Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/1-iL-0yTYNsp8j-hOhfurxA_OaTY.roa
File: 1-iL-0yTYNsp8j-hOhfurxA_OaTY.roa (raw, json)
Hash identifier: mu0EoikEipEXw5lLBUXZp9YOi1YbWBHobx1xKYH0TNI=
Subject key identifier: FA:22:FE:D3:24:D8:36:CA:7C:8F:E8:4E:85:FB:AB:C4:0F:CE:69:36
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 01856C0A450F1D3FD36E6B33DD885F9DECA0
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/1-iL-0yTYNsp8j-hOhfurxA_OaTY.roa
Signing time: Sun 01 Jan 2023 06:34:50 +0000
ROA not before: Sun 01 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50813
IP address blocks: 193.105.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:45:0f:1d:3f:d3:6e:6b:33:dd:88:5f:9d:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Jan 1 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa22fed324d836ca7c8fe84e85fbabc40fce6936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:8b:1f:c1:73:c3:65:bb:32:75:3f:42:98:
4a:89:4d:75:86:6c:58:11:53:d5:e2:61:ad:05:a7:
c4:9f:45:23:b4:fc:95:46:cb:02:6d:03:86:da:06:
1b:3c:22:70:b7:fa:65:1e:49:1c:c9:8e:d6:0a:13:
da:33:23:ea:6a:94:1e:85:82:f2:77:af:2e:8b:43:
48:16:c2:f6:37:36:ca:9a:b5:c0:2f:f8:55:a5:86:
fb:ca:50:ba:60:64:fc:9d:12:91:03:ab:11:98:53:
a2:4b:06:06:58:4d:d7:24:00:19:c3:fe:4c:b2:23:
63:b4:02:87:c1:56:14:2c:e6:0e:b7:d1:93:87:30:
68:a6:82:3a:ba:6f:a6:37:41:d2:85:aa:e7:ba:42:
5f:4d:3e:52:ae:9e:f1:16:21:5a:12:91:9d:d8:78:
68:53:e2:c8:54:18:67:1d:ae:91:11:4e:2d:85:77:
c9:9d:31:bd:ee:de:28:3f:a0:f8:ab:00:19:5d:17:
95:6d:a8:1f:c1:1c:db:db:d1:f7:e6:8e:93:d9:7a:
30:4a:d4:a1:aa:f6:c0:1a:0f:51:ed:6a:c0:65:28:
39:c9:10:80:96:e8:31:42:c3:fa:3b:56:1e:11:21:
33:bf:76:42:9d:03:74:a5:01:52:63:17:33:20:10:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:FE:D3:24:D8:36:CA:7C:8F:E8:4E:85:FB:AB:C4:0F:CE:69:36
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/1-iL-0yTYNsp8j-hOhfurxA_OaTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
01:9a:f1:63:8e:7c:41:39:a3:cb:c4:d7:9d:87:c0:07:fa:33:
d1:42:b1:85:d8:0d:99:a2:46:0d:ba:9d:ea:ff:91:06:8a:46:
2b:63:45:b6:c4:c6:eb:47:66:75:45:63:9a:9e:ad:c3:1d:4f:
92:93:20:81:29:53:c4:a0:11:91:3b:d9:bb:54:08:f3:95:c3:
5f:5e:83:f7:09:1a:b0:33:c5:cd:0e:41:8c:44:f0:1d:bb:3f:
9c:06:23:73:cf:b3:2d:1d:5b:16:81:44:00:ce:28:ae:99:9b:
1e:31:a2:c2:79:eb:6a:89:d4:b4:04:8b:7b:73:78:eb:f5:67:
9a:f4:0b:3c:2a:58:8c:c2:58:9a:3e:ec:25:82:99:de:db:d3:
a8:1a:47:de:08:42:bf:0e:f8:e7:95:77:df:bf:ad:4f:9c:6d:
47:f2:74:c1:33:f3:a0:b3:42:3d:0a:1f:06:5c:af:7b:91:8e:
02:60:d0:15:ce:ce:dd:60:2e:db:00:56:d1:3b:49:2c:4e:6a:
dc:30:cd:c7:a0:73:e3:de:ee:6b:78:ec:09:64:cb:c3:6e:0a:
e0:7c:19:7c:2b:e1:ae:c4:e4:d7:f5:4c:40:de:df:02:3f:44:
d2:af:cc:24:8d:9e:50:36:03:4c:dc:0b:d7:8c:1b:e2:23:a9:
65:1d:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net