Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/kBNEvHekDdz4itSKCLtofgT2UZQ.roa
File: kBNEvHekDdz4itSKCLtofgT2UZQ.roa (raw, json)
Hash identifier: HkXMVihibHaln3zDS4/y73uAtDMV3kkcyg9TkVa0Pek=
Subject key identifier: 90:13:44:BC:77:A4:0D:DC:F8:8A:D4:8A:08:BB:68:7E:04:F6:51:94
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 018573439229650E3ABF1B91E2DA622DF3BB
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/kBNEvHekDdz4itSKCLtofgT2UZQ.roa
Signing time: Mon 02 Jan 2023 16:14:46 +0000
ROA not before: Mon 02 Jan 2023 16:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31545
IP address blocks: 193.16.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:92:29:65:0e:3a:bf:1b:91:e2:da:62:2d:f3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 2 16:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=901344bc77a40ddcf88ad48a08bb687e04f65194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:41:ba:67:8c:1b:bc:c7:62:55:18:c2:ec:
32:b1:7f:88:32:90:b9:2a:08:a7:51:12:5e:b1:76:
1c:13:90:de:94:86:48:f0:2a:fc:9c:86:91:6f:91:
7a:4a:16:e1:85:60:8e:35:9e:4d:69:a9:26:c8:f4:
2b:33:71:4d:a6:a1:6b:15:f3:5c:94:4a:96:10:1f:
65:a3:f0:97:92:88:18:fa:b6:66:26:35:92:78:7f:
93:cd:b1:58:31:17:8e:d6:70:7d:b8:69:27:eb:04:
94:4e:34:3b:c3:96:98:50:76:49:b1:64:1d:68:eb:
0b:1e:2c:f6:df:6b:ce:af:1f:5a:81:ea:48:77:f1:
b1:1e:0c:20:ea:d4:a1:e6:97:c4:2f:a0:e2:c0:34:
84:26:e8:d9:71:d6:13:1e:14:ce:6b:55:5d:59:39:
64:16:22:4d:99:df:d5:19:3f:90:c1:c0:4c:04:c3:
1d:78:3c:7f:8c:cf:33:62:8a:0c:b5:d5:a3:26:3e:
ec:4f:bd:21:7d:e8:6c:67:cf:fc:bd:c3:18:f8:1f:
3d:21:c0:a1:4e:69:3a:a2:5c:03:4e:8e:f0:39:ac:
62:d7:82:0e:cd:a9:f3:0c:ae:a5:92:3b:92:7f:bb:
fe:6f:57:f5:d5:2d:25:de:0f:45:ba:77:63:90:62:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:44:BC:77:A4:0D:DC:F8:8A:D4:8A:08:BB:68:7E:04:F6:51:94
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/kBNEvHekDdz4itSKCLtofgT2UZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.109.0/24
Signature Algorithm: sha256WithRSAEncryption
af:2e:d2:2e:4b:d9:5a:52:22:33:b7:d6:fa:44:be:7a:5d:2e:
54:84:9b:32:6b:cb:7e:49:0a:a0:67:c6:35:cf:04:18:af:99:
bf:cd:45:07:42:e2:43:fa:f5:54:37:db:43:db:e6:29:51:52:
47:a2:30:86:bc:42:03:a5:b5:b1:ff:91:91:64:2e:82:95:69:
7f:d7:9a:cb:27:f5:6d:71:e3:90:f1:d2:dd:a1:20:47:68:51:
e1:1d:ad:5b:4e:fa:25:2a:38:48:8c:fa:c7:cf:61:bb:44:6f:
5a:4d:a4:86:61:2c:78:3c:7c:68:b8:c5:d7:90:d2:4d:38:0d:
76:48:24:27:af:90:b1:3c:5b:98:d1:f1:bc:70:b2:c9:29:af:
8e:fa:37:04:88:ef:00:1e:eb:4e:48:93:30:a3:9b:49:60:ed:
e7:fd:10:3a:b7:5d:9f:c1:3b:83:5d:37:2b:64:a1:4b:b0:b1:
96:7d:75:3f:b1:4f:af:fc:b6:93:05:29:29:b7:ec:b8:76:57:
d8:86:be:7f:fc:af:08:19:5f:37:80:57:50:b9:47:49:01:a3:
71:83:81:cb:45:b5:c9:5e:be:7b:9c:e5:06:00:67:4f:59:a5:
10:f0:ae:9c:ec:4f:f3:d2:4d:e0:de:93:f1:99:40:cf:77:c5:
8a:eb:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:05 2024 by rpki-client on console.sobornost.net