Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/0V5K0Hbp3mQWbs3uhCQVuDG7_z4.roa
File: 0V5K0Hbp3mQWbs3uhCQVuDG7_z4.roa (raw, json)
Hash identifier: suUgMJBbAbhgWP9u4DJmCBtwIR1U8uaWy4HnmgBaF5A=
Subject key identifier: D1:5E:4A:D0:76:E9:DE:64:16:6E:CD:EE:84:24:15:B8:31:BB:FF:3E
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01857203470676CAD424CEDB608C54798008
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/0V5K0Hbp3mQWbs3uhCQVuDG7_z4.roa
Signing time: Mon 02 Jan 2023 10:24:55 +0000
ROA not before: Mon 02 Jan 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207050
IP address blocks: 213.162.222.0/24 maxlen: 24
213.162.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:47:06:76:ca:d4:24:ce:db:60:8c:54:79:80:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jan 2 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d15e4ad076e9de64166ecdee842415b831bbff3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:d5:b5:0d:3e:00:50:aa:c5:4e:b2:39:ab:
d2:6f:dd:df:ad:40:5e:7b:8b:12:e6:02:9f:d0:69:
53:3d:07:3f:d7:c1:c7:ea:8f:8c:ce:78:b1:16:82:
4d:b0:03:1b:08:11:0b:1a:95:6e:fb:67:8e:a7:8c:
72:d3:6a:20:a0:1c:a6:b4:6a:5b:9e:8b:2b:3f:80:
86:d6:62:f6:13:f9:4e:5e:e1:ec:3b:de:79:14:b6:
8a:42:e0:30:8f:24:a8:80:16:39:d4:4d:1f:a1:b9:
72:7b:64:88:89:5c:23:e5:a4:e6:9f:78:79:bf:0d:
ca:81:c6:27:85:b4:03:d7:28:54:de:f1:7e:17:de:
cb:89:05:d1:3c:61:e1:b3:36:5b:9c:b8:0e:8f:8d:
6e:85:ac:21:5a:55:19:66:cc:2a:64:b6:0a:f0:4f:
ae:40:c8:80:f4:09:0c:29:f9:c7:bd:bd:af:05:ce:
9e:d0:c3:ed:a1:6e:0a:fb:d5:a9:88:23:80:27:fe:
40:5d:7e:fa:e5:d0:76:c4:01:c8:10:55:39:32:aa:
82:5b:3e:86:8b:4a:6f:fe:7a:47:e0:c2:96:8a:0d:
32:5e:22:23:80:7f:ee:2b:19:54:c8:a5:05:3c:e8:
44:25:82:86:71:3c:f2:a7:fa:7e:fd:4a:3d:bf:d5:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:4A:D0:76:E9:DE:64:16:6E:CD:EE:84:24:15:B8:31:BB:FF:3E
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/0V5K0Hbp3mQWbs3uhCQVuDG7_z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.162.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:75:91:48:77:4f:b7:c8:8f:9e:7d:12:eb:31:d3:66:69:49:
22:6f:b2:eb:2e:1d:7b:95:25:ce:56:1a:a2:4e:cc:77:06:74:
ff:0b:0b:eb:4c:97:07:9f:2a:8f:28:c8:af:32:bb:64:9f:70:
64:7c:99:4d:49:6d:75:5b:36:93:b0:00:09:c3:43:2e:d5:02:
0d:8a:5e:a1:f2:e3:05:11:b7:18:8c:bd:b7:0e:fc:80:72:12:
de:2d:11:76:c1:d0:f8:84:51:ae:43:35:7d:ee:09:c4:ea:1f:
87:df:f8:df:cb:7c:1f:f8:3d:ce:c3:1e:7e:90:0f:b1:ca:2f:
d6:0a:8a:3f:fe:45:5c:7d:61:fd:47:39:72:75:cc:e4:0a:32:
d5:64:03:72:b8:aa:fe:d8:2e:1d:d2:94:d4:16:fa:ce:1c:e1:
08:51:b2:b6:87:d9:a5:6e:24:16:9b:8f:94:d5:f7:11:36:02:
00:24:71:c4:0a:8a:1c:04:5d:d4:52:2f:4b:3c:ce:4c:d9:6d:
be:37:07:47:03:70:31:7a:42:cd:d4:78:7f:ed:dd:d6:8f:2b:
1a:ff:5e:b1:ad:2d:cb:47:75:47:65:33:bb:97:8c:47:70:a3:
b9:22:14:a6:72:d4:16:5f:a3:a5:ef:fb:c9:7c:d1:d8:59:3d:
39:f8:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:00 2024 by rpki-client on console.sobornost.net