Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/naLznOCWesZn-TCJ4y8Kag3i6UE.roa
File: naLznOCWesZn-TCJ4y8Kag3i6UE.roa (raw, json)
Hash identifier: gIPnPMpBNXCWztDUTc7WJ/DzrxYBXi8cnNopeibU+m8=
Subject key identifier: 9D:A2:F3:9C:E0:96:7A:C6:67:F9:30:89:E3:2F:0A:6A:0D:E2:E9:41
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01870D870B11B620D5AD33AAF69F39BD7976
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/naLznOCWesZn-TCJ4y8Kag3i6UE.roa
Signing time: Thu 23 Mar 2023 08:12:46 +0000
ROA not before: Thu 23 Mar 2023 08:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43146
IP address blocks: 194.116.163.0/24 maxlen: 24
194.116.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:87:0b:11:b6:20:d5:ad:33:aa:f6:9f:39:bd:79:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Mar 23 08:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9da2f39ce0967ac667f93089e32f0a6a0de2e941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:6e:64:38:35:cb:6e:f9:5e:26:fd:32:b2:
77:fd:7d:27:ff:f6:66:e4:53:f4:2d:dc:d1:77:2f:
01:74:5d:24:db:51:71:91:a5:8d:e7:5a:3f:71:76:
3a:90:ee:b7:ed:21:e3:3d:76:1f:84:68:38:e7:82:
03:6d:ec:11:0b:d0:7d:a9:79:e9:32:d3:7c:22:20:
49:c2:eb:ab:35:08:2a:67:11:07:24:5c:de:38:dc:
9a:6d:2b:0c:02:1d:65:f9:9f:e1:d2:17:20:76:03:
2b:38:a7:e9:7e:1e:c3:9f:08:46:c0:77:94:07:7f:
e4:c4:fd:22:7b:99:e6:9d:9b:d9:0b:d5:61:e6:5d:
91:7d:28:7f:ab:b7:e2:59:d4:ad:be:de:81:23:85:
73:45:37:0c:53:ba:93:3a:45:1d:11:b4:77:d6:a1:
5b:b5:af:fa:d0:a2:72:e4:69:62:d6:16:46:92:f1:
c6:5b:49:7b:1d:02:f3:60:59:47:ff:a1:ff:33:6e:
e5:0e:7e:82:1a:c7:c3:f1:e2:e9:aa:0e:01:ce:e9:
6f:5a:4e:76:70:9a:e7:02:b2:92:36:24:44:a7:67:
48:d6:26:0b:67:59:dc:53:a1:e4:8a:7e:20:55:52:
9d:5e:a1:09:71:64:3a:f7:6b:ad:2e:4a:33:30:9e:
bc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:F3:9C:E0:96:7A:C6:67:F9:30:89:E3:2F:0A:6A:0D:E2:E9:41
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/naLznOCWesZn-TCJ4y8Kag3i6UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.162.0/23
Signature Algorithm: sha256WithRSAEncryption
26:19:d6:62:26:d6:5f:38:8e:d3:9d:5b:85:bd:98:1b:fa:5a:
fd:33:64:d0:e6:bf:c2:a5:c9:f1:9d:61:8f:81:0a:5e:b3:df:
60:05:92:33:15:e5:07:e6:be:84:56:3d:48:e1:4c:99:db:02:
da:f5:ee:84:8b:76:3b:9f:2c:6a:92:8b:1d:95:10:c5:aa:52:
72:09:9c:c6:05:5f:c4:d7:81:2d:13:67:44:3e:aa:b2:94:98:
5d:d0:f5:31:d1:46:9b:19:2e:a8:8f:68:81:4d:e1:77:10:ea:
0a:0d:8f:40:c5:ec:60:d0:a3:68:1f:1a:5e:a6:3a:04:c7:6b:
78:e0:4a:18:55:7b:1b:d8:f9:6a:cc:d0:78:63:a1:95:7e:09:
aa:0e:b0:2e:da:fc:19:6b:e0:30:82:4f:07:3f:c7:89:69:c2:
62:c5:8d:cf:d1:41:ca:a6:a5:b6:4a:c9:20:c9:16:19:f2:81:
64:44:d5:57:fe:d5:80:05:e7:a4:e2:6b:fb:2d:50:8e:20:f0:
8e:94:cb:50:6d:0a:6f:9c:e2:b2:fe:4c:3f:c5:de:b9:b5:d9:
90:7a:66:b5:cb:41:b0:38:00:1c:f2:87:a4:af:22:56:af:db:
fe:52:60:17:08:32:c4:20:18:a2:ee:33:8d:41:5a:2f:de:da:
93:4f:49:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:21 2023 by rpki-client on console.sobornost.net