:58:48:6f:35:cc:81:
48:2f:cf:70:df:50:9b:bb:2d:e5:97:89:59:15:5e:
25:de:9d:ae:68:8d:e4:0a:89:3f:67:f7:25:40:d1:
2c:fb:0f:ae:6b:54:97:48:ae:61:91:04:9a:df:a2:
86:94:c2:c3:6f:f7:e4:c3:53:69:fd:b4:49:3e:bc:
e2:1e:bd:ce:72:b9:fc:c1:f9:39:7e:64:ae:fc:4e:
69:7c:59:1f:a2:d9:81:5b:ec:72:36:1f:8f:ad:95:
24:94:f5:bf:7e:ed:90:fe:9f:52:8a:eb:a9:99:47:
fb:59:be:a7:d2:e5:18:1f:a7:c4:fe:d7:70:60:b2:
4e:8c:2e:cb:7f:3e:da:b6:06:78:5e:25:4d:c8:8c:
e4:af:9a:f7:44:a7:37:73:81:00:34:81:2d:66:0b:
7f:21:bc:aa:fd:bb:dc:0e:39:d1:34:e6:ac:2b:dd:
6f:f1:86:30:fb:5c:0d:f2:7a:a7:e9:69:2a:30:89:
0f:21:d1:3c:ba:61:50:2a:90:a4:29:7a:f6:72:b3:
eb:66:0a:cd:62:e7:0b:d3:98:bf:3c:a6:82:88:f1:
b1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5C:D2:75:A9:AA:6D:CA:77:B9:17:D0:74:B6:57:A8:66:D2:B5:05
X509v3 Authority Key Identifier:
keyid:E8:CF:15:BF:6B:1F:26:90:F2:09:01:D1:89:6E:2D:88:0F:E8:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/61zSdamqbcp3uRfQdLZXqGbStQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d83576-c685-4624-9d88-9911fa984e2e/1/6M8Vv2sfJpDyCQHRiW4tiA_oiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.192.0/19
193.169.134.0/23
IPv6:
2001:67c:2c44::/48
Signature Algorithm: sha256WithRSAEncryption
7f:8c:a0:4d:9a:ad:a0:93:aa:9d:e6:67:7b:d6:ba:2d:04:a3:
c0:46:ad:24:89:39:27:22:59:86:de:29:e1:66:50:33:d4:23:
de:f6:d2:3c:70:7f:85:4d:53:e1:3f:fc:0d:b3:82:b9:66:59:
1d:3b:f6:0d:9d:ce:53:75:6f:eb:78:db:ec:b3:62:9d:91:cd:
94:96:3d:56:94:7e:ba:09:b0:75:b6:a4:86:ec:5e:fa:a5:f2:
71:83:c2:4d:ce:5a:8d:ff:03:7b:41:db:2b:13:0b:24:0a:1d:
7a:3c:2a:23:63:e4:a3:ea:49:70:d9:32:c3:7f:1d:43:7b:11:
81:d3:13:eb:43:60:8d:92:dd:5f:c7:8d:f7:73:36:09:e3:df:
b9:13:ba:18:2e:df:5f:14:d7:ba:7a:f7:19:6f:47:d3:12:ad:
7e:c7:8b:a0:91:e8:4b:24:d9:53:c8:0b:fc:c6:25:9e:b3:17:
75:ea:58:4c:87:5e:0a:9e:cf:90:dc:0a:06:c4:e2:d7:e3:77:
50:e9:bf:fa:d4:03:1e:13:0d:03:cb:46:6b:ba:9e:fc:3d:3a:
f2:b3:ed:6b:4f:ed:10:d9:17:2a:e6:16:0f:fe:36:4d:b2:e1:
f2:79:38:e5:27:ce:a0:4f:be:4d:c2:f6:ed:b6:5e:5f:07:25:
79:7b:f8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:35 2024 by rpki-client on console.sobornost.net