Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/osyl-LovhB9zet8aMC2B76j7SBw.roa
File: osyl-LovhB9zet8aMC2B76j7SBw.roa (raw, json)
Hash identifier: cZd6N5WfD1KsY+XKzRHRrB3xT+fP4/MU0PwuGlBIM0o=
Subject key identifier: A2:CC:A5:F8:BA:2F:84:1F:73:7A:DF:1A:30:2D:81:EF:A8:FB:48:1C
Certificate issuer: /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial: 01856BF7D995EAD54F7F19DE302526FBF2DF
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/osyl-LovhB9zet8aMC2B76j7SBw.roa
Signing time: Sun 01 Jan 2023 06:14:43 +0000
ROA not before: Sun 01 Jan 2023 06:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42321
IP address blocks: 194.0.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:d9:95:ea:d5:4f:7f:19:de:30:25:26:fb:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Validity
Not Before: Jan 1 06:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2cca5f8ba2f841f737adf1a302d81efa8fb481c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:b2:39:3f:43:ef:16:97:79:ec:09:44:3e:
e5:c0:a4:44:1d:36:b9:a9:06:94:7b:99:3c:a3:e1:
55:27:60:d9:6b:73:69:98:b9:bc:a4:48:12:9e:a8:
42:2c:8c:da:d4:de:60:67:f0:45:77:cb:25:ca:55:
cb:b7:3c:57:a6:8a:7d:23:36:10:c9:3e:9e:87:51:
b6:8d:67:fd:01:55:28:0e:32:55:fa:56:ed:0a:b9:
20:81:d3:55:f6:08:63:c2:b2:7c:06:1b:3f:33:dc:
08:b9:27:ce:1e:82:7a:16:3a:3e:e4:d3:fd:c4:1e:
c8:d3:28:04:30:57:7d:c3:a3:53:67:0a:e5:28:29:
6a:a2:7d:d4:ff:7e:bd:16:9d:bb:fc:33:3d:84:55:
8f:70:5c:ca:cf:26:5d:f8:1c:73:00:f7:9b:96:96:
86:e1:b1:8f:47:99:ba:cf:f7:7c:d5:82:85:c1:55:
b1:be:e1:ae:8b:e9:6a:01:93:2f:91:4a:4d:e6:64:
4c:67:ac:30:ca:1f:54:4e:d6:0d:81:2a:cd:66:e1:
fd:7d:db:6f:8b:8a:00:0c:4c:d5:57:c5:0f:1f:d5:
bb:7c:b0:f6:ca:5d:ba:de:a4:3c:31:b8:0e:f4:51:
7d:56:af:16:43:81:6a:4d:d0:c3:dd:55:c0:f8:fb:
8a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CC:A5:F8:BA:2F:84:1F:73:7A:DF:1A:30:2D:81:EF:A8:FB:48:1C
X509v3 Authority Key Identifier:
keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/osyl-LovhB9zet8aMC2B76j7SBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d0:8d:ed:e9:0f:4f:c2:bb:af:da:fb:9f:86:57:56:42:a9:
d2:c8:9a:75:b9:be:19:50:42:95:ff:51:dc:f2:0a:17:2c:4d:
6a:be:3c:08:5d:1a:ce:9b:cf:11:dc:55:3d:23:73:48:a2:be:
47:81:85:9f:67:45:ae:57:68:63:33:f2:32:3b:ea:bc:53:a9:
e0:df:d8:41:f9:8c:c6:d4:52:6f:ef:b4:b8:97:1e:a6:ca:d6:
b0:62:b8:43:db:1a:61:6a:f0:b7:a7:b9:09:9d:bc:7e:81:d4:
2b:f9:a3:ba:33:d6:6b:bc:f2:b9:89:18:98:87:b4:0f:ff:bc:
0b:2d:93:30:98:3e:ab:8e:18:3b:a5:cf:eb:97:cf:82:39:e0:
eb:94:9f:df:2e:2f:dc:6e:6b:62:16:96:b2:5b:76:0e:7a:df:
e6:7f:9c:2d:b0:e8:ee:6a:d3:ef:b5:4f:ea:9c:3c:42:f2:d3:
e0:eb:a4:a8:b6:65:16:20:dd:4b:04:d7:cd:7f:88:be:86:49:
40:78:50:20:ef:40:62:55:ef:94:87:30:1a:5e:d0:6a:7e:6a:
a0:1d:e7:c4:08:ac:93:b8:d8:7c:34:16:0b:6a:e7:dd:bc:25:
b5:e6:48:5e:31:a9:b0:dd:6a:a6:3b:f9:01:2a:53:81:95:71:
2c:8b:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:36 2024 by rpki-client on console.sobornost.net