Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/NTSjLOg-o5CPcLPfkZs1b1qd1Ck.roa
File: NTSjLOg-o5CPcLPfkZs1b1qd1Ck.roa (raw, json)
Hash identifier: 89tCSPlO74q2WCWCpCQZfsMZi5oox8Sdt3MD9kq17S8=
Subject key identifier: 35:34:A3:2C:E8:3E:A3:90:8F:70:B3:DF:91:9B:35:6F:5A:9D:D4:29
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 018B000681AF85BD1E38F71E4A9455C81464
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/NTSjLOg-o5CPcLPfkZs1b1qd1Ck.roa
Signing time: Thu 05 Oct 2023 13:28:28 +0000
ROA not before: Thu 05 Oct 2023 13:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42000
IP address blocks: 193.150.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:06:81:af:85:bd:1e:38:f7:1e:4a:94:55:c8:14:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Oct 5 13:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3534a32ce83ea3908f70b3df919b356f5a9dd429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:6f:c6:99:b5:c8:8b:4d:d5:fc:28:77:4a:
cd:db:a6:91:30:95:f2:6e:9b:9e:af:3a:5c:24:00:
84:75:07:33:c3:ac:cd:0e:f5:ec:3d:11:50:16:41:
da:c5:c6:2f:24:f0:77:e1:23:06:d7:4e:be:35:0c:
d3:3f:b3:a2:97:17:fd:08:78:78:17:70:f0:8a:c9:
c9:56:6e:a1:95:0d:df:99:ce:e3:86:2a:c0:71:2d:
9e:da:56:5e:97:7c:01:7f:81:20:10:ac:80:05:52:
85:da:93:c8:c0:ba:25:80:49:79:64:71:76:f4:ac:
c9:07:46:5e:67:f6:bd:63:6d:8e:87:a1:7e:12:93:
5e:98:eb:5f:aa:a7:2c:5a:66:fe:35:2b:15:b2:21:
12:9b:59:08:e2:1a:e7:99:6a:33:9d:da:75:7f:53:
69:6e:4a:d9:43:b6:b3:07:ef:5d:d9:50:17:78:d6:
17:69:ad:2b:07:e0:3e:89:4c:76:a3:51:54:cf:46:
5c:d7:53:e7:21:52:3b:5f:49:55:b5:a7:12:cb:3f:
0c:16:e0:0b:d1:04:3d:df:a8:1f:90:73:ff:36:04:
7e:1e:b0:45:d8:80:83:5d:79:dd:2e:ce:03:08:cc:
99:ca:ae:77:3b:84:be:bd:41:69:97:13:39:76:b5:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:34:A3:2C:E8:3E:A3:90:8F:70:B3:DF:91:9B:35:6F:5A:9D:D4:29
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/NTSjLOg-o5CPcLPfkZs1b1qd1Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.134.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d9:43:96:92:a9:dc:20:45:78:01:00:6f:9b:24:bd:d4:05:
c0:ff:2d:c6:ab:7a:84:5c:2d:c5:a4:a5:0d:4c:7a:7d:d5:5e:
f6:c4:63:87:1f:75:77:a0:9f:d3:09:e2:12:b1:1b:4b:9b:64:
82:b7:72:04:0f:7f:47:4f:62:f9:f2:0b:8c:12:2b:80:53:ce:
ba:72:20:25:24:97:8e:a9:b2:6c:4a:5a:df:68:98:f5:ec:a7:
4b:2f:3c:10:ad:04:08:56:69:ac:ad:c0:3c:1c:fc:b2:8e:d4:
62:46:7e:9d:78:a3:77:a5:cd:a0:b7:ed:36:c6:35:af:86:1f:
21:d5:82:ee:48:69:5a:68:be:a1:4c:ea:98:79:20:04:bd:fb:
c7:a7:cd:54:0d:bd:16:f6:44:5f:1d:a2:84:a2:09:6a:c6:50:
5e:a3:40:28:9b:df:a8:4e:03:8a:37:8d:3f:da:df:be:da:e8:
62:0b:2e:60:30:28:a1:89:0a:5c:04:ba:14:76:04:75:42:fe:
3a:77:4b:dd:a7:f5:ba:cd:3b:76:70:f1:9a:49:4c:c3:24:f1:
2a:49:fb:70:76:8c:09:0a:a4:cd:71:77:a5:86:54:fa:81:5e:
4d:03:0a:3b:68:6d:57:31:88:f5:7d:83:4c:13:22:d5:63:d6:
7c:d1:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:19 2024 by rpki-client on console.sobornost.net