Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/2e5t1LuO4FUfP3JDJyplma6HGyw.roa
File: 2e5t1LuO4FUfP3JDJyplma6HGyw.roa (raw, json)
Hash identifier: BCkBocnFvbPRIV25jtMdIsR6diAfzlBB8cNtVYSL4mg=
Subject key identifier: D9:EE:6D:D4:BB:8E:E0:55:1F:3F:72:43:27:2A:65:99:AE:87:1B:2C
Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073
Certificate serial: 01856D3860C82B78EB4BA37DC06C74380170
Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/2e5t1LuO4FUfP3JDJyplma6HGyw.roa
Signing time: Sun 01 Jan 2023 12:04:49 +0000
ROA not before: Sun 01 Jan 2023 12:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204299
IP address blocks: 185.254.20.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:60:c8:2b:78:eb:4b:a3:7d:c0:6c:74:38:01:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073
Validity
Not Before: Jan 1 12:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9ee6dd4bb8ee0551f3f7243272a6599ae871b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:e6:f2:dc:ff:89:e7:6f:ff:ee:1f:e6:ee:
40:4f:06:a2:df:06:ad:c4:5c:45:d2:e4:ab:a9:ef:
3e:75:c2:1c:68:66:8b:92:f9:49:13:5e:ee:4c:2c:
e0:95:cc:b6:6c:88:e7:92:77:a3:84:bc:5f:ef:69:
73:ed:fe:86:4b:08:11:6b:3a:33:a0:9b:56:1e:a7:
da:f0:b8:3e:7f:a6:31:01:ec:45:0c:ad:ec:9c:67:
ee:3c:a3:d6:03:c6:92:47:a6:c2:e7:64:f4:5b:2f:
0b:d1:d7:b1:e9:ac:95:2f:3c:8c:72:32:e8:a5:b2:
cf:92:0d:df:34:66:92:9f:5d:7c:c5:8c:0e:e6:fa:
33:f5:56:6b:7e:ee:7b:83:ee:96:ad:8c:3a:49:95:
31:77:be:d6:ad:7d:dd:6c:d7:e7:cb:4c:e2:79:ce:
69:cc:40:e3:f0:6c:d9:92:56:21:a2:5d:98:e5:92:
ae:d6:d9:b9:2c:63:de:c8:31:53:e8:e2:d6:24:b3:
ea:91:c7:d7:be:2f:11:ee:02:8d:2c:80:3f:e5:77:
97:17:a1:bc:80:14:6f:3c:cb:57:ef:ed:11:e8:3d:
73:c6:ae:5d:cf:33:79:e8:0b:3e:f6:2c:5e:9d:a9:
23:d4:c0:cd:d5:87:98:6d:ad:51:34:52:e2:0b:a7:
60:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EE:6D:D4:BB:8E:E0:55:1F:3F:72:43:27:2A:65:99:AE:87:1B:2C
X509v3 Authority Key Identifier:
keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/2e5t1LuO4FUfP3JDJyplma6HGyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.20.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:9b:b8:5d:bd:fc:75:f1:40:69:27:ba:ff:34:dd:8d:c5:d8:
95:69:65:28:7f:58:32:35:cc:64:f6:15:a7:5a:3a:16:b6:34:
09:d5:fa:0e:75:39:cf:56:d0:35:2f:d9:d5:29:c4:e0:0a:16:
fe:46:a2:50:a3:2a:34:3a:41:84:fd:75:99:34:24:39:54:37:
29:31:4c:d5:46:35:68:a8:a3:a4:6d:62:c6:a1:ef:2e:44:39:
cf:65:19:db:b1:84:9f:48:74:a0:c1:7b:6c:49:1b:32:fd:16:
41:08:7d:fd:f7:ca:c7:64:6e:dd:83:f7:86:4c:d7:07:65:7b:
0b:8e:9f:f6:e7:38:92:63:c9:54:e6:c0:66:3c:18:18:ec:45:
35:0b:30:4b:27:2d:39:c5:18:6c:5a:3b:0f:bb:87:71:91:9a:
6e:dc:85:10:2d:c1:62:14:82:55:3f:6d:50:45:65:bd:fc:84:
97:6b:84:10:a4:71:c7:26:ce:2f:fc:95:22:c2:3e:fe:34:65:
f4:ad:37:fe:12:71:45:c9:18:c4:c2:9d:3f:34:55:d0:50:81:
f0:60:d8:eb:6b:15:9b:b3:f2:02:6a:cc:15:ca:d5:69:7a:47:
5a:4d:7e:e7:4e:77:9f:8e:fd:5b:8c:af:4c:fd:02:6a:a8:e0:
35:50:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:37 2024 by rpki-client on console.sobornost.net