Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/XFSnAZoyFQc1xtVNoyEQnif4-h8.roa
File: XFSnAZoyFQc1xtVNoyEQnif4-h8.roa (raw, json)
Hash identifier: NUSbw2ld/ywoDAmoD/72E1Mf2MIWMpqzuGR+D6ZorP4=
Subject key identifier: 5C:54:A7:01:9A:32:15:07:35:C6:D5:4D:A3:21:10:9E:27:F8:FA:1F
Certificate issuer: /CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Certificate serial: 01856FA6F5B3B66FAD76B76FBA5E4128FB62
Authority key identifier: 97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/XFSnAZoyFQc1xtVNoyEQnif4-h8.roa
Signing time: Sun 01 Jan 2023 23:24:50 +0000
ROA not before: Sun 01 Jan 2023 23:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29432
IP address blocks: 195.140.192.0/22 maxlen: 23
2001:7f8:1d::/48 maxlen: 48
2001:67c:2b0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:f5:b3:b6:6f:ad:76:b7:6f:ba:5e:41:28:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748828d7b99b0a97017ec26bcbefe96fdbe9579
Validity
Not Before: Jan 1 23:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c54a7019a32150735c6d54da321109e27f8fa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cb:3c:85:e4:96:7c:1f:a7:0a:67:63:97:67:
10:07:f1:dd:31:a1:59:03:bd:40:e6:98:ca:27:52:
ec:7e:b7:42:19:46:2a:ee:82:24:a3:d1:83:c0:77:
72:12:92:74:a6:ae:d3:d3:bb:68:f3:44:b6:b3:a3:
9f:87:28:42:9e:82:7b:1a:62:8b:61:f8:4d:4f:06:
ce:47:23:a5:9d:cf:c0:c1:7e:a5:da:c8:d8:d2:d2:
c7:ef:87:39:a9:76:63:6f:ad:3e:01:d9:19:48:63:
c0:b6:6c:ed:4e:dd:dd:e0:27:72:2a:d1:bc:28:3f:
ef:b9:21:c9:9b:77:78:c1:c2:28:00:a2:99:f4:4f:
3b:37:c3:01:73:1a:bc:77:74:32:9c:d2:43:2f:32:
68:2f:53:d8:8d:79:1b:13:83:92:6c:7a:8d:8e:01:
95:59:9f:65:36:03:f3:c6:9f:55:78:b4:da:2c:ce:
bb:1b:0d:ab:af:22:e6:25:58:9a:58:10:5f:fe:42:
26:33:9c:eb:6d:3c:75:7f:df:31:bc:6d:29:69:10:
4f:aa:af:b5:86:d4:2f:c3:f7:a9:89:bf:fd:77:ec:
6b:c8:3e:1f:31:dd:d9:98:7d:19:6d:1c:93:d3:d1:
c1:0d:4c:a3:f1:e1:44:d7:e8:13:39:cf:f5:0e:56:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:54:A7:01:9A:32:15:07:35:C6:D5:4D:A3:21:10:9E:27:F8:FA:1F
X509v3 Authority Key Identifier:
keyid:97:48:82:8D:7B:99:B0:A9:70:17:EC:26:BC:BE:FE:96:FD:BE:95:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0iCjXuZsKlwF-wmvL7-lv2-lXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/XFSnAZoyFQc1xtVNoyEQnif4-h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1e1ebf-c3ac-49a1-b6a8-a4a075398b0e/1/l0iCjXuZsKlwF-wmvL7-lv2-lXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.140.192.0/22
IPv6:
2001:67c:2b0::/48
2001:7f8:1d::/48
Signature Algorithm: sha256WithRSAEncryption
75:2f:52:71:b0:d1:50:c0:1b:f6:d0:ba:14:98:dc:69:a6:db:
24:0f:0a:f6:d6:bf:21:ab:8e:00:08:3c:18:d2:ba:58:f8:57:
cb:fe:02:43:03:5d:41:83:bf:24:1f:03:f7:e9:d0:2f:fd:fa:
1e:65:1b:4b:47:e3:19:08:0c:cc:66:4d:69:e7:66:53:c7:f2:
ef:f7:9d:79:e5:aa:49:13:c1:13:fd:e3:d6:7b:6a:20:f3:3a:
d3:09:2a:80:c1:dd:b4:87:ee:bb:a9:19:19:0b:14:be:97:94:
a0:76:08:2d:ed:78:cb:32:9f:24:1e:bb:c1:61:f8:9e:eb:1a:
5a:a9:65:56:69:d9:f1:4b:b1:84:c9:76:70:07:3a:ed:94:25:
10:63:4f:36:15:91:df:47:38:8a:95:9f:ec:e8:57:0e:74:84:
42:2c:3a:7d:0b:e0:08:78:d9:1d:87:76:92:6e:83:c8:a5:cb:
e3:3e:93:5c:f0:5b:dc:be:0d:5b:a8:9f:aa:60:aa:9c:72:81:
c1:3c:73:5a:aa:6d:63:cd:66:8d:b0:d8:59:6b:1b:6b:f0:81:
5e:36:a5:42:32:84:a7:63:fa:a8:8f:44:b0:89:ff:1f:b9:84:
6a:f9:82:1c:2e:3c:ff:a6:0c:59:27:71:b8:55:ad:36:b8:97:
30:0b:66:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:36 2024 by rpki-client on console.sobornost.net