Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/_gD4_FjstDykGGhB5pPXQ9LJKdk.roa
File: _gD4_FjstDykGGhB5pPXQ9LJKdk.roa (raw, json)
Hash identifier: vvt031YDGiaVsJjPyUhT0/sUlFqsS1XRlyetArsY5Q4=
Subject key identifier: FE:00:F8:FC:58:EC:B4:3C:A4:18:68:41:E6:93:D7:43:D2:C9:29:D9
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 01856E14293C3AD4EA0F784F94406438E9E6
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/_gD4_FjstDykGGhB5pPXQ9LJKdk.roa
Signing time: Sun 01 Jan 2023 16:04:52 +0000
ROA not before: Sun 01 Jan 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20810
IP address blocks: 193.29.228.0/24 maxlen: 24
194.113.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:29:3c:3a:d4:ea:0f:78:4f:94:40:64:38:e9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Jan 1 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe00f8fc58ecb43ca4186841e693d743d2c929d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7e:17:91:d4:31:c3:6a:ef:0c:cf:ba:64:0b:
ed:f3:38:82:ca:c4:be:ee:20:2a:7d:84:fc:dc:3b:
e3:bb:a6:00:ab:bd:c6:d9:95:b0:4b:a4:24:4d:51:
27:22:8a:73:a8:97:6e:6d:da:ec:02:5c:6a:ff:50:
8d:f6:c6:e0:3b:5a:a2:6b:b3:00:03:eb:c0:42:8d:
7f:49:b7:fe:8c:c6:21:89:5c:a0:58:c8:1c:c0:cc:
2c:97:ec:d9:25:61:d5:34:ad:52:66:f9:70:0c:5e:
1b:24:75:a4:de:7e:35:d8:77:b9:a5:0f:70:89:45:
f6:27:b8:14:c5:eb:dd:da:43:92:65:5c:9c:cc:18:
79:48:eb:86:59:9f:6c:50:34:bb:17:19:0d:63:73:
e1:2b:84:71:7f:ca:14:3b:9a:41:8c:1a:4b:6b:d6:
53:bf:51:98:af:35:33:26:49:14:eb:04:fe:d6:a5:
c8:94:a0:52:e9:e1:79:d6:29:0f:37:24:c2:82:d7:
f9:7a:38:aa:f1:75:26:64:9b:e7:8a:a0:d5:e4:11:
4d:b0:39:a9:17:4e:53:02:e4:56:82:3d:9f:2a:4b:
97:58:b0:d0:48:91:fc:ec:42:15:1f:cc:13:ee:3d:
ac:24:8f:90:da:f7:aa:40:f2:aa:76:98:e9:a3:99:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:00:F8:FC:58:EC:B4:3C:A4:18:68:41:E6:93:D7:43:D2:C9:29:D9
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/_gD4_FjstDykGGhB5pPXQ9LJKdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.228.0/24
194.113.115.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ed:3f:66:85:09:32:35:53:64:c1:9e:1c:67:c1:42:84:50:
73:1f:50:6a:4a:e7:f7:9a:f7:3f:8d:44:53:40:6e:ff:56:09:
7d:ae:d3:7b:53:3b:c6:7e:ed:f8:ee:51:0d:89:13:ef:de:04:
d8:fa:d4:59:5c:88:77:aa:26:e1:62:d6:71:f0:83:a2:7b:bb:
5a:9b:f4:e9:2c:b4:f3:a8:74:88:db:37:b1:0b:3a:9d:d9:b6:
1c:1f:fc:05:2a:cc:6b:df:62:b3:32:62:fe:96:97:11:fa:c2:
43:4e:2f:f9:22:fa:bf:9d:23:4a:ef:4e:82:14:cc:de:0a:60:
c6:91:7f:7a:94:c6:7f:e4:27:4c:61:ad:27:32:28:b8:09:e8:
5b:6a:4b:57:8f:1c:9f:0c:e3:b1:85:62:32:c4:f4:71:ed:2f:
a1:79:41:71:95:60:6e:1c:c8:f3:b2:a5:45:60:f3:de:ba:8f:
50:84:8c:a5:fc:96:4d:de:5d:2b:e3:28:15:f2:17:b9:a0:23:
c9:51:a0:54:5b:3f:b2:ea:7f:c1:fa:50:fd:12:e5:de:89:27:
2e:89:6d:6f:67:eb:4a:7d:64:5c:5a:4a:1e:62:b8:27:c7:c1:
89:b3:c7:57:ac:a3:3b:5e:c9:ff:e0:5b:b1:aa:b8:9f:41:4c:
b4:6a:f8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:48 2024 by rpki-client on console.sobornost.net