Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/s-ScIurOBTNND_oYyRyA1Gc6pH8.roa
File: s-ScIurOBTNND_oYyRyA1Gc6pH8.roa (raw, json)
Hash identifier: bE9c+5Wj0dRKu92yP2VrRHOnyCBLb+MTdN3jEFGpa9U=
Subject key identifier: B3:E4:9C:22:EA:CE:05:33:4D:0F:FA:18:C9:1C:80:D4:67:3A:A4:7F
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 018A26683E81E466681C2446560E71C89725
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/s-ScIurOBTNND_oYyRyA1Gc6pH8.roa
Signing time: Thu 24 Aug 2023 07:18:00 +0000
ROA not before: Thu 24 Aug 2023 07:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207734
IP address blocks: 193.186.199.0/24 maxlen: 24
5.11.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:68:3e:81:e4:66:68:1c:24:46:56:0e:71:c8:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Aug 24 07:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e49c22eace05334d0ffa18c91c80d4673aa47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:84:a5:d1:13:9a:e6:ae:52:13:e2:95:b3:b5:
ba:07:bf:57:e3:37:22:8c:f7:85:8b:c6:f7:c6:f3:
5a:9c:14:ae:4a:2c:28:bf:57:90:02:72:fb:27:5c:
db:be:35:f0:26:c3:e0:60:1e:f5:77:18:0c:25:e3:
ed:03:ad:6d:e9:5b:cb:82:88:14:31:c6:4a:c8:17:
56:24:4d:21:4c:13:5f:87:9e:d5:1d:02:95:98:a8:
b4:18:1f:39:e4:69:59:c0:31:2c:ac:fd:92:ae:9e:
14:c2:5c:c1:99:66:b3:e0:73:0a:b5:eb:68:15:21:
7b:3c:d4:fa:da:04:d3:df:e7:93:36:33:6a:9a:b9:
e8:94:db:66:c0:7e:8a:49:c6:03:a4:86:dd:83:78:
43:3f:fe:5f:05:b5:43:01:c2:d7:d9:78:c1:bd:fe:
fe:09:a7:de:88:fd:a6:43:a5:11:ef:58:46:52:8e:
67:2a:b2:02:ed:49:8c:97:d3:96:4a:22:bf:da:ba:
a3:f4:64:a8:08:2d:50:f9:b8:0e:7b:de:49:a1:6c:
0f:78:8b:df:a1:eb:7e:36:13:6c:1e:f7:85:a7:e4:
b3:b6:32:9d:59:04:c4:f7:f8:45:62:78:c1:a4:5e:
f9:f0:e5:5d:0b:23:a3:d2:ae:41:3f:86:71:67:ef:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E4:9C:22:EA:CE:05:33:4D:0F:FA:18:C9:1C:80:D4:67:3A:A4:7F
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/s-ScIurOBTNND_oYyRyA1Gc6pH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.23.0/24
193.186.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:14:c5:10:5f:3a:25:d5:d7:72:bd:77:3a:39:e9:93:44:22:
2e:a4:b7:c8:72:a1:35:86:32:b7:07:3c:ec:7d:10:1d:ee:fe:
98:50:fe:ff:26:b1:a5:26:ed:26:ae:fd:a4:92:0e:d0:b9:2a:
1b:92:7f:3a:f1:cc:4f:96:77:db:7d:7a:c2:f4:50:b6:49:82:
fb:f1:32:b0:f4:0e:42:0e:b7:7c:5b:2f:95:db:0c:68:e3:2c:
f4:34:c4:08:53:5c:c6:e4:22:ce:6f:15:de:60:a2:08:0a:6f:
8d:b1:41:e9:ae:03:60:ff:0e:c9:95:95:52:d5:a1:ad:49:5a:
59:f5:8e:ab:a3:e8:48:88:e3:d6:fe:c3:d9:85:21:76:e4:a4:
72:eb:b4:9a:d1:df:e0:51:91:66:2e:d6:6c:19:d2:a8:e2:90:
80:af:92:53:a2:a5:18:98:be:dd:1c:0a:4a:04:0c:5a:3b:12:
91:dd:59:08:d1:f5:02:1c:1c:45:aa:ea:20:1c:99:3c:ac:f1:
3f:9c:f1:02:c4:41:3a:ac:53:d6:34:3d:f0:1a:00:27:72:b6:
78:17:1d:ca:1e:15:fa:1c:cc:c6:84:fe:eb:ae:be:c4:7e:73:
8c:e0:66:32:f0:d1:7c:1e:8a:44:2b:fb:a0:96:4a:da:a1:65:
9c:71:d5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net