Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/_nVFqRrLn1PyPgiX31mhF2o_l_4.roa
File: _nVFqRrLn1PyPgiX31mhF2o_l_4.roa (raw, json)
Hash identifier: iUZVHHa6e1iTLEKS2TF4sjt4zpAmxNRY+wvL7HL7TvE=
Subject key identifier: FE:75:45:A9:1A:CB:9F:53:F2:3E:08:97:DF:59:A1:17:6A:3F:97:FE
Certificate issuer: /CN=908e5372f8052a343d4992db2428c42f34128293
Certificate serial: 0187548377FA0730425FEA6C4BD39E95680D
Authority key identifier: 90:8E:53:72:F8:05:2A:34:3D:49:92:DB:24:28:C4:2F:34:12:82:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI5TcvgFKjQ9SZLbJCjELzQSgpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/_nVFqRrLn1PyPgiX31mhF2o_l_4.roa
Signing time: Thu 06 Apr 2023 03:01:54 +0000
ROA not before: Thu 06 Apr 2023 03:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 185.109.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:54:83:77:fa:07:30:42:5f:ea:6c:4b:d3:9e:95:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908e5372f8052a343d4992db2428c42f34128293
Validity
Not Before: Apr 6 03:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe7545a91acb9f53f23e0897df59a1176a3f97fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:c3:61:64:98:69:d6:96:e8:2a:a8:cf:f6:
93:74:96:06:40:d7:03:95:49:08:36:28:84:fc:f2:
fc:9f:90:29:18:1c:b1:78:32:d4:5d:f0:76:fa:0d:
da:30:1d:19:9d:eb:39:96:c9:51:ac:44:ff:03:83:
e9:f7:b7:4c:ad:ad:0c:71:17:fd:d0:17:6d:57:dd:
66:96:59:9b:e7:ae:0b:68:55:29:15:32:c6:aa:fe:
29:84:68:d0:ce:8e:45:fa:75:d4:05:2b:2d:cf:da:
65:be:4b:58:43:6a:5f:bf:18:48:e4:d5:33:50:64:
da:a2:cf:3c:bd:98:b7:79:7c:ec:b4:bc:c1:b9:67:
14:95:9a:5b:9b:1f:25:b7:ba:07:08:77:41:fd:4a:
55:a7:d4:16:87:8d:af:97:94:a2:b7:b4:cf:4d:1b:
70:ac:87:c8:3f:84:49:58:f0:52:98:05:67:af:62:
e3:b3:6f:24:15:4a:0e:1e:bc:e6:11:5f:e8:d3:f7:
e1:94:f5:05:e6:94:97:f1:ce:77:93:50:9b:3d:76:
e8:17:b9:7b:39:f8:9d:88:66:a9:e8:cb:ba:0d:1e:
f6:22:5b:42:0e:91:de:72:78:55:ed:b5:93:03:1c:
73:eb:f6:e8:46:ea:88:e9:70:8f:48:94:95:14:cb:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:75:45:A9:1A:CB:9F:53:F2:3E:08:97:DF:59:A1:17:6A:3F:97:FE
X509v3 Authority Key Identifier:
keyid:90:8E:53:72:F8:05:2A:34:3D:49:92:DB:24:28:C4:2F:34:12:82:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI5TcvgFKjQ9SZLbJCjELzQSgpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/_nVFqRrLn1PyPgiX31mhF2o_l_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a99afa-7634-4247-a7a2-e7fb38ee6c30/1/kI5TcvgFKjQ9SZLbJCjELzQSgpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.48.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ec:ac:06:a7:a7:14:74:a2:40:8a:a2:c6:61:13:be:2c:36:
ad:ab:58:bc:d1:93:13:a5:f3:3a:b8:5b:fd:24:a9:12:da:c7:
c9:d4:f3:22:81:36:35:45:9b:f1:6a:8a:aa:c8:c0:af:df:a1:
bc:54:23:9e:4e:75:27:06:74:9c:73:05:f0:51:d6:f3:ed:e1:
c1:c2:d8:8c:eb:a3:c0:cf:77:2a:9e:7d:9c:d1:40:31:d7:8e:
85:c1:09:fe:38:b0:02:84:d7:54:5c:b1:fa:6b:c4:00:c3:57:
58:37:bc:1b:57:66:7f:9a:90:1b:1a:d9:a8:1a:cd:e1:ef:fc:
af:51:a1:63:19:83:d1:6c:6f:92:51:7a:d5:15:5e:1d:94:06:
c3:29:9b:29:51:dc:22:d2:84:7e:0a:d6:f2:f0:56:ba:33:a1:
0e:8a:0a:cc:b8:7d:3c:70:9c:e2:6f:f7:70:69:c4:e6:22:a5:
d0:2f:55:01:a8:29:7a:e1:b3:59:d2:d3:21:02:e0:3d:14:62:
ce:75:1b:f6:4c:a3:39:84:a3:f2:c0:27:03:ff:f7:75:eb:94:
10:e1:29:86:b3:ac:0b:39:1a:d8:c1:62:57:d5:4f:ae:b3:2c:
aa:93:26:93:07:0b:1c:8d:86:f5:ad:32:6a:2a:47:11:3b:68:
d1:f0:82:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:50 2024 by rpki-client on console.sobornost.net