Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/CDRAt3lrTFk-OkYp_pekx2Qv6Gg.roa
File: CDRAt3lrTFk-OkYp_pekx2Qv6Gg.roa (raw, json)
Hash identifier: QFQFMV0HkLQe4qcIgKjVpjjBB6Zr2s+zaoyTx5ObsB0=
Subject key identifier: 08:34:40:B7:79:6B:4C:59:3E:3A:46:29:FE:97:A4:C7:64:2F:E8:68
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 018571954185CFA26E73AF04FAA9EAD44AB1
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/CDRAt3lrTFk-OkYp_pekx2Qv6Gg.roa
Signing time: Mon 02 Jan 2023 08:24:45 +0000
ROA not before: Mon 02 Jan 2023 08:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 185.70.96.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:41:85:cf:a2:6e:73:af:04:fa:a9:ea:d4:4a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Jan 2 08:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=083440b7796b4c593e3a4629fe97a4c7642fe868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d6:3c:d9:f0:c5:15:c3:6a:37:c6:81:75:00:
2e:99:00:c6:e1:a1:9f:a9:a4:b1:70:8b:83:d6:a5:
de:0a:3e:e3:9c:86:cc:4d:90:04:18:4b:f8:61:7b:
d8:30:87:e9:ad:24:02:3b:eb:86:06:69:e0:7a:37:
ee:18:be:d8:31:f9:f1:24:4f:f7:99:8b:21:0d:82:
a9:bd:23:2b:47:a6:e1:a8:47:16:04:71:48:69:d6:
23:33:f8:df:4f:a1:fd:b6:c1:8d:c0:86:02:b9:66:
db:1b:08:cb:cd:5d:4d:f6:5d:f8:cb:44:0a:ad:d4:
9e:1a:e6:db:6a:44:31:38:85:8f:89:c9:19:63:2f:
1d:4d:a0:b3:10:1e:d9:cc:91:8c:ce:74:69:74:e5:
99:0c:25:3b:11:1f:0f:73:6e:26:7c:ef:4b:9e:74:
1c:b7:37:3a:4c:b2:ce:2b:ae:74:21:36:2d:02:f6:
04:3a:d8:0b:55:2e:eb:f0:34:d0:7c:d8:19:c0:bc:
58:3e:77:0c:c4:90:84:de:3f:b3:18:65:5d:1b:77:
ec:50:40:71:4f:33:30:d0:10:42:4c:d0:af:7c:df:
47:8d:b6:c2:65:06:de:d2:95:3c:9b:4c:53:b5:4f:
66:13:32:15:ff:38:ff:0a:fd:9d:d8:e5:1a:4d:63:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:40:B7:79:6B:4C:59:3E:3A:46:29:FE:97:A4:C7:64:2F:E8:68
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/CDRAt3lrTFk-OkYp_pekx2Qv6Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:07:09:8f:07:bf:46:6e:3a:4a:12:6e:2b:fe:94:03:b8:94:
3e:77:88:73:ba:41:cb:7a:9f:9b:44:58:b0:cf:c0:2c:43:eb:
fc:d8:7d:a7:bb:b5:66:b7:6a:b9:17:e1:9d:dd:c1:bf:aa:0f:
5f:9a:e2:c1:82:df:cc:1c:4c:c6:df:fa:51:69:15:a2:f7:06:
f5:5d:2a:df:de:12:21:67:f0:4e:85:ad:ee:86:67:66:f9:71:
f9:6c:2a:b7:a2:40:92:1c:fe:c4:56:2f:a6:f7:69:88:e0:be:
65:f5:d2:e1:c5:4d:a2:7d:64:d1:46:03:44:a7:a3:78:e9:5b:
86:df:77:b8:4b:d7:6c:58:75:6d:22:02:de:05:f2:85:0f:21:
f7:6b:e5:6d:4f:30:59:eb:bf:a9:0b:db:e3:a9:40:7c:eb:0e:
9c:ba:34:0b:04:4f:9e:22:99:58:de:bd:88:94:ce:05:17:97:
05:38:f2:d5:77:7b:d0:f0:72:43:82:e0:f8:bd:d8:c1:7f:cc:
8e:2c:16:e2:73:f5:60:db:e4:15:c7:10:c5:22:cb:f1:c7:82:
9c:5f:e2:85:b9:58:54:3b:f7:d5:b7:d3:8a:63:8d:ba:96:07:
d3:34:b8:f9:04:79:bb:07:83:f5:64:a9:c1:3d:72:e3:ec:73:
c5:cb:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:24 2023 by rpki-client on console.sobornost.net