Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/zrd399MTTFUteryv7FCGWWt82sE.roa
File: zrd399MTTFUteryv7FCGWWt82sE.roa (raw, json)
Hash identifier: TTAl/PFClMWIXAhnKDgtNdGQRQcvJdQiMNTwV6U2zBo=
Subject key identifier: CE:B7:77:F7:D3:13:4C:55:2D:7A:BC:AF:EC:50:86:59:6B:7C:DA:C1
Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial: 01856FB113081320CFD3D3D0DB7555571E84
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/zrd399MTTFUteryv7FCGWWt82sE.roa
Signing time: Sun 01 Jan 2023 23:35:53 +0000
ROA not before: Sun 01 Jan 2023 23:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61234
IP address blocks: 84.39.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:13:08:13:20:cf:d3:d3:d0:db:75:55:57:1e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Validity
Not Before: Jan 1 23:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb777f7d3134c552d7abcafec5086596b7cdac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:a3:de:67:e6:a7:be:f6:6d:b6:86:63:31:
37:08:b4:7d:66:40:6f:e3:18:48:39:7b:db:64:5c:
65:67:6f:a8:2e:d4:22:a7:d1:92:04:65:54:6b:b1:
7a:42:83:02:d8:44:4d:be:58:fe:4c:39:17:02:81:
d1:b6:84:07:60:7b:0f:d0:b7:80:ed:85:31:b5:8d:
dd:0c:ca:af:15:e2:3b:ca:ee:f1:c6:65:c9:ce:82:
75:6b:d0:e2:99:0a:14:3c:2d:36:85:3f:05:22:45:
40:24:44:50:f3:b1:08:06:13:88:a8:cd:15:c8:03:
ff:23:57:68:ab:b2:32:29:6b:54:01:9f:c0:75:ef:
09:0b:a5:58:ba:93:3c:79:2e:1c:6d:5d:9d:b9:3d:
e5:6f:dc:ee:ad:60:51:4f:68:0a:b1:ee:54:31:25:
92:4c:69:1c:ff:ff:31:f6:f9:8a:e3:07:51:fa:89:
8a:83:b6:c5:16:15:e9:ab:89:dd:1d:cf:78:56:2e:
01:d7:ad:61:ae:75:b7:18:30:08:6c:de:16:37:62:
ca:44:90:37:81:d9:96:36:a9:59:5c:55:83:f1:f7:
d1:7c:b2:cd:97:5e:6b:da:7f:18:60:19:ad:38:cb:
50:77:6a:4c:5f:f8:b5:b4:7e:bb:78:c8:4d:51:7b:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:77:F7:D3:13:4C:55:2D:7A:BC:AF:EC:50:86:59:6B:7C:DA:C1
X509v3 Authority Key Identifier:
keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/zrd399MTTFUteryv7FCGWWt82sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.153.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a9:14:fc:13:f3:a9:e8:34:3e:17:f2:bb:3b:68:d6:13:49:
05:09:59:3a:bb:a4:35:96:97:05:c1:9d:77:a6:56:2b:58:2a:
d4:0f:c4:6d:98:ac:79:f8:32:d0:c4:ac:5c:9f:28:85:2b:0e:
e8:0d:f5:2a:a0:a8:e2:eb:4d:56:91:e0:8f:93:8e:59:fc:40:
7c:a2:69:9b:25:d8:64:17:34:c3:6c:fb:da:97:43:f7:61:35:
21:d9:b3:ee:cc:c3:92:fb:82:9a:12:9b:74:7c:80:a3:de:3f:
43:93:39:ff:98:4b:e2:90:64:f9:27:e2:a3:55:0f:4a:ce:e7:
56:3e:16:9c:73:ee:1f:57:58:78:11:c4:d9:fd:0a:6f:d0:69:
04:2a:fd:86:9c:53:34:c5:dc:3d:dc:5b:fb:f4:e2:ec:b1:93:
a8:fe:eb:f3:c6:a5:fe:41:ca:aa:b0:57:21:0e:fc:33:94:06:
b8:90:25:e3:09:a4:94:cc:70:fc:1a:89:84:f8:82:a3:60:1d:
cf:e5:ff:58:f9:fd:8a:c2:98:cc:55:77:bb:dd:4a:ea:1e:3e:
a9:6e:13:06:24:78:27:28:42:c9:5a:9d:38:c8:27:d6:df:02:
3c:63:c6:c4:de:ee:45:d6:f4:c9:c4:41:5b:5a:40:a9:ab:1a:
23:b6:d7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:56 2024 by rpki-client on console.sobornost.net