Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/wsA5WovLwaKxLmYVCxtpEnt-vOU.roa
File: wsA5WovLwaKxLmYVCxtpEnt-vOU.roa (raw, json)
Hash identifier: 4sHx7FXbgQoac0HlFPXl4pHQeqewb0cAaC0qQ2Hcq0g=
Subject key identifier: C2:C0:39:5A:8B:CB:C1:A2:B1:2E:66:15:0B:1B:69:12:7B:7E:BC:E5
Certificate issuer: /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial: 018613810B115637118C043DD7B1C1E33DB0
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/wsA5WovLwaKxLmYVCxtpEnt-vOU.roa
Signing time: Thu 02 Feb 2023 19:01:09 +0000
ROA not before: Thu 02 Feb 2023 19:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49781
IP address blocks: 5.253.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:13:81:0b:11:56:37:11:8c:04:3d:d7:b1:c1:e3:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
Validity
Not Before: Feb 2 19:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c0395a8bcbc1a2b12e66150b1b69127b7ebce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:fc:90:dd:82:b6:55:3f:39:35:f2:60:fa:
2f:31:2d:fa:c6:fd:9f:02:6b:f2:3c:57:e7:4f:bb:
8c:cc:fa:b2:11:db:28:3e:c1:7d:d5:15:5f:40:2c:
43:03:52:8c:62:e2:35:1a:5b:d0:03:53:2e:4a:c1:
4f:3b:63:a4:ed:1b:1e:ab:70:07:a6:58:e0:d4:41:
91:7b:34:52:23:c0:b5:1d:d2:1f:c2:4c:9e:a7:0c:
6e:51:c1:af:e8:d4:1b:39:1a:11:cd:05:e0:bd:d7:
b6:0b:6c:fa:42:67:bf:43:7a:38:74:b5:99:43:fa:
52:9b:ce:34:aa:92:a1:f9:25:a0:f2:4e:b1:67:e5:
d4:c5:47:28:75:e3:0d:cc:0e:af:6c:a3:b9:f3:75:
ca:5f:27:15:25:6b:12:28:98:c3:5f:c8:19:b5:14:
fa:cd:9b:61:40:cd:51:d3:44:e4:32:50:68:62:01:
67:72:10:cd:47:9c:25:fb:a6:f6:86:f0:d6:7c:c1:
2a:35:4d:3f:1f:00:e9:29:cf:f4:0b:b6:6d:2c:cc:
f8:46:42:7b:a3:dc:6d:63:4b:85:4e:9b:55:86:29:
b8:56:64:9e:dc:04:8d:cb:fe:8e:82:b3:3f:6f:a7:
61:ff:a1:61:a5:42:9e:fd:8b:9f:cd:31:2a:3d:a3:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:39:5A:8B:CB:C1:A2:B1:2E:66:15:0B:1B:69:12:7B:7E:BC:E5
X509v3 Authority Key Identifier:
keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/wsA5WovLwaKxLmYVCxtpEnt-vOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ce:b9:60:d7:df:76:e4:10:9b:61:2a:c8:da:76:87:9f:6c:
53:b1:01:65:85:65:68:ee:e9:1c:81:c9:b7:3e:84:90:96:f4:
1a:24:34:a3:23:a1:8a:fc:55:30:5c:2e:6c:63:64:71:3b:4c:
f1:2b:b4:b9:a1:17:48:e9:18:5f:8d:b3:aa:9f:a5:de:b4:56:
51:d3:c7:86:39:6b:f2:ce:de:60:16:35:14:0b:bc:4f:37:d4:
48:f0:ea:a8:fa:92:5c:72:6b:ce:06:95:b0:19:33:7f:ae:ee:
89:a0:9d:4c:27:9a:f1:61:51:d8:b0:0f:06:94:56:1e:39:c6:
1e:12:8d:a6:38:99:07:9e:b5:2d:be:31:d2:91:fd:35:71:8c:
14:19:cc:b5:47:47:22:44:7e:e9:9d:58:15:50:34:b9:8b:ed:
41:b7:42:a4:aa:f9:f7:6a:94:41:c1:69:d1:d8:fd:60:b7:84:
5e:63:75:9b:a9:b2:ec:26:d2:4c:69:d2:04:94:9d:ab:57:32:
4a:e9:8e:e4:5e:00:f4:4d:a4:34:d2:fa:10:65:f8:7e:b0:93:
6b:a7:14:a7:3c:86:03:48:46:27:7f:46:f5:e5:c5:ba:ca:83:
9e:f7:81:af:93:c4:dc:00:38:21:ee:de:8a:f3:d5:c6:9f:01:
85:f9:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:00 2024 by rpki-client on console.sobornost.net