Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/NUPgt4iCkC_NjE-1O8my5ZHviC8.roa
File: NUPgt4iCkC_NjE-1O8my5ZHviC8.roa (raw, json)
Hash identifier: PMaGn8+OJ+0khMnMeThNhuMWQgaD3rpIulTrIitpxQc=
Subject key identifier: 35:43:E0:B7:88:82:90:2F:CD:8C:4F:B5:3B:C9:B2:E5:91:EF:88:2F
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 01856EEFF28A72D375AF6F7DD6E90C9FE96B
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/NUPgt4iCkC_NjE-1O8my5ZHviC8.roa
Signing time: Sun 01 Jan 2023 20:04:56 +0000
ROA not before: Sun 01 Jan 2023 20:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56647
IP address blocks: 2.56.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:f2:8a:72:d3:75:af:6f:7d:d6:e9:0c:9f:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Jan 1 20:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3543e0b78882902fcd8c4fb53bc9b2e591ef882f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:f0:15:04:4c:92:78:70:ee:51:46:ce:7e:
0b:0d:7c:ea:a6:86:ad:22:4a:1f:6e:42:78:6e:91:
75:33:b2:e0:38:f7:90:ea:45:fc:ab:da:60:ff:ab:
c8:47:b4:0d:e9:17:f7:10:73:47:79:f7:f6:fd:4c:
f5:8a:0d:22:8b:32:e9:22:5e:9a:57:81:b7:92:43:
ab:5c:db:3e:76:f1:09:40:ca:68:ef:d3:81:88:2c:
8c:95:1f:54:b9:15:a3:6d:21:d4:59:60:3b:2b:d7:
ab:85:45:d7:f0:76:67:5c:0b:2c:78:ee:11:d7:8f:
7f:08:97:bc:fa:a8:fb:a6:16:4c:0b:ff:f5:d7:c5:
5a:3e:37:72:1d:12:f8:d6:c4:cc:64:de:b1:f5:96:
5e:01:77:a4:b5:30:db:03:ab:94:7a:92:3a:dd:f8:
c5:ba:1a:a7:4a:92:f5:e1:d5:6b:a1:3f:1a:3a:c2:
84:65:43:00:96:b6:7e:43:cb:85:26:8e:f7:4b:85:
b2:45:a9:c7:40:91:da:24:d3:b8:d5:3e:ab:88:17:
09:92:0f:d3:c7:97:3c:9e:70:3b:b9:84:0c:49:33:
53:ab:a5:5c:46:81:2a:cb:fd:3f:1a:f0:36:f3:b7:
00:41:09:56:05:48:3a:e1:b6:97:f3:a0:82:87:dc:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:43:E0:B7:88:82:90:2F:CD:8C:4F:B5:3B:C9:B2:E5:91:EF:88:2F
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/NUPgt4iCkC_NjE-1O8my5ZHviC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b8:d3:e3:73:58:f6:9a:dd:08:21:8a:32:48:3e:29:9d:fa:
10:85:f0:3a:ff:5b:14:ac:b9:4f:ea:54:8d:72:94:69:2f:a4:
10:52:17:5e:a8:a8:4d:89:54:af:48:77:a0:70:ea:6b:97:2a:
21:77:d9:60:c9:d0:c8:be:09:17:8f:fe:08:69:3e:94:ba:1f:
95:cb:4c:d5:d2:68:17:0f:ee:09:68:c6:78:3c:8f:2b:44:23:
ff:0d:87:eb:e4:0c:b4:33:be:f3:53:6f:3c:2f:d9:7a:49:c3:
d1:4d:5e:c7:a2:11:75:b5:20:77:14:f7:aa:d5:60:18:f4:0f:
ed:59:ca:92:83:36:58:0d:b7:a1:67:93:6b:0e:4c:11:15:43:
6d:ad:06:81:4a:f0:3a:c8:a2:e7:54:a7:f7:7b:d6:05:80:24:
d5:ca:47:63:be:e9:37:93:98:1a:7b:8c:14:cb:8c:b8:0f:c7:
ff:c6:71:1f:bc:33:3d:7c:7f:c9:21:a8:ca:68:ef:75:3d:c6:
94:fe:18:41:55:3c:de:1b:f3:93:ff:26:e8:e2:c4:d4:e0:71:
05:63:96:75:38:fe:24:e0:03:16:bc:ca:b8:e9:99:44:f1:5f:
33:fa:ff:6c:23:64:21:ba:eb:de:bc:34:04:b3:d4:f9:32:48:
e8:b5:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:34 2024 by rpki-client on console.sobornost.net