Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/kY-msChqTYEeGlqurcdUXbDclLQ.roa
File: kY-msChqTYEeGlqurcdUXbDclLQ.roa (raw, json)
Hash identifier: 6bTBLSW1iYucg5gC73HgmIhaysXOyWBvNJytUxL8Elg=
Subject key identifier: 91:8F:A6:B0:28:6A:4D:81:1E:1A:5A:AE:AD:C7:54:5D:B0:DC:94:B4
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 01856DAF48AE82F66DA206DA3A3EF555B694
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/kY-msChqTYEeGlqurcdUXbDclLQ.roa
Signing time: Sun 01 Jan 2023 14:14:41 +0000
ROA not before: Sun 01 Jan 2023 14:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52075
IP address blocks: 193.30.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:48:ae:82:f6:6d:a2:06:da:3a:3e:f5:55:b6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: Jan 1 14:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=918fa6b0286a4d811e1a5aaeadc7545db0dc94b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:ac:bf:b3:f7:de:87:25:e0:83:93:57:2d:
e4:3b:95:74:42:f1:eb:ac:c9:df:95:ac:92:df:b4:
87:32:f8:f3:fe:7a:3f:1b:00:e2:58:17:a1:4c:8c:
0c:84:45:3b:bf:89:b5:24:64:d1:e5:78:66:b6:7e:
d7:4a:f7:60:15:a8:67:3b:6b:c1:8f:0b:42:c0:10:
dc:02:44:59:67:12:91:c4:de:3f:01:f9:b6:54:22:
eb:ae:42:e5:be:b0:2d:ce:05:91:9c:91:96:cc:a6:
d3:82:15:4a:dd:a8:a8:92:a8:d8:51:2b:4c:02:49:
0c:96:c0:30:59:c9:97:45:78:b0:62:3d:94:40:d0:
a0:74:52:df:07:ca:b1:ba:64:e9:41:b5:0f:a0:27:
44:25:c5:32:5d:09:e4:2b:49:87:a4:92:a8:72:f2:
4d:d7:ed:6e:31:c9:5c:d8:18:23:f7:af:51:d9:1e:
24:9e:61:3b:c8:c4:9a:03:d5:bf:70:f8:79:75:0d:
ef:55:99:71:de:1c:8b:e0:34:91:48:a1:5f:b7:98:
7f:5b:90:3c:26:a8:00:7b:ed:11:ae:c9:a2:69:02:
1e:4c:47:76:87:ff:af:2d:09:f4:f1:b2:a5:82:ac:
1f:16:c7:49:56:f9:c0:24:eb:da:2d:71:ec:7f:0f:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:A6:B0:28:6A:4D:81:1E:1A:5A:AE:AD:C7:54:5D:B0:DC:94:B4
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/kY-msChqTYEeGlqurcdUXbDclLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.111.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5c:e2:9e:17:30:23:dd:1d:04:a3:21:3b:2e:39:92:85:e4:
85:b0:f5:67:f3:17:d5:29:64:1c:56:50:99:43:48:65:9a:32:
e5:9d:7c:9e:85:63:12:df:3e:b2:ca:67:6b:ce:e1:58:26:1b:
93:e3:d6:9f:3b:25:d3:54:4a:73:48:a5:6c:4a:27:0d:c6:22:
4c:49:ba:b8:bb:d8:4a:e0:78:39:8a:be:7d:93:35:f9:42:44:
07:c2:6d:4e:c3:0e:01:e1:c8:73:5f:35:d0:f3:e6:52:31:50:
27:50:d1:96:d5:bf:fb:00:ed:4a:6e:3c:ff:ef:8a:6f:78:1d:
24:3b:81:98:34:b6:62:42:8d:1f:6c:72:be:63:4c:35:0c:b3:
94:70:68:f6:4c:bc:cf:db:00:e9:72:b1:75:2c:c3:29:d3:ed:
22:cb:2a:2d:62:ec:89:6c:1c:07:4a:7b:cd:85:7b:26:43:d9:
57:57:09:90:0f:9e:20:13:1b:e9:14:79:6c:15:4f:77:bc:76:
94:1e:62:ce:f9:86:09:1a:56:b3:88:8b:5c:41:8a:24:4f:2d:
84:04:92:99:ba:c9:98:85:d4:39:5f:da:72:03:52:2e:04:5e:
f4:37:c9:e8:33:34:a6:3d:65:ea:9f:cc:71:b6:ae:22:36:db:
9d:4e:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:59 2024 by rpki-client on console.sobornost.net