Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/sjBDq27-u2f8Axr2iHrC-k8XZlI.roa
File: sjBDq27-u2f8Axr2iHrC-k8XZlI.roa (raw, json)
Hash identifier: HCz+GIgXO1hd+tcVSayIhMrWMJHJQup5rY9pBaE9i1I=
Subject key identifier: B2:30:43:AB:6E:FE:BB:67:FC:03:1A:F6:88:7A:C2:FA:4F:17:66:52
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 018573439155902C0C41039631D8979A9C32
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/sjBDq27-u2f8Axr2iHrC-k8XZlI.roa
Signing time: Mon 02 Jan 2023 16:14:46 +0000
ROA not before: Mon 02 Jan 2023 16:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29374
IP address blocks: 195.149.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:91:55:90:2c:0c:41:03:96:31:d8:97:9a:9c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jan 2 16:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b23043ab6efebb67fc031af6887ac2fa4f176652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:84:e7:1c:5c:19:2d:e8:b4:bf:42:bf:e0:2a:
18:13:8b:b9:cb:9a:87:aa:e1:17:8f:9f:7a:80:f4:
97:5e:5e:f0:99:92:90:8f:67:20:11:60:26:8d:07:
43:f2:1f:34:3d:6b:e3:23:d1:f8:a9:29:00:47:16:
74:a7:7c:4c:d9:a8:b1:be:08:93:65:f7:5c:56:b2:
e0:e6:d5:8c:d6:ac:50:04:35:be:57:43:3c:f9:76:
aa:62:5a:30:6c:a9:11:28:34:b9:4f:c1:44:eb:2f:
55:1c:22:af:82:34:99:09:88:e9:11:d3:c4:3a:01:
4f:2b:0a:d0:cc:9b:a6:e1:2b:a3:fd:c0:63:1d:82:
08:a8:9f:3a:77:2d:8f:ad:db:cc:fe:e1:fc:4c:ca:
a3:76:d0:14:25:ae:a1:07:a6:b7:9d:5f:7c:34:91:
ca:73:16:00:69:40:a7:3e:40:a8:0c:4d:c8:c0:96:
9a:18:6e:6e:cc:41:d9:dd:fe:5e:02:9c:47:ec:7e:
2c:ef:8b:52:f8:84:44:fe:be:6b:e6:37:04:a1:83:
7c:36:7f:ea:45:ef:4f:ea:17:51:f8:6f:60:fe:16:
49:22:64:83:8b:77:06:fd:85:ec:51:c4:ed:61:18:
c4:60:75:76:df:8f:ae:0f:3c:53:8d:a0:8b:7b:94:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:43:AB:6E:FE:BB:67:FC:03:1A:F6:88:7A:C2:FA:4F:17:66:52
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/sjBDq27-u2f8Axr2iHrC-k8XZlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:25:57:a1:81:20:ad:28:bb:ef:e1:02:8f:6c:74:2b:7d:ab:
65:be:a3:95:30:12:ea:bc:a4:29:8e:69:04:0c:29:65:13:4e:
cb:dd:be:1c:99:7e:f7:0f:ad:43:8a:15:36:c9:e4:79:38:98:
77:64:fe:f8:89:53:df:65:28:8e:85:ee:f3:56:3b:68:76:0c:
5f:22:0b:87:8b:3c:af:b2:44:e3:62:f6:95:8c:aa:39:9c:aa:
03:93:d3:09:dd:f2:a4:1f:8c:ea:7e:c6:a8:71:81:f2:2a:da:
4f:46:fc:d8:29:d8:0e:74:66:ee:d4:b8:0f:74:a0:f5:9b:48:
c3:3e:97:66:45:bc:5c:b7:6f:01:69:c7:39:13:fc:6a:f1:4a:
1a:0c:62:96:80:42:1f:c8:d3:bc:9e:66:39:73:97:a8:70:99:
76:65:25:c5:b8:48:db:c6:a4:a9:36:86:ac:53:a7:17:f1:8e:
fb:19:82:6e:fe:0d:d6:01:19:44:5b:58:de:b9:23:e4:f5:53:
9d:0b:ee:9a:c1:22:cf:a3:e9:06:53:ce:60:ad:02:2c:bb:55:
20:88:40:6f:f1:35:5a:63:79:a5:3d:77:dd:e1:f7:da:56:be:
ad:5d:08:a9:19:57:f3:62:e7:f5:4f:dd:b0:69:a5:f4:19:04:
52:a8:bc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:05 2024 by rpki-client on console.sobornost.net