Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1O2KKMIMdVE0bwG-np0oj3PgB6E.roa
File: 1O2KKMIMdVE0bwG-np0oj3PgB6E.roa (raw, json)
Hash identifier: 32u5zOCqqr6i1s5AM1PiIQIIFh12dp6ih4gtLcyIMkQ=
Subject key identifier: D4:ED:8A:28:C2:0C:75:51:34:6F:01:BE:9E:9D:28:8F:73:E0:07:A1
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E1C82700ED7B1C656C5474F4A88F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1O2KKMIMdVE0bwG-np0oj3PgB6E.roa
Signing time: Sun 01 Jan 2023 16:54:49 +0000
ROA not before: Sun 01 Jan 2023 16:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58174
IP address blocks: 85.204.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e1:c8:27:00:ed:7b:1c:65:6c:54:74:f4:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4ed8a28c20c7551346f01be9e9d288f73e007a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:89:bf:ae:f2:9d:84:32:e9:dd:85:94:1a:
fa:92:6a:eb:a5:10:69:b3:e2:f8:40:01:00:a9:c4:
44:9d:83:26:7b:02:f0:ef:70:37:1b:12:10:55:fb:
ab:64:c1:1d:83:12:ee:09:5b:28:d9:9e:a3:76:d1:
a4:20:88:c9:a2:d3:92:ca:43:e8:31:05:33:16:d3:
8a:0e:31:82:5d:c6:a6:93:ee:30:cf:5f:da:91:d6:
cb:7f:0c:4e:5c:95:e8:19:44:ad:78:51:c7:97:e3:
d8:2d:65:71:f3:62:d6:d7:c9:95:7d:81:5a:94:2f:
86:80:18:74:73:45:b6:6e:e1:ea:a7:a4:30:40:59:
30:80:18:39:4c:24:be:57:8b:99:46:63:fc:5a:99:
b7:ef:e4:c3:b0:b7:cf:c6:06:4b:10:cd:5c:57:49:
09:4d:e1:78:a0:7c:c4:51:99:54:2d:25:1e:4b:c4:
85:1f:65:14:64:38:96:f1:2f:2b:a6:fc:e0:2e:8f:
7b:d1:8b:4b:8f:44:7f:12:df:cf:b2:09:86:34:42:
b0:94:1c:df:8a:36:9a:45:58:29:f1:fa:ea:42:2d:
45:97:82:20:81:12:46:52:c9:a8:0b:af:bf:9b:57:
3a:54:a8:df:c2:b6:05:57:bb:15:e7:6c:81:d4:29:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:ED:8A:28:C2:0C:75:51:34:6F:01:BE:9E:9D:28:8F:73:E0:07:A1
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/1O2KKMIMdVE0bwG-np0oj3PgB6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.68.0/24
Signature Algorithm: sha256WithRSAEncryption
13:aa:56:7d:d9:48:86:d6:3a:75:ac:de:81:2d:ed:5b:39:b8:
92:ac:9d:99:72:3c:b6:a2:f0:3d:d7:c6:27:6d:8f:e4:c8:b4:
b3:c6:dd:63:dc:ff:57:fe:55:0a:cb:42:2a:45:5b:59:de:2f:
2f:d0:24:72:30:86:0f:4b:d6:59:b8:52:f2:96:dd:c6:14:b3:
8a:cc:a4:90:99:5f:c8:a9:46:3c:1d:20:91:49:ec:e4:10:e8:
cb:17:15:54:72:ab:13:ab:e5:c7:0f:92:bb:77:57:d3:80:b4:
15:e4:ca:ee:9c:a6:63:54:28:1c:10:99:84:45:0f:8a:00:40:
70:32:b7:90:e1:1c:41:95:e3:9c:2b:6b:31:a7:8a:af:70:af:
d4:2b:28:3d:47:2a:0b:49:10:c1:cc:6e:21:d5:ad:7b:64:d4:
3f:99:13:23:1a:67:86:f9:a5:ba:70:59:98:26:e8:f6:74:1a:
7c:6d:d4:16:94:25:f0:13:2c:3a:05:17:e0:c9:a2:c9:17:61:
ef:94:43:29:76:60:66:84:f6:00:c5:d9:ae:91:04:01:90:12:
65:93:1e:aa:a4:40:45:dd:bd:71:f4:ca:54:2a:98:60:d4:21:
57:27:25:50:cc:f2:28:39:f1:ff:bc:d1:4a:8e:18:40:ed:07:
bd:7a:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:10 2024 by rpki-client on console.sobornost.net