Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Hj0oXiTrs1ygMfi62vp7uCuEcGg.roa
File: Hj0oXiTrs1ygMfi62vp7uCuEcGg.roa (raw, json)
Hash identifier: K6IfwAmmQvybM+D/+4HpMip1CeLaiE6nmAcgX9gjhGE=
Subject key identifier: 1E:3D:28:5E:24:EB:B3:5C:A0:31:F8:BA:DA:FA:7B:B8:2B:84:70:68
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018601A83B315849F74815306ABABE58E2CE
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Hj0oXiTrs1ygMfi62vp7uCuEcGg.roa
Signing time: Mon 30 Jan 2023 07:50:47 +0000
ROA not before: Mon 30 Jan 2023 07:50:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41017
IP address blocks: 85.14.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:a8:3b:31:58:49:f7:48:15:30:6a:ba:be:58:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 30 07:50:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e3d285e24ebb35ca031f8badafa7bb82b847068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:b6:ce:b1:62:49:0d:41:5b:d0:ae:20:c1:
4c:44:cb:2c:c3:75:04:e3:84:90:e4:d1:6c:7d:a9:
78:98:75:ce:49:ed:c9:e4:ca:49:af:f9:cf:6e:f6:
9b:36:01:12:15:69:d2:44:cf:a2:7b:e0:78:99:05:
0a:4f:ee:33:88:09:f7:c0:14:86:a7:c4:1e:9a:47:
bb:26:c1:8d:51:06:96:43:51:90:35:d5:bf:91:35:
80:79:17:a7:f5:ac:95:f6:31:db:2f:72:16:ab:0d:
d6:d1:bb:57:04:68:5a:f0:d6:b1:d6:92:a0:29:1c:
1b:ea:65:ed:68:11:47:b8:36:6d:93:d3:91:e9:d6:
58:81:2b:95:90:36:02:1c:63:91:c9:54:8b:70:ab:
ec:d8:c9:53:68:8e:b7:92:ea:67:8e:e9:28:35:dc:
42:1b:a7:e9:f2:14:4e:56:e5:6a:63:b4:ec:c8:2d:
c1:5c:1a:ef:a1:14:46:b1:7d:01:5a:7f:41:6a:89:
fd:b0:e9:1b:ca:bf:52:48:d5:89:4b:73:a3:4c:e5:
d4:29:8b:53:0c:8e:d8:89:d4:44:ec:3d:2c:13:cd:
bb:3b:36:3d:80:a4:5e:c3:c6:a3:80:2e:eb:d4:7f:
f7:c8:6f:85:5d:a6:d6:fb:22:b0:db:90:e4:d1:8d:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:28:5E:24:EB:B3:5C:A0:31:F8:BA:DA:FA:7B:B8:2B:84:70:68
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/Hj0oXiTrs1ygMfi62vp7uCuEcGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:fb:18:45:62:e3:0e:80:c2:29:8d:3c:82:7d:f8:5f:35:2a:
1d:8c:19:c4:ba:3c:60:c2:70:60:e5:a4:2d:e4:3f:27:5b:04:
48:0a:50:d5:ed:82:bb:ee:c8:96:4b:7f:39:c3:b0:43:33:49:
d7:fd:55:42:99:de:d7:ab:74:e0:1b:db:52:e0:26:d2:a4:4e:
20:1b:1f:2b:9e:b9:1e:f6:b8:5a:3a:ca:d7:63:b9:87:d2:8f:
78:1e:d2:25:71:04:23:da:5d:a6:85:db:ca:14:99:b2:10:2f:
e1:84:1b:f0:82:4e:ff:2c:67:76:03:06:38:83:b2:89:71:c6:
d8:6c:c4:b7:48:ea:8e:bf:2a:65:56:b8:7e:7e:33:ec:b1:f6:
f8:8c:15:d8:25:2f:d8:54:84:79:57:5c:2c:75:41:dd:c6:47:
44:51:2c:78:5e:a5:8e:84:0b:b8:b9:2f:33:40:6d:c8:b7:ca:
b8:fa:e6:57:6c:d9:fa:ca:25:6e:cd:af:4e:2d:84:b6:23:71:
9c:df:d9:2f:43:0e:51:da:68:66:69:d1:f5:ee:0d:73:5d:ee:
e8:85:d1:14:1a:0e:14:84:04:21:6b:2e:1e:ed:0b:3a:d3:23:
31:98:88:40:2e:e7:ec:3f:69:92:2c:ff:37:3c:e0:02:d6:e9:
4c:0d:ba:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net