Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/N6akZuNb9LXboDA7X5O00oisxWg.roa
File: N6akZuNb9LXboDA7X5O00oisxWg.roa (raw, json)
Hash identifier: P6toN9qUO1/1Cuwlo/MqB08887jEnwAONqJ2jPmbSsY=
Subject key identifier: 37:A6:A4:66:E3:5B:F4:B5:DB:A0:30:3B:5F:93:B4:D2:88:AC:C5:68
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 01856E1428CACB1BB2144C28693237C525B6
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/N6akZuNb9LXboDA7X5O00oisxWg.roa
Signing time: Sun 01 Jan 2023 16:04:52 +0000
ROA not before: Sun 01 Jan 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213049
IP address blocks: 195.182.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:28:ca:cb:1b:b2:14:4c:28:69:32:37:c5:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 1 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37a6a466e35bf4b5dba0303b5f93b4d288acc568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:b8:18:74:e7:11:5e:23:a7:4a:82:e2:0a:
e3:5e:24:a1:ba:df:ff:f6:70:44:bb:eb:0c:f4:c9:
91:01:63:d9:aa:a1:a3:1e:93:ab:06:a1:dc:82:e3:
9b:fe:23:04:8c:85:69:d7:15:20:7b:88:0b:ab:3f:
23:36:2b:c2:15:67:e8:90:d2:07:8e:51:6d:69:3b:
03:37:7c:ae:c7:10:50:73:4f:a9:25:6b:bf:ef:a8:
b6:d3:e5:67:c9:eb:46:1f:cd:e4:d1:31:b0:e2:00:
b6:39:12:16:ce:eb:1b:82:89:4f:d7:ee:11:0d:e8:
d9:9f:8d:e4:13:33:f6:59:fa:4d:8a:05:73:e3:30:
f0:b1:e7:99:b1:5c:52:e4:6d:62:18:48:f5:81:ec:
a1:49:44:b0:d1:9b:c3:0b:e9:fb:66:35:8e:3b:95:
46:7b:82:05:8c:82:77:66:57:d3:63:0a:9c:3c:12:
c6:ca:6d:61:58:f8:57:71:c1:6e:b6:ba:b5:b0:9d:
82:b0:3b:52:fa:b5:32:aa:e2:85:f3:28:32:4b:f0:
e0:8d:30:fd:4f:31:bd:2b:b2:a7:74:50:0a:55:8f:
67:8d:81:8b:17:4b:00:f0:80:46:df:a3:23:77:cf:
d8:2f:f4:aa:cb:7a:6a:22:b1:4f:02:66:84:03:fe:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:A4:66:E3:5B:F4:B5:DB:A0:30:3B:5F:93:B4:D2:88:AC:C5:68
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/N6akZuNb9LXboDA7X5O00oisxWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f2:be:ed:ac:f2:39:97:9e:c4:65:37:51:75:48:34:bc:55:
fa:2e:f8:75:4f:42:f6:7c:19:3d:aa:18:00:5e:5d:c7:03:11:
c2:bb:4f:83:bf:9e:9b:e4:49:ca:67:f5:70:7f:26:b2:3b:96:
3b:e6:04:97:83:ec:f9:61:98:0d:2f:7c:cf:a2:be:ec:d8:82:
ce:e8:c8:c1:38:ca:52:7b:85:1f:e8:0e:4a:0b:71:ef:75:d7:
1a:25:98:31:87:3c:c2:80:30:e8:f8:c1:55:ef:7d:f5:97:15:
ab:80:ef:74:cf:10:09:c8:f5:55:80:0c:f5:b2:14:75:a5:45:
4b:be:17:bc:e7:9a:f0:50:75:83:f8:ae:b8:10:d2:d5:7a:55:
31:fc:86:69:fc:8e:c5:f2:4a:5b:2d:99:6a:f0:ad:4a:d0:2d:
0f:88:49:78:29:6d:8f:87:96:9a:c3:62:43:02:ce:fa:63:e0:
6a:29:25:25:a7:4d:cc:34:67:ea:fb:1e:7a:ac:81:99:e6:55:
8a:37:98:9e:80:0e:f5:8f:97:dc:c5:82:3f:28:00:77:a0:ec:
dc:2c:f4:21:26:ff:24:d2:23:b7:e7:b0:02:85:86:76:0a:be:
e0:cd:0e:ee:c6:a7:1b:89:99:16:a1:0d:ca:28:af:d1:70:ae:
bb:77:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:59 2024 by rpki-client on console.sobornost.net