Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/xHKN8fQ7ZSGGoub8Wx5iqfxCJDQ.roa
File: xHKN8fQ7ZSGGoub8Wx5iqfxCJDQ.roa (raw, json)
Hash identifier: XaJHl1uNEIExswWaRfYHGiHb+rCQnP9K9zQAWKJM3ZM=
Subject key identifier: C4:72:8D:F1:F4:3B:65:21:86:A2:E6:FC:5B:1E:62:A9:FC:42:24:34
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 018699402E7D77F22143CD5269F3FBD49D84
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/xHKN8fQ7ZSGGoub8Wx5iqfxCJDQ.roa
Signing time: Tue 28 Feb 2023 18:19:25 +0000
ROA not before: Tue 28 Feb 2023 18:19:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 195.177.230.0/24 maxlen: 24
195.177.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:40:2e:7d:77:f2:21:43:cd:52:69:f3:fb:d4:9d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Feb 28 18:19:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4728df1f43b652186a2e6fc5b1e62a9fc422434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:b0:43:b1:bc:6b:35:fd:8e:bc:00:26:2d:
f6:ce:f7:11:af:8b:5d:45:03:bd:3d:41:4f:c1:16:
7a:b0:9a:59:24:0d:39:8f:9f:1a:6c:67:b5:3e:dd:
94:c5:55:a7:8f:e7:23:71:96:65:10:2f:36:7d:4a:
c7:e0:6e:fa:97:71:11:31:f4:33:20:1e:38:0c:1a:
9c:40:58:42:da:e2:16:0f:32:e3:bd:89:4b:ff:08:
ea:f6:f3:11:9f:9b:5a:c5:a7:99:a0:c1:5e:09:33:
15:a6:ce:88:db:9a:17:c6:c3:24:68:50:66:2d:6b:
40:6b:2d:11:d1:cb:60:b6:a2:b8:49:ff:d8:cc:e4:
2c:09:4c:8d:cc:5b:43:77:72:29:59:4e:0f:64:27:
e5:73:5c:a4:54:c5:c9:5a:34:98:17:b2:3e:01:ef:
eb:84:cf:ad:99:36:4e:7c:63:8b:1c:86:63:6c:42:
ac:49:d2:6f:c7:53:d5:11:e1:e1:e8:99:36:66:09:
fa:15:89:8a:c7:87:c7:2c:9c:bc:5d:f2:7f:80:fd:
e4:80:70:5f:13:14:91:2b:12:10:29:7a:5f:6b:ff:
ec:47:84:7a:3a:ad:b2:84:a3:36:46:21:a3:93:ca:
47:39:ef:3d:f4:7a:9b:a5:e7:a1:7d:4d:a5:13:67:
bf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:72:8D:F1:F4:3B:65:21:86:A2:E6:FC:5B:1E:62:A9:FC:42:24:34
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/xHKN8fQ7ZSGGoub8Wx5iqfxCJDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.230.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:65:ab:7f:50:e5:c5:cc:80:ab:c0:9e:fc:ab:5f:b0:c1:dd:
53:dd:d0:3b:05:75:dc:44:74:8d:67:c1:6e:e3:a5:e4:29:6f:
54:79:fd:cf:c0:b8:80:53:1a:a9:be:bb:5e:8e:a7:a5:db:7e:
ba:c0:6d:22:0f:43:cd:33:d2:fc:d2:e6:82:50:b9:3b:28:73:
39:21:c6:f3:4d:e5:f2:e9:66:8c:b7:09:91:28:70:69:38:ac:
e9:e8:08:fb:97:0a:31:93:6d:38:4a:b6:66:f5:0b:6d:b0:87:
99:b5:63:1c:51:47:f1:cf:a3:a7:73:c1:ce:52:ec:8c:42:df:
1e:35:ff:30:e4:cd:67:63:69:26:82:c4:10:df:1b:f3:72:e9:
df:41:7a:35:78:3e:7f:a7:3e:e2:14:0c:a5:3b:47:b2:b9:67:
58:b1:c7:77:9f:72:72:1f:42:98:f2:6f:35:b9:ee:85:ef:bf:
18:f0:d5:fe:89:f4:c8:61:99:c3:f4:a9:0d:ee:dd:ac:83:97:
0a:c7:f1:be:db:32:f4:75:03:67:1b:53:85:3d:21:8e:a8:37:
64:4a:5e:73:05:99:a9:10:99:16:2f:6a:1e:1e:47:8c:82:64:
f5:96:45:5f:49:cd:76:e9:b9:2f:50:89:0c:58:11:c5:04:c0:
d0:31:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net