Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Xz77RCGFpDFspLrC4i1B_EcldVg.roa
File: Xz77RCGFpDFspLrC4i1B_EcldVg.roa (raw, json)
Hash identifier: axRRafv3CoHpUnvcOdR5uDHax379+LkCBErjB8qtGNg=
Subject key identifier: 5F:3E:FB:44:21:85:A4:31:6C:A4:BA:C2:E2:2D:41:FC:47:25:75:58
Certificate issuer: /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial: 018570DE73EE5380E042B7BD1F11138C1298
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Xz77RCGFpDFspLrC4i1B_EcldVg.roa
Signing time: Mon 02 Jan 2023 05:05:04 +0000
ROA not before: Mon 02 Jan 2023 05:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1724
IP address blocks: 161.3.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:73:ee:53:80:e0:42:b7:bd:1f:11:13:8c:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Validity
Not Before: Jan 2 05:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f3efb442185a4316ca4bac2e22d41fc47257558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:1b:9d:e9:3d:3c:cb:cf:90:7e:56:6c:00:
89:cf:29:f1:dd:3d:a2:49:39:41:a0:d1:ff:9f:10:
f3:c5:e1:42:4a:0d:16:96:05:b6:0c:e6:c2:11:1c:
8c:22:9b:43:bf:87:6e:1d:1a:be:cb:ed:cf:2d:38:
b2:72:97:21:80:29:05:ce:ed:8b:c8:65:6a:41:fe:
66:f5:03:b3:52:83:02:4d:2e:f0:f4:ae:f8:47:54:
5d:c8:16:ab:03:f2:20:3f:3d:9f:7e:7c:cf:81:c5:
91:b4:ae:a2:e5:d3:f8:64:dc:be:b1:88:db:f6:6e:
d1:71:75:e5:a1:f5:02:9d:1a:3b:e6:0b:8b:b6:b0:
4b:ac:47:e5:d4:d5:5e:9c:d4:31:43:86:8f:d3:35:
ab:6b:7f:fc:54:dc:e5:b5:b9:4a:ae:cf:d2:b4:1f:
bf:7d:29:b8:cc:00:b8:b1:c2:65:16:95:26:23:69:
6b:43:38:34:8f:e7:a2:a9:1c:be:47:8c:b2:e2:e4:
03:64:60:4a:67:3c:c2:d3:e6:e8:73:85:84:d5:ab:
eb:97:3a:17:69:59:20:cc:55:49:68:c7:5c:57:69:
66:a1:55:94:14:da:2a:21:af:2a:a2:39:8f:2f:49:
26:62:96:86:c8:a3:55:e2:14:8c:57:da:39:1f:4f:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:FB:44:21:85:A4:31:6C:A4:BA:C2:E2:2D:41:FC:47:25:75:58
X509v3 Authority Key Identifier:
keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Xz77RCGFpDFspLrC4i1B_EcldVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:90:5f:ee:11:be:ea:23:57:0b:b1:d7:07:2b:a1:66:0a:81:
2c:17:09:e5:0c:a6:76:09:76:cb:21:7b:b4:3f:0d:f9:42:05:
49:c7:64:a2:05:4c:6e:7f:1c:1b:45:ff:56:fc:36:f1:0d:b0:
ec:91:00:2a:97:f4:84:c0:74:ab:41:b7:c8:f2:7a:1e:28:75:
1c:a4:9c:b9:2c:f1:2e:0c:4c:95:ff:9e:76:ef:4a:82:d4:3c:
cd:78:88:0f:5c:67:6a:42:40:85:54:4c:eb:33:6b:5d:70:4f:
d5:f0:e0:0f:88:1f:85:d4:4b:2e:b7:0e:2c:22:bb:27:73:98:
37:be:55:75:4a:5e:87:76:10:e6:d3:66:b0:3b:4c:1c:df:fd:
ad:66:b5:ab:2c:08:dc:9a:79:4d:dd:02:7d:9e:54:c6:5f:4c:
e0:83:ce:bb:a1:17:29:3f:4e:7e:5a:47:16:67:12:ce:49:28:
72:d9:8c:95:c8:fc:3d:bd:89:6c:36:d4:be:8b:29:8a:2e:0e:
1b:74:fa:24:50:c8:e2:71:1e:66:e9:61:3c:4b:5d:a2:7e:f4:
c4:5a:86:08:8c:8d:87:a1:f5:ed:45:ec:fa:e4:45:95:05:0e:
f4:a0:2e:40:95:d6:e5:24:93:11:43:14:30:dc:c7:77:13:31:
4b:73:75:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:04 2024 by rpki-client on console.sobornost.net