Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/eVixd_X61uq3H0nGule2PH0j5vM.roa
File: eVixd_X61uq3H0nGule2PH0j5vM.roa (raw, json)
Hash identifier: VGyw4hatDfTx9nAejr+Obw2m3xZAJxwG0sHSHKcaie8=
Subject key identifier: 79:58:B1:77:F5:FA:D6:EA:B7:1F:49:C6:BA:57:B6:3C:7D:23:E6:F3
Certificate issuer: /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial: 01856DCB069B0921CF37EDD292516C1DD86C
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/eVixd_X61uq3H0nGule2PH0j5vM.roa
Signing time: Sun 01 Jan 2023 14:45:00 +0000
ROA not before: Sun 01 Jan 2023 14:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35448
IP address blocks: 88.213.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:06:9b:09:21:cf:37:ed:d2:92:51:6c:1d:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
Validity
Not Before: Jan 1 14:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7958b177f5fad6eab71f49c6ba57b63c7d23e6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:41:1e:6b:34:a8:b7:0c:ab:7c:7c:3e:79:
27:13:40:61:cf:0e:96:80:03:50:38:77:4a:7c:23:
fc:ba:29:9a:12:a3:b0:4b:0d:69:23:dd:8a:57:80:
21:89:76:ad:a7:2e:a0:84:8a:06:4c:e6:a0:6d:11:
a9:d0:c5:36:a2:a8:7a:3a:55:94:d9:bf:d6:82:8b:
52:99:90:68:9f:81:48:52:8f:96:61:42:5e:53:69:
dd:7f:54:a4:da:3d:3c:f8:cc:76:47:15:15:5e:35:
3f:2a:e6:cd:0f:3b:c6:74:1b:77:c1:09:82:67:3e:
ed:6d:1c:bc:f8:c6:3d:da:e1:4d:d8:12:89:ba:08:
2b:10:a5:7d:20:bb:f0:96:6f:be:88:f8:a7:63:60:
10:01:56:b3:40:9d:3b:cc:f2:36:f3:bc:75:5c:b4:
77:5f:dd:2e:4c:f8:9c:65:99:d8:ef:3c:5c:19:70:
18:26:ee:e5:96:01:96:39:f5:e5:9d:fb:e8:b7:5b:
63:bc:62:a7:ba:a8:1e:54:07:05:9f:e8:10:3f:e9:
3a:9e:45:0c:61:19:ca:45:99:9e:2f:27:2a:41:5d:
d5:51:08:72:5b:92:8a:7f:81:c6:05:5a:a1:3b:ea:
2a:53:26:56:52:c5:98:01:f1:d2:e6:1c:49:ef:0e:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:B1:77:F5:FA:D6:EA:B7:1F:49:C6:BA:57:B6:3C:7D:23:E6:F3
X509v3 Authority Key Identifier:
keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/eVixd_X61uq3H0nGule2PH0j5vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.213.212.0/24
Signature Algorithm: sha256WithRSAEncryption
30:23:ad:16:93:ac:90:99:03:d7:ae:ee:b4:a9:9e:08:ff:e4:
c2:28:47:c0:b5:21:3d:7e:6e:36:e3:7a:ac:c1:4b:be:5e:ab:
59:7b:c1:45:96:82:40:cc:8f:ec:f3:99:65:70:d3:a8:58:b0:
b3:29:61:58:01:12:82:01:71:c6:d3:41:ff:0b:da:74:94:1f:
66:dc:30:ae:b3:22:64:3a:ce:43:c8:29:de:04:2b:23:53:06:
31:12:95:cf:e8:f1:03:ee:53:5f:d2:dc:ae:19:a7:4b:81:b7:
89:51:77:f4:c1:b7:db:43:97:d9:41:28:44:88:5f:8b:6e:44:
a9:b3:58:5d:2c:4c:24:3c:77:90:75:e4:54:99:98:bc:80:24:
ad:5c:36:10:b2:7a:55:2b:00:73:2d:a9:da:3f:f2:e5:da:db:
b3:cd:79:0a:3c:82:f7:4c:48:46:61:da:2b:00:cb:3d:94:45:
a4:29:84:c5:8f:b1:1f:f7:b7:85:c1:22:e4:48:0b:b4:9c:4f:
15:91:f3:d1:1f:3f:55:29:57:d8:46:1d:b5:c8:ba:4b:84:e9:
5f:04:c8:4a:70:38:10:b2:05:8a:c0:fb:d9:40:87:6e:4c:df:
01:a1:cd:05:ea:e8:19:05:12:51:24:70:c4:31:45:f0:54:78:
68:54:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net