Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/mq5LLuzfvRxkRr8BmF2Ee98ieN8.roa
File: mq5LLuzfvRxkRr8BmF2Ee98ieN8.roa (raw, json)
Hash identifier: hfEjRtpzdqWth9uJhGDo99O2KHOyNE8OKZNV4tvwDsY=
Subject key identifier: 9A:AE:4B:2E:EC:DF:BD:1C:64:46:BF:01:98:5D:84:7B:DF:22:78:DF
Certificate issuer: /CN=a608db43964b6986ec740f0b5e33f627589ac560
Certificate serial: 018822EFF178492305E5B88AEA4F5268548B
Authority key identifier: A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/mq5LLuzfvRxkRr8BmF2Ee98ieN8.roa
Signing time: Tue 16 May 2023 05:02:10 +0000
ROA not before: Tue 16 May 2023 05:02:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49860
IP address blocks: 176.96.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:22:ef:f1:78:49:23:05:e5:b8:8a:ea:4f:52:68:54:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a608db43964b6986ec740f0b5e33f627589ac560
Validity
Not Before: May 16 05:02:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aae4b2eecdfbd1c6446bf01985d847bdf2278df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:33:da:51:82:ff:2c:cf:3c:20:6f:5f:d8:
61:d7:6c:de:42:28:fc:18:21:43:bc:3a:84:e2:27:
30:2a:ce:8a:04:42:ca:ad:02:53:11:ea:a9:89:e1:
d3:76:cf:a4:6e:6d:4d:5e:19:2b:05:e6:58:33:e6:
d2:9e:4a:4c:78:8f:77:1f:18:98:7d:f6:b3:9a:2d:
05:91:38:24:d2:f5:49:61:cf:12:7b:3e:02:2b:78:
26:6a:d5:32:1c:2e:e7:df:81:d2:df:7f:f7:a6:35:
f8:14:bd:ea:f1:0a:aa:3b:06:db:f2:48:10:02:03:
22:78:d4:b1:56:80:a7:99:5a:5d:c0:96:ef:58:14:
45:b2:90:18:6b:39:ef:a3:3f:94:1a:73:13:78:64:
23:79:77:b1:58:09:48:03:e2:83:46:58:97:df:71:
3b:70:6a:1d:c0:c1:35:11:ba:aa:30:7d:55:36:27:
80:9f:b2:db:f3:c2:d1:bc:a7:42:e1:20:a6:cd:92:
b7:0c:53:4f:73:62:7e:a3:f6:c8:64:25:29:45:ce:
0e:61:a9:71:65:f3:99:11:52:42:75:a9:19:57:83:
0a:69:76:55:c7:2c:d4:36:86:3a:ef:14:4b:30:f9:
df:2b:8b:f9:75:f7:d3:a1:23:e2:40:55:12:07:48:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:4B:2E:EC:DF:BD:1C:64:46:BF:01:98:5D:84:7B:DF:22:78:DF
X509v3 Authority Key Identifier:
keyid:A6:08:DB:43:96:4B:69:86:EC:74:0F:0B:5E:33:F6:27:58:9A:C5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/mq5LLuzfvRxkRr8BmF2Ee98ieN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/500150-1551-47de-b504-d64683cee16f/1/pgjbQ5ZLaYbsdA8LXjP2J1iaxWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.96.234.0/24
Signature Algorithm: sha256WithRSAEncryption
67:90:49:b3:0f:58:55:18:88:39:8b:eb:de:2f:b8:cf:bd:38:
90:39:3d:59:74:22:d8:4d:96:af:ff:f1:fe:5e:00:2c:28:42:
2e:93:79:03:f5:d8:27:82:ba:c2:f0:c7:33:0a:e7:33:61:88:
1a:a1:c1:08:74:05:f3:89:60:f9:18:96:42:1b:95:de:f3:37:
78:eb:0a:62:d6:69:fc:41:8b:b3:88:46:eb:9c:6e:be:11:41:
dd:7c:27:c0:f2:6c:4f:34:7b:b9:d4:17:7c:4b:ac:08:13:4d:
77:45:8d:9b:46:76:b5:9d:7e:13:f7:ef:ff:72:15:f1:56:a8:
e0:81:71:b3:35:6a:ae:52:28:16:c6:04:49:8e:cf:9c:64:6a:
a2:88:8e:06:39:e4:83:fa:88:59:8b:9d:d4:3d:bf:69:ee:b1:
ba:e0:ce:d9:19:24:cd:86:77:1c:bd:41:28:a9:99:fb:23:2e:
72:ed:36:9c:0f:3a:c4:84:6d:e6:1f:66:0e:21:97:e3:e3:88:
c0:1a:81:8e:4c:1c:80:76:9a:de:a9:9b:fd:95:90:d2:a8:44:
44:d7:9c:78:ea:81:7b:b1:cd:c5:14:41:70:f0:01:ad:2b:48:
74:8e:66:95:54:84:e6:b1:f0:07:48:30:a1:29:ff:ed:a4:08:
80:dd:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net