Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/I7kOEPQaFUiU308Dc3dqRRlvwP4.roa
File: I7kOEPQaFUiU308Dc3dqRRlvwP4.roa (raw, json)
Hash identifier: Iiz1UXpYP/zocIpNpBuPQ5l4NQhqtyaafZ2q7niH4nU=
Subject key identifier: 23:B9:0E:10:F4:1A:15:48:94:DF:4F:03:73:77:6A:45:19:6F:C0:FE
Certificate issuer: /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial: 01856CC160D34FBDBA2382A51592C97165F0
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/I7kOEPQaFUiU308Dc3dqRRlvwP4.roa
Signing time: Sun 01 Jan 2023 09:54:50 +0000
ROA not before: Sun 01 Jan 2023 09:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205226
IP address blocks: 185.108.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:60:d3:4f:bd:ba:23:82:a5:15:92:c9:71:65:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
Validity
Not Before: Jan 1 09:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23b90e10f41a154894df4f0373776a45196fc0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:4b:28:2a:29:b9:31:49:d1:cd:8b:eb:8f:
37:2b:fc:b1:d9:b1:fd:7a:09:c6:aa:aa:7a:62:aa:
2e:84:d2:ba:62:e8:f0:02:5e:17:6d:20:d4:58:fe:
cd:f6:c9:b8:82:83:72:4e:05:92:c1:22:5a:eb:44:
ef:18:13:ba:09:bc:08:98:d1:d7:a0:28:fc:2a:3f:
d5:7e:e2:02:00:4b:14:2e:44:82:4f:a3:88:39:c7:
57:a9:6a:62:dd:d7:70:28:d6:c1:16:f2:e5:09:c1:
df:9a:bf:b5:fb:6d:b3:6c:22:38:1f:93:b1:1e:e6:
62:76:b7:97:9f:92:9e:e1:db:de:ee:86:08:54:19:
c8:9d:3c:6b:e7:b1:99:77:f2:15:19:75:f1:b7:c3:
5c:00:c4:dd:4b:6e:8e:12:e3:f1:47:d3:15:36:ff:
0b:34:8c:c4:91:9f:c8:58:6d:66:6e:34:86:bb:c5:
6b:bf:ed:37:9a:ef:b3:9e:26:ea:ed:81:a2:4e:38:
02:5e:ab:49:bc:fa:1b:75:07:dd:b2:aa:4f:7b:af:
89:53:f8:6c:63:20:e4:bc:01:33:a6:f4:69:e3:1e:
c0:16:75:49:60:09:79:06:a7:ed:3c:b4:1b:38:28:
2f:bf:67:34:ea:f4:e9:86:6f:39:d4:ef:c7:46:47:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:0E:10:F4:1A:15:48:94:DF:4F:03:73:77:6A:45:19:6F:C0:FE
X509v3 Authority Key Identifier:
keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/I7kOEPQaFUiU308Dc3dqRRlvwP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.19.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:7d:b1:c8:35:1c:72:42:80:c5:69:61:ba:40:d1:a6:37:87:
57:7a:73:8e:06:d2:36:e4:eb:2e:4f:be:f8:01:fc:f4:be:91:
6b:01:33:63:ee:1f:45:15:86:88:82:c8:45:5e:d4:a2:dd:0b:
c7:b6:19:48:c4:a3:ab:36:12:39:78:9c:24:06:5d:5e:ae:9b:
3e:5b:6f:f9:f9:8c:bd:ca:d1:62:3d:19:d2:98:b5:31:d8:5b:
de:5f:a2:3d:87:52:88:b2:9f:2f:c5:6a:db:7f:dd:f3:54:4f:
e9:e9:73:10:f2:63:58:a9:7f:33:c8:bb:8c:37:11:39:dd:bf:
c7:36:94:cb:f0:73:3f:37:1a:1c:4c:3c:13:c5:d0:de:ab:34:
e4:5e:17:e4:90:e2:e9:c8:5f:56:68:d7:ab:fb:7b:16:e6:22:
2d:00:85:0c:1a:e1:bd:ed:25:13:4c:e3:7f:87:73:78:17:f0:
dc:5b:1f:8f:f2:92:f9:8e:51:0c:00:f2:71:d5:e1:30:a2:4c:
76:65:58:9e:8d:6c:2d:98:db:25:92:00:1a:ce:0f:46:87:49:
41:52:df:51:a9:4b:be:d7:1b:7d:14:1d:e7:e4:8d:39:6b:4f:
cd:ca:24:f0:f3:a5:58:06:86:24:80:b5:18:fb:08:03:9b:17:
b5:c7:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:05 2024 by rpki-client on console.sobornost.net