Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/9YExTpiOhkuJMckDJ0Csrc5McPA.roa
File: 9YExTpiOhkuJMckDJ0Csrc5McPA.roa (raw, json)
Hash identifier: NquP0HiYG9c9j268zTjcVuzunZELcwR0a8WB99RvbgY=
Subject key identifier: F5:81:31:4E:98:8E:86:4B:89:31:C9:03:27:40:AC:AD:CE:4C:70:F0
Certificate issuer: /CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Certificate serial: 01857094F320B5FBFA58845FCC17A53AD269
Authority key identifier: 94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/9YExTpiOhkuJMckDJ0Csrc5McPA.roa
Signing time: Mon 02 Jan 2023 03:44:47 +0000
ROA not before: Mon 02 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35162
IP address blocks: 194.165.30.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f3:20:b5:fb:fa:58:84:5f:cc:17:a5:3a:d2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94fa6c4299321dc5fc91fc7963aa51487e4af5e6
Validity
Not Before: Jan 2 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f581314e988e864b8931c9032740acadce4c70f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:91:10:27:17:9f:cc:4d:6a:f3:7d:78:d2:f0:
ef:a0:07:f9:ea:26:1e:a3:27:c7:98:d0:11:f3:0d:
ce:13:c4:13:cf:ca:4b:a6:8f:e3:a4:8f:f9:80:be:
0a:0d:82:c1:ec:d0:27:9e:47:e5:d2:c4:90:0c:b5:
90:3e:71:a2:3a:07:dd:0c:72:76:2f:3b:b4:81:9e:
0f:b5:13:99:7e:77:8f:05:0c:a2:db:36:83:35:01:
88:16:ac:a3:17:59:e7:61:3c:24:e9:5a:db:38:67:
33:d5:0d:e5:a6:60:70:3e:7b:ec:13:69:ec:93:2f:
3f:42:1f:c4:56:0a:21:6d:be:29:72:a6:d2:fb:0a:
a5:20:15:76:f7:d1:eb:2f:a2:7b:6b:00:92:e0:c1:
e5:7a:22:73:7e:4e:90:c8:73:cc:47:5b:f1:57:85:
36:e4:9e:71:49:a2:8b:d9:c6:2a:a6:69:a1:9c:6b:
e2:d5:eb:36:d6:80:ff:94:69:b0:a0:d6:e4:b0:fc:
34:6d:29:b2:3e:ff:de:e7:b8:a0:8a:4d:01:1b:b0:
9f:e8:7f:bb:1f:51:4f:7b:db:d1:c0:26:3a:61:42:
9c:74:12:d5:a9:18:5e:8f:4f:65:c2:17:cc:65:e9:
cf:3c:38:de:c0:b8:6b:53:1b:f6:d1:c2:78:8b:4b:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:31:4E:98:8E:86:4B:89:31:C9:03:27:40:AC:AD:CE:4C:70:F0
X509v3 Authority Key Identifier:
keyid:94:FA:6C:42:99:32:1D:C5:FC:91:FC:79:63:AA:51:48:7E:4A:F5:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/9YExTpiOhkuJMckDJ0Csrc5McPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/43d255-284a-468f-8b6e-fb1e9db0c388/1/lPpsQpkyHcX8kfx5Y6pRSH5K9eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.30.0/23
Signature Algorithm: sha256WithRSAEncryption
26:79:6b:81:d7:e2:fe:76:6e:88:87:3d:06:31:a6:4d:d1:73:
24:eb:71:eb:ae:da:e0:6d:45:a1:d0:58:22:4e:a5:23:9d:fc:
0e:1d:1e:f0:f0:00:2b:00:97:2b:37:d0:b9:8b:b7:47:35:5e:
15:58:e3:fe:70:6c:62:c7:34:71:63:b3:fe:ea:c8:42:72:e1:
7b:4e:e7:c3:1f:ad:fc:90:1b:c0:31:73:90:ac:8a:0a:51:af:
57:3e:3f:67:32:19:bf:d4:20:cb:51:02:0f:40:59:87:41:74:
d7:c2:0a:34:e6:a3:9b:f1:e5:53:5d:6d:25:d4:66:aa:fa:fa:
b0:3c:b8:69:c1:b3:21:a1:52:2b:4a:31:3f:a9:09:03:71:7f:
a9:a2:e5:b4:01:4d:18:e1:a9:d6:2b:4a:ed:1f:49:cd:d6:dd:
84:15:dd:a5:76:f7:6a:6b:27:b4:f3:38:ce:52:65:4f:64:3e:
ec:90:dd:62:fb:e1:be:3a:60:42:9b:2a:4e:19:cc:8f:80:c0:
55:52:99:e9:8c:78:31:86:02:02:ee:19:93:57:0f:08:b6:e2:
5c:77:5e:9d:99:a0:4c:ba:72:7e:c4:0c:d0:4e:ec:18:4f:34:
44:5a:f0:05:81:36:c2:8f:d5:2c:6f:d1:0e:5c:44:54:ba:fe:
02:b8:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net