Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/huJh1qEA8s2FxOuknvHJ0KfRIR4.roa
File: huJh1qEA8s2FxOuknvHJ0KfRIR4.roa (raw, json)
Hash identifier: 4rupOPutIPe1FgGWOhR4QgJy1+eckKzaNiQ5tmeslfE=
Subject key identifier: 86:E2:61:D6:A1:00:F2:CD:85:C4:EB:A4:9E:F1:C9:D0:A7:D1:21:1E
Certificate issuer: /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial: 01856BB7DE278991599DEAD5F80563E71FC9
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/huJh1qEA8s2FxOuknvHJ0KfRIR4.roa
Signing time: Sun 01 Jan 2023 05:04:50 +0000
ROA not before: Sun 01 Jan 2023 05:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212640
IP address blocks: 193.163.54.0/24 maxlen: 24
2a10:6b40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:de:27:89:91:59:9d:ea:d5:f8:05:63:e7:1f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Validity
Not Before: Jan 1 05:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e261d6a100f2cd85c4eba49ef1c9d0a7d1211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:00:71:f6:51:4f:73:17:84:c5:39:94:27:
69:80:78:5b:82:a6:8f:37:56:03:f9:44:5d:63:80:
9b:23:38:31:45:b8:d4:7a:52:ff:4d:d8:f1:07:eb:
6f:2f:4e:eb:67:09:09:df:e7:7b:8c:05:d6:17:57:
ff:08:bc:0d:9d:7d:27:05:f0:f8:36:cd:0c:8c:36:
9a:de:0d:b1:a4:0e:1c:37:43:b6:06:77:b4:0f:e4:
e9:f7:28:1e:3d:b4:52:c9:b4:41:dc:70:15:1c:df:
b9:69:00:6e:62:98:dd:09:85:e5:67:23:c5:0c:78:
bc:a9:16:d2:e7:be:48:a1:d7:12:cc:65:fa:dd:86:
db:12:3c:a4:1b:62:1c:f0:cc:48:25:cf:18:a5:94:
5d:63:86:0a:23:64:e4:70:db:d9:45:8f:16:d8:d4:
14:5f:b6:55:42:0c:95:eb:8f:60:b1:5b:92:5d:b3:
66:e3:97:7d:73:80:fc:d0:d4:aa:83:ea:4c:25:43:
3e:9b:51:49:f0:34:e2:12:ad:3e:7e:a7:f0:7a:07:
cd:f4:48:77:f7:27:54:d4:de:cf:77:76:68:60:d8:
47:17:21:e2:b8:68:bc:e1:b0:a7:f7:64:ba:cf:65:
67:d6:ef:5b:67:48:f5:4e:40:40:ac:97:c4:11:93:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E2:61:D6:A1:00:F2:CD:85:C4:EB:A4:9E:F1:C9:D0:A7:D1:21:1E
X509v3 Authority Key Identifier:
keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/huJh1qEA8s2FxOuknvHJ0KfRIR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.54.0/24
IPv6:
2a10:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
0a:f4:08:37:b7:7f:a9:a5:ee:1e:15:c8:99:cb:13:32:31:a3:
50:55:27:ba:9c:87:f7:51:51:e5:63:45:b4:a9:3f:80:24:ea:
ea:8c:82:81:f3:f1:10:59:38:35:ee:03:4e:4e:29:c8:91:d4:
fc:0b:b0:15:6b:0d:79:7f:96:56:22:84:9b:5f:0e:7c:6d:25:
0f:1d:06:0d:e8:13:30:2e:d7:95:77:b9:bb:ab:8f:1a:a8:75:
dc:eb:83:55:a0:1e:ac:58:b5:3f:aa:fd:4e:fa:8f:27:71:b3:
b0:7c:dd:67:f3:44:c3:88:05:9f:ba:2c:66:74:29:82:95:98:
c6:9a:68:62:e4:b0:b9:a9:c4:d2:02:cf:50:38:47:81:a3:c2:
02:08:28:1c:6b:fb:96:43:a6:76:05:26:ef:09:36:d4:ca:a0:
55:f5:eb:dc:a0:4c:fb:0f:6a:ae:8e:ff:18:d5:22:05:87:e8:
f0:a0:ef:bc:38:df:96:79:7f:9d:c6:b6:f2:d9:f9:c7:73:1d:
5a:5e:5e:4e:7c:22:ed:fe:70:77:08:2f:a0:2e:0b:b4:3f:1b:
20:be:af:8d:53:b9:90:b9:f6:43:4c:b3:a8:e6:ee:d4:5c:e9:
63:ca:61:7e:44:32:2f:c2:89:a8:3c:c9:3e:75:32:b8:25:dc:
d1:a1:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:04 2024 by rpki-client on console.sobornost.net