Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/vpO-oRNFajv1M38oN6BCKzZM9FQ.roa
File: vpO-oRNFajv1M38oN6BCKzZM9FQ.roa (raw, json)
Hash identifier: hUBP33Issj7Xb1yAflMDg9nWRt7c9R8V0982/Ctmp9Q=
Subject key identifier: BE:93:BE:A1:13:45:6A:3B:F5:33:7F:28:37:A0:42:2B:36:4C:F4:54
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0185711534AD5E9093766AB56380C2D36496
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/vpO-oRNFajv1M38oN6BCKzZM9FQ.roa
Signing time: Mon 02 Jan 2023 06:04:53 +0000
ROA not before: Mon 02 Jan 2023 06:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60395
IP address blocks: 195.10.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:34:ad:5e:90:93:76:6a:b5:63:80:c2:d3:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 2 06:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be93bea113456a3bf5337f2837a0422b364cf454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:cb:37:43:df:bf:e3:10:df:26:4d:f6:cd:
f6:7f:be:48:8a:d3:ef:fa:22:b7:c0:43:47:e2:7a:
52:8a:a1:58:e4:a5:89:05:83:3f:38:d4:0a:f4:6b:
f8:0d:b2:b2:d7:4f:b4:b8:73:17:18:53:4b:52:8e:
98:73:61:77:bd:c6:ec:69:9e:3d:59:e2:03:89:2e:
b6:08:88:be:af:1e:ae:39:01:85:7b:97:f1:a1:4a:
52:e8:c9:b4:eb:b6:b2:7a:02:25:12:fc:54:9d:ae:
e2:00:41:64:b5:66:fd:87:3f:cc:a2:89:4b:84:2e:
9c:5e:b2:64:14:26:3c:92:99:09:51:84:ba:36:38:
5d:26:e9:e5:9c:a4:63:97:f3:61:a0:37:8c:73:3e:
dc:14:cd:54:2d:a2:c0:26:6f:1e:45:66:32:49:7f:
5b:e1:45:98:eb:aa:a7:50:5e:11:ed:3f:e8:92:23:
52:90:fd:97:69:8e:b9:b5:57:79:db:01:5d:40:71:
52:23:7c:52:bf:8c:a6:e7:4c:b6:53:11:4c:4c:02:
5f:fd:c3:26:b0:5c:a0:b9:3c:b8:30:7d:7b:69:64:
a4:23:08:08:be:cd:3f:23:04:08:c5:54:74:b0:31:
46:20:90:d3:96:b6:b9:ad:ae:34:97:87:83:c5:fc:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:BE:A1:13:45:6A:3B:F5:33:7F:28:37:A0:42:2B:36:4C:F4:54
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/vpO-oRNFajv1M38oN6BCKzZM9FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a3:64:c9:c1:1e:35:1c:ab:fc:d2:8c:47:15:58:05:84:2d:
52:07:45:77:28:ea:5c:98:f5:49:de:1c:c8:83:ff:2e:75:ff:
4c:28:be:50:a9:b2:76:4d:2c:31:7a:9e:13:f1:39:1d:c2:79:
c8:36:5a:42:27:b5:35:7f:41:54:3b:06:71:e7:35:e8:7e:40:
79:13:77:32:3b:5b:72:4b:83:76:50:48:bb:a6:bf:98:c7:6e:
03:d8:0d:4d:e7:c2:cc:64:ca:ee:c7:fc:dd:02:cd:27:8f:e0:
29:e3:a0:03:0f:fc:db:e5:5f:18:fe:e4:0d:b2:99:be:04:0c:
db:3c:3d:e7:c1:96:19:9a:72:4a:3b:c7:12:d6:de:b1:a1:c3:
2e:1a:65:b4:5f:85:19:26:e7:81:5b:8d:a4:86:1c:41:41:67:
d0:24:9f:91:ae:de:6d:d7:e2:99:06:0c:c9:d7:b0:27:1d:7d:
56:56:7e:cf:4a:06:7c:e4:7a:0f:ef:3e:64:05:01:e8:d3:18:
07:8b:8e:9c:c4:3c:df:c4:df:6d:89:d8:50:db:f1:05:a1:7d:
23:70:39:f9:c7:4c:e0:03:09:17:cb:2c:8a:05:21:22:ad:20:
51:c1:16:eb:4e:4b:b8:3e:a1:dc:4f:6e:1b:ab:c7:8c:d0:89:
58:be:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:06 2024 by rpki-client on console.sobornost.net