Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/z75qgVWlhjI864GkMygd-QYjFdo.roa
File: z75qgVWlhjI864GkMygd-QYjFdo.roa (raw, json)
Hash identifier: mNJeHMQGhD9wu+uzT9ii2QVW7TrSGVcgliVGqhYmAaY=
Subject key identifier: CF:BE:6A:81:55:A5:86:32:3C:EB:81:A4:33:28:1D:F9:06:23:15:DA
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 018571154ADBD9386E9D570D4CAB0E879F14
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/z75qgVWlhjI864GkMygd-QYjFdo.roa
Signing time: Mon 02 Jan 2023 06:04:58 +0000
ROA not before: Mon 02 Jan 2023 06:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39120
IP address blocks: 176.126.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4a:db:d9:38:6e:9d:57:0d:4c:ab:0e:87:9f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jan 2 06:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfbe6a8155a586323ceb81a433281df9062315da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:0b:49:f9:0c:ae:95:5e:2d:0f:75:37:a8:
44:a0:85:e7:08:f3:da:8b:f8:9e:83:ae:50:d9:c6:
d4:ac:3b:8b:ba:9a:a6:ff:be:db:50:b4:2e:7d:88:
2b:fb:21:ca:7e:11:d2:50:60:8f:8e:51:0a:a0:d2:
c2:8c:86:25:e6:ee:2f:43:99:ae:00:e9:59:32:15:
df:2e:f0:c7:7f:96:f0:d7:2b:43:31:4c:bb:39:5a:
46:ae:9d:22:89:71:ea:0d:67:e7:32:ed:ee:ff:3e:
bf:3e:6f:e6:e5:32:bd:df:1a:27:65:8e:3e:c1:bd:
58:b3:ac:9e:3a:46:e9:62:12:19:25:c5:01:18:df:
8f:99:da:2a:c0:c3:69:35:66:98:5f:34:80:30:74:
a1:00:fa:30:1a:b5:3d:ff:d4:d3:9b:ee:78:99:a5:
d8:79:72:06:10:0d:da:aa:85:b0:1b:9e:bd:88:0c:
25:ec:97:b8:b7:33:11:da:32:db:b6:89:8a:3c:2d:
95:af:56:08:14:ea:4c:bb:14:4a:56:ec:e4:df:23:
81:94:73:31:9c:c6:e5:b0:c3:38:52:6a:b4:70:9f:
1e:3a:0c:af:13:64:63:dc:48:4a:91:2b:b0:af:5c:
c4:1c:a4:c9:52:ee:2e:d2:17:70:76:fe:4f:78:27:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:6A:81:55:A5:86:32:3C:EB:81:A4:33:28:1D:F9:06:23:15:DA
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/z75qgVWlhjI864GkMygd-QYjFdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.107.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:89:2d:80:76:47:b2:ac:0a:d5:ab:b1:4f:22:2e:93:46:18:
5a:40:bb:e9:14:42:70:3c:88:06:79:a7:a1:61:7a:4c:d3:4c:
58:87:72:d9:d5:98:76:97:59:48:93:6f:bf:8a:b2:d1:9e:4c:
79:65:7f:6d:8f:9b:41:a0:d5:c5:c0:57:4e:1a:1c:27:f5:4c:
20:db:b3:1b:4d:b4:a0:41:73:31:22:63:5e:48:e8:11:9e:7c:
2b:78:35:4c:dd:1a:c5:64:f5:54:6a:e8:0d:e4:ee:d5:b0:f2:
e5:14:a7:a3:d7:a3:97:bc:68:51:0e:4c:c6:71:2c:07:fa:56:
2c:0e:51:14:9b:13:06:de:37:20:e5:e8:cb:70:fa:81:15:3b:
34:a1:14:5d:3f:38:27:1f:d0:8c:24:93:20:6a:45:5d:41:86:
0c:38:1f:d2:c9:ef:53:22:6d:a6:57:bf:9f:a9:0d:3c:8d:de:
2f:70:74:a2:e5:6e:f4:5b:1d:8d:04:13:ab:29:d3:7d:7f:4c:
e7:d9:79:d9:24:bb:25:60:db:64:46:63:8e:24:6d:fc:6c:81:
a8:6e:81:53:56:23:1b:ba:27:b5:3e:11:e9:5c:81:57:49:f1:
36:55:cb:ba:dc:62:bc:ef:ce:da:53:d4:be:18:6f:1c:08:ce:
b2:15:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:53 2024 by rpki-client on console.sobornost.net