Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/L1N8_cmxR-d2SPSCtR9yKK9Nw8M.roa
File: L1N8_cmxR-d2SPSCtR9yKK9Nw8M.roa (raw, json)
Hash identifier: 29xFqbQAmpOtfDoWVQVYTIlCgJAEd6OLN2VpwvK5th4=
Subject key identifier: 2F:53:7C:FD:C9:B1:47:E7:76:48:F4:82:B5:1F:72:28:AF:4D:C3:C3
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0187DCE6738B3DDA9449C90119856F2E3566
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/L1N8_cmxR-d2SPSCtR9yKK9Nw8M.roa
Signing time: Tue 02 May 2023 14:38:23 +0000
ROA not before: Tue 02 May 2023 14:38:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 195.206.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:e6:73:8b:3d:da:94:49:c9:01:19:85:6f:2e:35:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: May 2 14:38:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f537cfdc9b147e77648f482b51f7228af4dc3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:10:79:4b:08:91:5f:c7:14:4d:30:a9:0a:
43:7a:f2:40:a3:45:59:22:71:93:00:66:1b:2d:20:
59:6e:50:99:85:fc:5b:19:66:5e:a6:0d:cc:4d:3b:
a4:eb:cb:af:d5:e2:09:05:9d:c6:14:d6:18:bf:08:
2c:36:24:7c:74:e2:a5:5b:fa:7c:71:62:4f:fd:99:
3a:e1:90:4b:af:4c:0f:31:c8:1d:26:45:7e:f3:aa:
ad:2f:19:90:ab:16:59:cc:03:48:c7:7a:c4:79:f9:
8c:ce:ea:38:1a:5a:f9:d3:80:39:6b:2f:f7:e5:a8:
f6:a0:a3:dd:11:1c:a5:dd:50:c1:cd:7f:4d:9d:4b:
3a:64:79:8c:77:df:39:7c:a2:62:d3:65:29:cf:1c:
f1:e6:1d:90:08:5a:b9:6e:af:00:12:4f:a6:cc:f6:
f6:8c:66:f9:7d:30:a6:1f:fc:87:4b:72:82:05:73:
97:e6:a7:f9:6a:73:88:ac:89:f6:42:6a:88:0a:f4:
61:14:8d:a6:4a:44:67:9f:d7:31:ad:ef:f5:ba:56:
b2:3f:7d:83:ab:20:51:f8:c0:4b:2a:cb:7b:e2:79:
68:cb:47:64:88:c7:14:78:de:ec:9a:fa:8d:49:cb:
d0:b6:fa:11:34:a0:51:9f:56:28:13:47:b7:b4:b3:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:7C:FD:C9:B1:47:E7:76:48:F4:82:B5:1F:72:28:AF:4D:C3:C3
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/L1N8_cmxR-d2SPSCtR9yKK9Nw8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6d:24:6b:46:e7:1e:64:fc:30:ee:3a:95:47:b1:fa:73:69:
03:27:76:6d:cc:ac:33:24:04:8f:0f:f6:e8:a5:76:73:9d:01:
ef:c2:c8:15:de:09:43:c8:59:37:bd:22:c4:a5:e8:26:5e:44:
f9:e1:1f:55:d9:eb:f1:0b:f0:eb:d3:0e:e8:cc:a7:eb:80:2b:
b8:8c:06:0d:1f:98:d5:c3:80:46:b0:08:18:67:86:aa:bd:6f:
4d:ee:87:8b:5e:c1:72:06:31:c0:ef:0d:49:8e:49:b2:78:35:
c6:1f:43:b6:b8:d4:02:60:28:8e:98:6c:05:be:94:e2:d3:e1:
4f:f3:3a:9e:85:00:5f:b0:ac:f2:8b:5d:7c:26:2d:35:2e:8d:
fd:d1:ee:66:ff:24:89:8f:05:9a:05:51:54:28:4c:65:24:bf:
8e:09:c5:3e:a5:f3:b4:3c:a4:9f:b5:49:a0:2b:3a:6e:56:3b:
23:f1:2b:af:58:d4:15:14:8d:b8:15:0a:05:cf:51:a6:c6:08:
8e:1d:30:71:56:f1:b5:b9:03:e7:61:b6:6e:64:02:bd:7c:a7:
d3:69:84:1c:51:8f:d1:1f:53:6b:1b:dd:14:b9:39:45:81:8d:
5d:20:08:7a:42:a1:a1:8e:77:87:6d:f1:62:e5:fa:9b:bd:5a:
8b:f7:f7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net