Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/U_1IhQfc28FZqInilhCZNBgbvVw.roa
File: U_1IhQfc28FZqInilhCZNBgbvVw.roa (raw, json)
Hash identifier: FaSMLhdIKw/9AKvrnJIk0r0b2NkxBH50nJ7oy+mosdM=
Subject key identifier: 53:FD:48:85:07:DC:DB:C1:59:A8:89:E2:96:10:99:34:18:1B:BD:5C
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 018B1E7AA4424F4BF13FEA6D25AEA71D2F93
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/U_1IhQfc28FZqInilhCZNBgbvVw.roa
Signing time: Wed 11 Oct 2023 11:23:55 +0000
ROA not before: Wed 11 Oct 2023 11:23:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59438
IP address blocks: 5.145.152.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:7a:a4:42:4f:4b:f1:3f:ea:6d:25:ae:a7:1d:2f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Oct 11 11:23:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53fd488507dcdbc159a889e296109934181bbd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:bf:2e:08:a6:df:09:2f:7b:2b:8b:ec:83:
9e:e4:49:ab:53:f4:95:ab:ce:80:14:a2:ac:2b:54:
bf:c8:4d:93:e4:1b:d0:c8:3c:ab:65:96:84:54:e4:
46:cd:4e:f3:e1:07:14:d7:3b:f3:9b:cb:53:06:7b:
29:57:9a:7f:52:f9:17:1b:3f:01:2a:cd:6f:7b:e2:
43:f4:09:6b:87:19:7f:df:b2:4a:a0:ca:b6:94:62:
9b:60:18:4d:d2:a8:0b:30:b1:5f:be:f9:25:c6:61:
7c:c1:15:81:04:25:9f:e8:56:a9:dd:07:c3:91:e7:
50:52:55:fd:a0:fb:18:f5:a2:49:ab:2d:fa:7e:90:
37:a2:71:34:e4:7a:90:2d:0f:b9:db:d3:08:ed:5a:
8b:29:a0:ed:52:fa:97:4d:0e:ea:dc:67:ad:68:d5:
bf:19:e8:ae:f7:48:95:b9:39:df:56:3b:db:9b:00:
52:29:40:83:11:c3:b6:87:b6:05:57:38:db:0c:f4:
8b:90:9f:cb:c2:c7:8b:af:6e:d3:51:36:82:29:3a:
ce:91:4c:f4:cf:ab:53:5a:95:6d:f5:41:46:2b:bd:
f6:aa:76:2a:66:43:08:29:9e:32:3a:38:08:d9:d5:
f2:ff:1d:d3:3a:56:f8:4e:5b:83:3d:d3:d7:5b:3e:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FD:48:85:07:DC:DB:C1:59:A8:89:E2:96:10:99:34:18:1B:BD:5C
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/U_1IhQfc28FZqInilhCZNBgbvVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.152.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:e5:63:43:14:86:c4:a3:cd:17:62:6f:62:68:48:d6:06:dd:
86:ae:0f:12:ff:e1:30:6d:cd:34:f9:63:91:ad:c1:36:cc:c4:
6d:4d:01:34:e2:53:73:30:26:c5:14:15:8c:a9:a4:45:8d:a3:
15:07:22:95:16:19:9b:50:a9:a4:78:ce:5b:41:a7:56:3a:2d:
3b:77:8d:94:80:85:c9:a9:1f:37:0c:9c:86:cc:28:c0:f8:61:
89:e5:19:0c:64:de:85:f0:67:13:07:f9:53:59:37:16:d9:cd:
2d:7d:61:b5:a6:9f:32:ec:22:b6:83:c4:f3:43:77:d1:67:88:
57:61:ed:8d:45:0a:83:da:10:37:17:62:63:51:f2:b1:27:e8:
2a:f9:49:d6:5b:a0:8e:ae:f9:17:e4:b9:5f:ba:4b:88:01:60:
0c:92:e3:1c:58:c6:22:9e:92:7f:53:d8:37:f5:44:28:dd:48:
c6:17:d9:69:43:76:81:14:b8:c0:71:3a:0f:d2:da:60:2b:78:
88:73:30:9d:5b:05:68:15:ef:b7:2e:bd:78:34:4a:6d:4c:ce:
df:6c:60:6f:98:03:d3:ab:c9:c4:f2:d0:3a:66:f9:bc:d9:8b:
c5:b0:6c:04:c0:44:29:19:65:f1:7c:3a:cf:5b:13:23:73:9d:
9e:71:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:38 2024 by rpki-client on console.sobornost.net