Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/pdT-ROchm8mtSYD5wJIrNhJqCrI.roa
File: pdT-ROchm8mtSYD5wJIrNhJqCrI.roa (raw, json)
Hash identifier: laUAPH1yvTsHEpCET2hnifYo5bbQIqSFZJvkShE6aGU=
Subject key identifier: A5:D4:FE:44:E7:21:9B:C9:AD:49:80:F9:C0:92:2B:36:12:6A:0A:B2
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 01857139CA6D816201919F6C7D7207D70EF8
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/pdT-ROchm8mtSYD5wJIrNhJqCrI.roa
Signing time: Mon 02 Jan 2023 06:44:50 +0000
ROA not before: Mon 02 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200324
IP address blocks: 194.41.49.0/24 maxlen: 24
194.41.50.0/24 maxlen: 24
194.41.48.0/24 maxlen: 24
194.41.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ca:6d:81:62:01:91:9f:6c:7d:72:07:d7:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jan 2 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5d4fe44e7219bc9ad4980f9c0922b36126a0ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:62:2b:e1:e6:6a:a1:1f:bc:0d:a5:0f:12:
eb:fe:ae:64:b5:52:ac:c5:f5:c5:1c:28:d8:e2:74:
a0:b1:f9:40:1e:b4:d3:16:ea:86:01:35:54:7b:7e:
24:21:95:5c:11:78:b1:c3:66:7b:fa:0a:51:62:56:
99:82:01:cc:cc:b3:f9:80:e4:4f:ea:57:e6:de:56:
55:a3:5d:48:4f:88:a4:85:0c:de:40:16:34:27:22:
9d:e3:ba:0e:6a:f4:e3:63:bd:0c:74:c2:7b:e0:1c:
dd:a5:ec:54:75:62:3d:f9:71:bd:0b:c0:7a:b3:6f:
42:dc:68:c8:da:06:94:e4:ac:15:70:65:e5:74:d4:
1f:5b:3d:3d:62:f2:f7:b4:5b:24:91:ef:c7:de:74:
4c:4e:40:c6:f9:a2:f4:01:5c:74:a0:63:86:f9:ce:
6d:e2:a6:f8:2f:1f:1c:be:d6:7d:1f:e1:03:27:6e:
47:1a:0c:bd:53:a9:1a:4d:cd:a1:e9:22:24:7a:ad:
8d:21:8d:c1:67:e9:5b:04:35:cf:a2:8c:0e:53:dd:
5c:dd:5b:73:7b:03:5f:95:5e:a3:52:95:b2:10:a0:
e4:7d:25:98:1f:d6:6c:16:40:76:45:d7:5d:ec:2a:
c4:9d:c5:82:73:8f:50:5f:f9:8b:47:07:3b:0a:5f:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:FE:44:E7:21:9B:C9:AD:49:80:F9:C0:92:2B:36:12:6A:0A:B2
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/pdT-ROchm8mtSYD5wJIrNhJqCrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.48.0/22
Signature Algorithm: sha256WithRSAEncryption
73:cc:95:b5:9e:8b:90:76:20:d0:ff:06:1b:5d:17:4f:00:88:
b3:51:f9:04:52:72:08:15:b5:33:32:93:98:96:75:89:a3:fe:
88:12:17:9b:67:ae:12:2c:7e:79:9c:91:9d:2c:40:51:3b:d3:
84:0b:01:c7:33:dd:dd:65:8a:95:87:75:d8:d6:77:b8:32:c2:
14:91:b1:e9:8b:df:02:84:17:da:72:f1:04:a6:fb:9b:cc:e7:
c8:0a:84:38:1b:f4:5d:0b:72:7c:b3:d9:5d:b7:e1:96:3a:d0:
52:aa:f4:b7:26:cb:f4:d7:42:96:0f:e4:82:1d:d3:b7:66:25:
3d:ac:2b:74:6c:cf:5a:a3:b2:e9:f1:26:88:12:a6:50:47:fb:
c3:31:c9:b4:3d:6a:1b:72:64:f8:69:91:5d:8e:80:42:98:3f:
fa:f4:76:57:b8:29:07:7d:f7:ff:ef:3c:56:c4:27:df:b3:f4:
be:b7:bc:8c:f5:78:f0:50:af:da:6e:55:39:da:52:08:c6:93:
fa:31:d4:d5:23:47:06:f3:13:62:ae:dc:c9:7f:1c:78:79:8d:
ce:74:61:67:b1:32:26:e8:7f:00:a7:e8:aa:fd:16:7a:d6:69:
0b:10:eb:6f:d8:ee:3d:df:50:dd:db:32:3a:46:9f:ae:95:fe:
4c:b0:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:47 2024 by rpki-client on console.sobornost.net