Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/n7l0nClw8YIY4Yhh2qY0wtALN54.roa
File: n7l0nClw8YIY4Yhh2qY0wtALN54.roa (raw, json)
Hash identifier: zlQdmgqqUEbV7qPKhd5mlpwDZzKjWwHqAJ27BPWiXPI=
Subject key identifier: 9F:B9:74:9C:29:70:F1:82:18:E1:88:61:DA:A6:34:C2:D0:0B:37:9E
Certificate issuer: /CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Certificate serial: 01856C4A6C8E38BD3F4CF240C217A2F39E3E
Authority key identifier: 38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/n7l0nClw8YIY4Yhh2qY0wtALN54.roa
Signing time: Sun 01 Jan 2023 07:44:54 +0000
ROA not before: Sun 01 Jan 2023 07:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29353
IP address blocks: 195.167.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:6c:8e:38:bd:3f:4c:f2:40:c2:17:a2:f3:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f9c54f19193e06548163f895c3a46b9f8bfbb5
Validity
Not Before: Jan 1 07:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb9749c2970f18218e18861daa634c2d00b379e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:f1:1a:00:f5:4a:7d:ab:c4:7e:ff:bf:14:
7c:ec:56:5f:d8:7c:dc:91:f7:cf:4d:3c:00:c9:91:
2a:d3:c9:58:e8:87:13:56:36:87:1c:19:72:01:b7:
50:39:ec:7d:5b:50:9b:91:14:0d:f5:28:00:dc:0d:
aa:a5:83:f3:9a:75:e1:2b:1b:0b:cb:c8:59:81:01:
57:e4:d3:93:91:d6:0e:dd:b7:6b:f0:04:69:a7:47:
37:9a:f7:d6:4d:f9:72:e1:bb:fe:64:47:14:fb:2b:
19:7d:39:ae:75:9b:9e:d5:ef:30:cd:a8:8c:1c:a7:
0c:2f:0d:86:46:c2:4e:f3:e6:33:e2:33:d3:72:45:
cc:1c:68:8e:94:f2:92:27:31:a6:9b:0a:09:ba:4c:
62:fe:8b:54:6a:3b:c9:3a:a2:7b:f4:81:4f:19:5e:
17:a7:9f:2c:34:cb:a0:f8:24:3b:9e:27:64:15:25:
67:3b:f4:98:d6:39:24:c1:fb:95:28:36:b1:08:38:
7a:e0:66:40:ff:5a:c8:38:a3:ce:9d:30:76:09:e5:
34:93:c8:05:de:c6:73:13:75:3b:aa:48:d4:13:55:
1b:13:2c:59:95:ee:21:7c:e9:83:0b:bf:6e:c7:7d:
26:ea:ad:98:95:25:1a:fe:64:72:bf:e0:2b:e8:ff:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:74:9C:29:70:F1:82:18:E1:88:61:DA:A6:34:C2:D0:0B:37:9E
X509v3 Authority Key Identifier:
keyid:38:F9:C5:4F:19:19:3E:06:54:81:63:F8:95:C3:A4:6B:9F:8B:FB:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPnFTxkZPgZUgWP4lcOka5-L-7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/n7l0nClw8YIY4Yhh2qY0wtALN54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f0b6ba-8675-491c-8593-724949b460e9/1/OPnFTxkZPgZUgWP4lcOka5-L-7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.41.0/24
Signature Algorithm: sha256WithRSAEncryption
00:08:67:18:74:95:7e:9d:c9:e7:b0:37:60:b0:9d:d7:d0:ab:
4c:78:2d:73:52:8e:53:2e:0f:19:bb:9a:ca:59:95:b9:26:33:
9b:61:39:55:d5:68:47:a8:00:a2:f9:a6:01:2f:15:20:9c:ae:
84:e5:05:af:77:c0:1e:2a:56:22:6c:7c:55:36:6d:0d:d8:78:
ea:69:3d:02:ec:b4:83:6e:c6:49:21:be:c3:9a:41:0b:81:b5:
74:24:8a:6d:25:4a:83:67:7c:85:c1:b2:b5:69:30:4c:aa:47:
d6:a4:63:9f:d7:5b:8b:2f:95:12:ec:94:ef:7a:72:38:f4:26:
60:47:22:38:5f:2a:1a:b9:49:9a:2d:67:58:e8:c4:ed:bb:a1:
6a:68:a7:de:73:8b:5c:58:eb:44:e1:35:24:af:01:6e:7f:57:
1e:6b:50:19:06:9e:54:77:39:c0:d2:99:93:a0:1e:71:d4:fd:
c6:1d:83:1a:d5:e2:e9:c9:db:87:ac:f0:cd:44:31:65:44:4a:
af:c7:dd:3e:99:06:56:08:1c:f1:43:f3:50:f4:1d:d1:13:c2:
1d:29:2f:15:a0:4e:aa:a5:ec:1d:c7:e1:8b:80:a2:64:99:e5:
7a:39:cc:0c:99:6e:80:4a:12:a5:21:ba:5c:6b:f7:8f:70:b8:
12:8c:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:02 2024 by rpki-client on console.sobornost.net