Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/DVezQbFDo5kvOucuoWs6KH0QSFo.roa
File: DVezQbFDo5kvOucuoWs6KH0QSFo.roa (raw, json)
Hash identifier: icc//MRPhHuB9pj+UrWi58nvpMxeipQ/xxd1l2KPRHQ=
Subject key identifier: 0D:57:B3:41:B1:43:A3:99:2F:3A:E7:2E:A1:6B:3A:28:7D:10:48:5A
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 0187BEB8984DFCD54A5897CAEF2D4BB2A1EF
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/DVezQbFDo5kvOucuoWs6KH0QSFo.roa
Signing time: Wed 26 Apr 2023 17:59:41 +0000
ROA not before: Wed 26 Apr 2023 17:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44558
IP address blocks: 159.255.40.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:be:b8:98:4d:fc:d5:4a:58:97:ca:ef:2d:4b:b2:a1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Apr 26 17:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d57b341b143a3992f3ae72ea16b3a287d10485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:1c:58:67:48:97:d7:47:0c:16:df:a0:cd:
61:ad:92:03:d5:35:7d:9a:7c:42:8e:97:36:db:52:
64:50:2f:6e:22:01:14:ac:df:1a:04:60:47:9b:2f:
17:06:3d:03:aa:f7:3c:58:15:5d:53:45:d4:ff:89:
c7:c6:41:c1:0b:2b:e4:a3:38:ee:7b:07:8a:74:64:
11:c2:a4:90:20:3a:6a:c0:61:b7:38:8d:60:4b:a7:
8a:e9:87:10:2b:6a:17:3b:27:5a:4c:bf:ac:42:f1:
72:b5:c7:df:f4:1b:04:61:5c:47:09:68:5e:3d:17:
e7:9d:75:e9:da:39:63:fa:7c:80:91:1b:07:75:4a:
de:81:f1:7c:c5:1c:c9:e8:19:8f:3f:d6:71:9c:ba:
95:de:8e:9c:38:ca:89:79:b0:c2:01:85:27:f4:9d:
b0:11:ce:c5:b9:c0:a9:85:25:ed:71:c3:d3:c9:3c:
38:c7:51:63:c3:27:db:78:18:b0:87:8a:75:93:4a:
29:80:a4:d0:18:f4:c4:e8:9c:b6:24:97:28:84:ab:
00:8d:64:6f:5f:f2:8c:94:46:35:d0:95:fa:ca:18:
47:b0:a2:de:88:6f:39:47:c9:6b:dd:74:a7:2a:88:
dc:a7:3d:54:b5:3c:3f:aa:ff:59:e7:da:ed:2e:99:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:B3:41:B1:43:A3:99:2F:3A:E7:2E:A1:6B:3A:28:7D:10:48:5A
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/DVezQbFDo5kvOucuoWs6KH0QSFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.40.0/21
Signature Algorithm: sha256WithRSAEncryption
52:25:e8:52:65:20:1d:1b:bc:be:e5:6e:ba:df:2e:db:85:61:
9d:5d:4c:bf:4a:57:c4:82:6c:c1:43:ca:4c:d8:c6:6e:d5:39:
13:20:b5:f4:ac:4a:f2:da:ee:cc:c5:59:f7:cc:b7:44:ac:bd:
c5:1f:e9:01:a5:6b:d7:96:5f:63:b6:a7:46:36:48:23:0a:e9:
de:81:fe:c5:90:e5:8b:f8:9c:df:54:17:72:de:dd:d3:c8:bf:
48:e0:ef:df:eb:ac:e4:5b:81:16:30:5a:d0:b5:eb:ad:ba:ab:
81:2f:a2:cf:c9:34:b6:01:bf:4f:fe:57:10:db:b3:af:bb:2a:
57:6b:55:7e:d3:3e:e2:1f:54:df:ed:c1:57:26:2f:24:83:6f:
07:04:4c:60:28:39:61:5f:d1:45:f7:03:97:2a:23:72:97:c6:
29:4a:b8:60:fa:28:bb:dc:84:9f:13:1a:0a:c5:da:a5:d8:47:
99:9b:9d:e6:af:6a:15:b1:0e:b7:93:65:9e:c4:63:87:c5:e2:
0a:7f:a8:bb:e5:6c:e2:41:a2:df:3d:84:28:7f:d6:9d:da:a9:
44:24:0b:b9:ed:b9:bc:a3:51:72:e1:e9:2e:ef:70:28:68:f6:
86:e4:c1:00:38:3b:52:60:2f:76:09:9d:2a:4a:3c:2d:0c:5f:
1c:88:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:50 2024 by rpki-client on console.sobornost.net