Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/rxGOZBxweJvcKdcfoWTaW8aIZrk.roa
File: rxGOZBxweJvcKdcfoWTaW8aIZrk.roa (raw, json)
Hash identifier: Dkrneq7mie28ftN/qSSmvulToNCrNo2u/NRzHJqqlAg=
Subject key identifier: AF:11:8E:64:1C:70:78:9B:DC:29:D7:1F:A1:64:DA:5B:C6:88:66:B9
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0189D4B8A64D2BAB0F6A63442E57C66D8C3B
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/rxGOZBxweJvcKdcfoWTaW8aIZrk.roa
Signing time: Tue 08 Aug 2023 10:36:58 +0000
ROA not before: Tue 08 Aug 2023 10:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 194.62.162.0/24 maxlen: 24
91.205.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:b8:a6:4d:2b:ab:0f:6a:63:44:2e:57:c6:6d:8c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Aug 8 10:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af118e641c70789bdc29d71fa164da5bc68866b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:f3:b2:f5:8d:0d:4d:a6:21:5c:57:5f:f0:
1f:b3:ac:0f:22:95:00:e9:a4:67:ca:98:5c:11:a7:
f8:29:4e:0c:9a:09:18:e6:b0:74:85:60:ff:f5:25:
6c:51:9e:cc:20:ae:07:0f:f0:20:fe:a0:1a:1b:d3:
a7:07:67:1d:c8:2c:16:2e:26:a8:39:b3:a9:65:a2:
08:c6:96:8a:60:8b:99:c6:e3:0d:84:3b:4c:1d:c8:
80:f5:dd:0a:e4:6f:c0:1a:6f:7a:c9:b0:24:2b:e3:
27:30:d4:36:43:10:a7:66:3e:82:e6:fb:aa:49:e7:
65:ba:b1:99:3a:3b:1f:c2:f3:d8:93:c0:28:e4:60:
c4:b1:cd:1b:3d:dc:49:c2:25:bf:6f:bd:fe:54:22:
4d:26:d1:97:96:03:1d:64:a9:28:b0:67:fe:19:ae:
fc:49:06:05:e6:b6:5d:fa:86:5a:eb:59:a8:f2:95:
f2:d9:84:f7:68:44:8a:88:91:3b:ea:c1:f2:d9:80:
7d:cc:d1:ec:32:ec:ef:37:3f:e8:1f:03:59:24:2b:
28:28:98:b4:60:ee:7d:40:98:61:fb:8a:49:6b:ff:
54:e8:b1:2c:69:90:97:59:05:e0:6f:b0:93:d8:36:
35:db:36:7e:03:79:63:cd:bd:fc:c4:79:66:2e:56:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:8E:64:1C:70:78:9B:DC:29:D7:1F:A1:64:DA:5B:C6:88:66:B9
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/rxGOZBxweJvcKdcfoWTaW8aIZrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.223.0/24
194.62.162.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a6:ac:e6:03:b1:f3:b2:ad:c9:31:f7:70:b0:78:73:c1:76:
60:c0:10:76:40:2f:44:d8:48:1a:2b:a7:83:cf:0c:ab:92:f0:
5c:3d:2e:a7:48:71:74:61:d7:36:f2:31:db:24:eb:ea:6a:ae:
99:fa:63:b4:16:a1:81:34:06:3d:92:ee:b0:ab:8f:dd:61:c3:
38:3b:ba:f5:34:84:b6:13:03:44:c6:1b:cf:84:d2:30:e4:6a:
05:58:59:3a:6b:f2:fe:3f:5e:d1:ee:d7:13:7d:f9:9a:05:df:
d3:68:17:12:4d:d2:87:f2:24:ed:e5:ce:ec:75:7e:89:2f:7a:
07:22:32:b7:15:10:4e:96:dc:52:9a:45:d3:eb:69:13:0a:24:
7b:ae:28:8b:f5:5d:57:86:39:4a:c5:80:73:6a:06:48:6b:07:
a3:19:8c:62:30:33:c8:5e:bd:c1:a0:9a:cf:42:0b:64:a0:9b:
19:9a:12:9e:b7:b7:49:a1:22:a7:68:e8:69:02:36:b8:ea:95:
a2:dc:76:95:70:24:f4:ee:39:d5:9a:9d:ae:41:51:5f:be:8c:
37:67:71:6f:4c:43:4a:df:e4:3b:88:91:23:e4:f6:f9:e8:4d:
c3:11:20:f7:dc:b0:1b:fe:12:9b:da:0a:87:6c:1a:bc:b8:17:
03:49:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:11 2023 by rpki-client on console.sobornost.net