Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/Xgp2_SpFr9wnpm_PLn3MEkrFPmU.roa
File: Xgp2_SpFr9wnpm_PLn3MEkrFPmU.roa (raw, json)
Hash identifier: rodAs94CXFE0m8hgg8EKN5G0dt2ghxFrWP4dP4/ZY5k=
Subject key identifier: 5E:0A:76:FD:2A:45:AF:DC:27:A6:6F:CF:2E:7D:CC:12:4A:C5:3E:65
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 0186A16FE18F26E2260E5FCF5101D2DE9DAC
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/Xgp2_SpFr9wnpm_PLn3MEkrFPmU.roa
Signing time: Thu 02 Mar 2023 08:28:29 +0000
ROA not before: Thu 02 Mar 2023 08:28:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197075
IP address blocks: 151.248.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:6f:e1:8f:26:e2:26:0e:5f:cf:51:01:d2:de:9d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Mar 2 08:28:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e0a76fd2a45afdc27a66fcf2e7dcc124ac53e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:6c:d6:28:92:90:83:93:2c:e9:29:22:53:
da:27:1b:c5:25:d8:6a:b6:2a:8f:ea:89:a5:95:5e:
b0:f0:31:c7:6a:e0:ce:b5:fb:8a:57:2f:df:83:99:
e3:53:13:3a:67:59:a8:94:c1:53:9f:06:3a:d4:41:
c3:5f:cb:0e:8a:b5:f7:bc:1a:50:c6:78:71:b0:60:
02:fe:10:95:21:ac:9f:b8:99:ee:0c:4e:92:9c:da:
0e:1f:13:a1:f1:b2:fc:e4:dd:64:ef:33:34:34:3e:
ae:f8:c9:4a:96:52:a8:26:3e:31:01:4d:fd:b2:a6:
fc:70:ba:31:d1:85:04:b5:3a:fb:8b:51:26:70:1e:
7d:8f:76:3e:e9:11:92:ca:59:38:dc:0f:4f:57:04:
c8:47:ed:c4:34:b6:b6:27:68:29:a3:c1:d8:f2:58:
68:c5:30:2c:42:5b:84:73:8c:64:b3:3e:65:96:16:
98:49:d3:2e:d0:91:0f:39:59:76:b0:6a:c9:bb:69:
d5:1f:6a:c8:3c:30:15:a9:bb:e7:90:ba:5d:d3:49:
bd:a1:56:d8:9e:b7:42:dd:ee:64:b7:e2:e2:86:48:
26:77:ca:0d:49:b2:b3:9b:f6:83:37:1d:5c:8a:db:
c1:56:8a:0b:c6:0a:3d:bf:29:09:12:d9:b5:ff:e2:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0A:76:FD:2A:45:AF:DC:27:A6:6F:CF:2E:7D:CC:12:4A:C5:3E:65
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/Xgp2_SpFr9wnpm_PLn3MEkrFPmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.14.0/24
Signature Algorithm: sha256WithRSAEncryption
69:83:c4:a2:22:a0:d6:b5:31:ed:68:dd:aa:af:db:44:f7:0a:
14:9f:b5:5b:31:e1:1b:f8:d3:66:fa:fd:bc:b1:5f:ae:41:cd:
a6:f5:99:1d:9e:59:62:ae:59:9e:58:38:5c:0e:8b:28:71:49:
24:be:8e:8f:a2:46:e2:c9:9c:90:e3:46:d9:31:a4:8a:4c:c0:
86:7b:03:75:00:54:61:7b:e0:b9:68:86:e3:19:85:d9:fc:9d:
6c:1b:3b:a8:83:b3:4d:b3:ff:5e:75:ac:2b:3b:83:8c:7f:bf:
d4:e3:18:a4:ba:85:5d:42:44:61:21:1d:b5:5e:7d:88:59:ee:
6e:89:7b:62:b8:6f:c0:bb:c6:2b:8d:a6:2b:86:5d:cd:e0:ce:
2f:4e:49:77:07:4f:c5:5e:c0:92:10:48:d0:99:0e:7b:28:3e:
f7:2e:d0:02:92:22:c6:2a:ec:f8:75:61:c7:b9:14:86:e6:f9:
96:40:7d:cf:3d:ba:82:0d:14:ae:4e:1d:cb:38:b3:44:f7:19:
e5:ba:81:f2:4b:66:4b:89:9e:9b:20:31:97:37:29:ec:57:83:
db:47:e0:3c:03:ad:3a:08:c8:3e:a9:2d:d5:f0:34:43:23:e0:
4a:46:35:dd:29:c1:23:9a:93:ba:68:f3:d0:6b:63:88:50:9d:
6f:5b:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:54 2024 by rpki-client on console.sobornost.net