Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/SXlyfTcpfsQ4vTwnzh-SgoiEqfY.roa
File: SXlyfTcpfsQ4vTwnzh-SgoiEqfY.roa (raw, json)
Hash identifier: gth53vQGRjAKwzT6L6wA1lHu+fANOMJvLtGKZWah0T4=
Subject key identifier: 49:79:72:7D:37:29:7E:C4:38:BD:3C:27:CE:1F:92:82:88:84:A9:F6
Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial: 01856E0B0FB98499A2C430923C89851E5167
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/SXlyfTcpfsQ4vTwnzh-SgoiEqfY.roa
Signing time: Sun 01 Jan 2023 15:54:56 +0000
ROA not before: Sun 01 Jan 2023 15:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8375
IP address blocks: 185.60.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:0f:b9:84:99:a2:c4:30:92:3c:89:85:1e:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Validity
Not Before: Jan 1 15:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4979727d37297ec438bd3c27ce1f92828884a9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ac:6d:73:fb:cc:8e:bc:04:65:5e:35:36:79:
ca:fe:cf:17:cb:fd:00:a5:16:4a:ff:d8:d8:f7:98:
05:e3:38:63:8c:00:e9:f7:40:83:de:a7:ee:08:96:
20:eb:d3:b7:76:60:99:85:be:92:92:cb:97:3d:31:
ee:6f:2e:06:c5:b5:6d:b3:93:f5:08:6c:a7:e2:d8:
a7:17:40:00:c3:fe:1d:33:f1:0e:34:b3:0e:84:7b:
a8:b1:67:7b:5c:49:2b:8c:20:69:f6:35:43:75:79:
93:ee:fb:69:7f:17:61:68:5a:12:2b:2b:e0:a6:bb:
b2:a8:29:69:85:86:60:33:7a:05:f3:08:ba:ec:d5:
24:d4:cb:db:11:e8:fc:3f:81:10:db:ca:e3:44:8e:
14:b5:6f:ef:76:18:3c:1a:b1:b3:85:65:6d:7b:6f:
f6:dd:64:7a:cc:91:be:56:b8:3f:6d:70:30:ff:b7:
d2:83:1d:cc:81:63:21:47:64:2f:f4:d4:98:68:ae:
74:0f:5d:a6:f6:45:fe:3d:c0:75:75:0b:ad:df:bc:
d4:89:8d:3b:3e:30:70:ce:1f:5a:e2:1c:41:c1:76:
de:4f:7e:e9:2f:2b:e4:3a:70:49:01:2f:72:db:cf:
3a:28:ae:d4:94:40:02:e9:85:d7:d4:17:ea:7e:c4:
46:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:79:72:7D:37:29:7E:C4:38:BD:3C:27:CE:1F:92:82:88:84:A9:F6
X509v3 Authority Key Identifier:
keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/SXlyfTcpfsQ4vTwnzh-SgoiEqfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:11:59:a5:f4:cc:8e:34:f7:e4:1d:84:26:57:8c:e9:47:5b:
05:92:88:a2:88:c5:94:5a:99:e1:59:19:96:24:f5:7f:d2:7b:
03:23:8a:bb:85:7e:58:3e:c0:1d:f2:5a:6c:29:fa:6f:2b:06:
bb:a8:44:6c:ec:01:3c:f7:ee:a1:37:59:cf:90:ee:59:72:d6:
1e:dc:a6:59:c9:31:f6:20:39:6f:66:94:d0:17:a6:db:40:5d:
24:52:a6:be:de:30:7a:0a:4e:fb:d1:d4:60:84:4f:ee:15:ad:
50:b5:d9:f9:49:f5:5f:81:de:1f:62:a3:2f:f8:14:fc:39:46:
3d:fa:d2:0a:ab:34:eb:29:50:c2:cd:06:8e:77:5a:15:3b:cc:
b9:d5:c1:35:e9:a6:92:4d:4b:44:56:9e:85:24:25:36:c4:d4:
d9:47:06:a3:6b:9c:a6:b1:04:4b:85:42:eb:5d:99:d5:60:9f:
ef:87:c4:17:ab:d0:7f:85:45:06:4f:3b:7b:d9:38:69:a4:d2:
7a:23:cc:5e:48:8b:ec:3b:a8:4e:98:45:a1:0e:00:44:db:27:
c5:53:b5:0a:7a:7b:89:dd:2d:e0:07:a5:79:ce:d0:f1:7d:67:
93:cc:15:1d:49:87:a2:fe:9f:07:b5:12:e8:aa:44:69:54:57:
75:20:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:47 2024 by rpki-client on console.sobornost.net