Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/9jLGXslMNgrWkutgs4fvnpNSAc4.roa
File: 9jLGXslMNgrWkutgs4fvnpNSAc4.roa (raw, json)
Hash identifier: q1oLnzr73THybp+NADmNxNCxnGGiMx39aQbUHyuaWfs=
Subject key identifier: F6:32:C6:5E:C9:4C:36:0A:D6:92:EB:60:B3:87:EF:9E:93:52:01:CE
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 01856D2F5D0C9AF05AF37A5B4402AFB6691D
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/9jLGXslMNgrWkutgs4fvnpNSAc4.roa
Signing time: Sun 01 Jan 2023 11:54:58 +0000
ROA not before: Sun 01 Jan 2023 11:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31285
IP address blocks: 193.19.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:5d:0c:9a:f0:5a:f3:7a:5b:44:02:af:b6:69:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Jan 1 11:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f632c65ec94c360ad692eb60b387ef9e935201ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:dc:f4:33:be:e0:3a:93:ed:e8:ce:eb:c5:
85:9f:3b:41:86:ca:98:17:c2:22:4a:0d:98:a9:a9:
d0:fa:50:bf:2a:74:38:48:60:55:90:5b:47:29:f4:
51:6c:01:bf:ca:6c:ba:c6:f5:a4:6e:83:4c:18:37:
88:64:44:a0:6e:17:ba:5f:d8:06:b3:82:cc:a6:65:
1c:59:c7:01:9a:d9:5a:ed:73:25:4b:d1:91:39:a6:
fe:bc:75:6b:e2:21:b1:fb:03:83:a0:ee:d9:27:da:
78:a8:77:f3:5d:3a:2e:85:ce:58:bd:ee:e6:6c:cf:
e7:ad:99:a1:8b:a3:a1:6e:50:81:ba:7c:e5:4a:07:
12:e3:63:2e:83:6e:90:a3:c7:21:dc:87:09:8b:c5:
29:c9:34:b0:d7:95:be:9d:f0:d4:ab:be:86:14:55:
89:65:33:86:25:5e:13:53:97:bd:88:49:e5:dd:e7:
7e:53:6e:3e:cf:bc:dd:a7:42:7b:62:94:37:82:3b:
1a:1c:ec:9b:50:b7:19:99:34:1c:12:01:67:1f:60:
61:7c:0b:52:05:57:dc:31:ce:74:9c:c5:15:a4:7e:
24:e3:73:e6:a2:23:67:5f:97:79:7f:01:82:03:07:
ff:4f:c3:93:b1:d0:f8:38:af:d8:a6:77:b3:14:1a:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:32:C6:5E:C9:4C:36:0A:D6:92:EB:60:B3:87:EF:9E:93:52:01:CE
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/9jLGXslMNgrWkutgs4fvnpNSAc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.114.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:5d:db:d7:0c:e7:30:46:de:59:b0:2a:52:a4:96:ce:b3:b0:
6c:f3:62:d5:f7:f9:c6:51:e7:3a:00:d9:99:23:c0:fd:94:10:
6c:31:aa:bc:3c:25:f5:5c:54:52:e1:c6:92:12:ef:e3:60:1d:
46:c8:98:e8:56:95:9d:a0:17:47:90:2b:67:64:83:e0:15:b6:
d3:64:3d:4f:05:70:de:13:60:57:4a:75:78:5c:1a:fd:00:87:
ab:8a:e7:cb:86:f0:3c:79:a8:af:cd:53:5f:e4:7b:37:6d:e0:
f5:47:c6:54:19:a2:20:ca:f0:2e:f2:4b:8a:86:87:e7:32:e0:
13:66:6b:85:65:e7:61:a5:f6:2b:ca:b3:20:c9:ac:5e:e1:a0:
42:42:b5:a3:f1:b3:55:15:31:c5:3d:41:01:83:e6:ae:3b:24:
a4:eb:8f:13:ad:b2:d9:ab:ec:d2:7e:af:68:c0:e1:3f:4d:ed:
b2:bb:71:81:92:3f:1d:a9:fd:d9:56:7d:0d:47:4a:48:cc:24:
16:11:83:90:f7:06:0e:6d:bb:44:14:44:29:e9:10:65:a5:b1:
41:ce:04:87:77:47:8c:3d:ca:b3:f9:8a:c3:cf:29:29:b8:33:
f2:39:a2:b0:fc:1b:17:73:2b:f2:a4:c3:d1:0f:b0:eb:e1:e4:
fe:08:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:57 2024 by rpki-client on console.sobornost.net