Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/cpyQS-CQUPLiRu89sDnxHAUYef8.roa
File: cpyQS-CQUPLiRu89sDnxHAUYef8.roa (raw, json)
Hash identifier: 4sKO4Jy2xWMbI1sgtxIu7wL06MzSju2KdEc0Z4fIvYQ=
Subject key identifier: 72:9C:90:4B:E0:90:50:F2:E2:46:EF:3D:B0:39:F1:1C:05:18:79:FF
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01856C4A6A2B605F2E3C537F9FEC711E4371
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/cpyQS-CQUPLiRu89sDnxHAUYef8.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5408
IP address blocks: 193.218.96.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6a:2b:60:5f:2e:3c:53:7f:9f:ec:71:1e:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=729c904be09050f2e246ef3db039f11c051879ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:8f:2d:d4:ab:fc:d9:f2:17:e6:6b:03:ad:
92:70:ac:ab:9a:55:ab:24:8b:4e:5d:f0:1e:14:ff:
49:0f:52:c3:46:ae:da:ec:32:e7:53:28:2e:6d:31:
88:41:b6:31:3c:4d:65:27:72:db:45:e7:56:b3:8c:
36:c6:28:91:6e:6c:04:e3:d3:a9:a8:89:9b:dc:9f:
10:7c:a0:45:83:f9:f2:af:8a:bb:25:40:4d:ef:d3:
69:e3:42:3a:75:cf:da:32:4e:24:07:20:d5:2f:38:
47:8a:6a:91:0f:c0:bf:75:e6:f4:ba:32:80:b8:92:
c9:76:ef:01:79:f5:94:4b:74:6a:6a:94:6b:cb:b7:
8c:51:2f:a5:e0:16:ae:86:2d:af:82:c2:4c:f0:01:
99:48:1a:a3:3d:3b:52:96:ec:60:6c:5c:f3:a9:5e:
bd:38:b2:b8:a6:9c:7f:60:6d:d4:f0:32:2d:8c:bd:
46:cc:8f:8b:8d:0f:d7:ea:96:16:ca:b2:19:b8:7f:
07:a2:7f:09:d8:ed:ba:c1:c8:21:69:4c:76:ac:c8:
99:61:4d:f2:96:ca:19:77:cc:d1:c7:ed:94:4e:e0:
ee:1f:a9:e6:e8:72:17:41:ad:32:1c:d0:d1:3f:0c:
0a:a0:54:2f:f8:48:d0:da:c9:b2:c8:05:bf:a4:a9:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9C:90:4B:E0:90:50:F2:E2:46:EF:3D:B0:39:F1:1C:05:18:79:FF
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/cpyQS-CQUPLiRu89sDnxHAUYef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:8a:fb:fd:6c:81:80:36:6f:35:56:77:bb:99:00:ef:52:19:
97:a7:a8:7e:1d:38:0a:69:19:56:d5:81:48:32:e9:68:8a:32:
98:56:83:44:e8:bb:b2:db:cf:e9:e7:9e:3b:e1:ec:7e:ee:78:
56:ff:fe:ef:66:4d:c6:43:b9:76:66:82:b5:45:93:6a:8c:7d:
e5:68:5b:fd:38:96:d9:ab:d7:8f:29:45:57:7e:41:b9:f5:75:
de:0d:fc:af:4c:16:90:35:d1:53:ef:61:ea:4d:4d:e3:9f:17:
e9:b5:c9:42:66:f3:69:66:23:8f:f4:30:39:43:33:b4:98:67:
b0:bd:1b:7f:64:53:bb:b4:3e:d6:6b:9c:6a:e1:61:61:01:45:
88:2e:2c:7f:81:1e:43:79:62:c1:9e:3a:79:1b:bf:cf:11:72:
d8:7e:6d:83:ff:0a:5a:7a:93:75:71:7b:b6:79:51:3c:d0:df:
c0:6d:76:a4:bd:29:43:36:08:50:c8:a8:e1:75:53:36:52:85:
9c:d8:8f:d1:5b:62:fb:11:c7:61:de:44:85:36:04:b7:cd:d1:
e4:f1:01:cb:14:22:85:e7:30:a7:36:04:0a:f3:8d:1d:05:d1:
b5:dd:10:d6:eb:20:b7:bf:d4:bc:46:f6:ad:1f:2a:79:54:48:
bb:59:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:02 2024 by rpki-client on console.sobornost.net