Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/LU_idOx6HMqx9nl1HVIRni9H_Uw.roa
File: LU_idOx6HMqx9nl1HVIRni9H_Uw.roa (raw, json)
Hash identifier: thLVuhep9cpgfwNjL+bNA2xXZKBHcNRpcNCJo62seGs=
Subject key identifier: 2D:4F:E2:74:EC:7A:1C:CA:B1:F6:79:75:1D:52:11:9E:2F:47:FD:4C
Certificate issuer: /CN=86e23ffc789512508d90aa3d3520345556b2080c
Certificate serial: 018570396B2412F5C3084BA3EB765836B189
Authority key identifier: 86:E2:3F:FC:78:95:12:50:8D:90:AA:3D:35:20:34:55:56:B2:08:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huI__HiVElCNkKo9NSA0VVayCAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/LU_idOx6HMqx9nl1HVIRni9H_Uw.roa
Signing time: Mon 02 Jan 2023 02:04:49 +0000
ROA not before: Mon 02 Jan 2023 02:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39601
IP address blocks: 194.50.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:6b:24:12:f5:c3:08:4b:a3:eb:76:58:36:b1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e23ffc789512508d90aa3d3520345556b2080c
Validity
Not Before: Jan 2 02:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4fe274ec7a1ccab1f679751d52119e2f47fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:1b:22:ad:de:70:66:c0:da:cd:28:b1:06:
b3:b8:84:46:c4:3a:35:56:73:64:ad:82:dc:89:ae:
18:3b:12:9e:79:54:d8:f7:2c:46:9d:49:cb:e5:15:
9c:34:e3:16:fe:fd:ca:8e:75:4b:5d:32:f5:50:20:
be:13:e2:cc:d6:d4:d5:57:1a:88:2e:97:aa:4b:eb:
47:8e:7e:4a:13:f0:45:26:e5:c4:cd:2e:61:ce:81:
f1:5b:b2:7c:d2:7b:8c:6a:f8:d0:be:d8:49:77:f2:
f8:f2:65:cd:ac:28:bf:87:70:39:4a:b3:b8:4a:3c:
32:93:2d:dd:08:28:c1:26:65:dd:66:fc:cc:65:15:
70:0a:ed:9c:b6:c9:60:00:48:fe:f1:0f:e2:ab:c0:
74:98:99:73:0d:0f:f8:0c:ec:97:ef:b0:71:ea:b7:
76:5d:96:77:02:10:ff:0c:73:69:35:c6:3e:f7:b0:
c2:7e:18:43:50:a5:82:07:80:90:42:e1:df:dd:44:
c2:fc:9b:49:fe:ef:61:45:af:5b:fd:b6:b5:99:ec:
fc:dd:11:1a:d6:c1:25:a6:8a:10:0a:63:06:c7:ce:
30:2d:b6:55:c1:77:ce:0a:dd:54:77:5d:1d:61:78:
e6:ef:54:5e:74:b8:40:a1:af:79:f8:74:19:d0:47:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:E2:74:EC:7A:1C:CA:B1:F6:79:75:1D:52:11:9E:2F:47:FD:4C
X509v3 Authority Key Identifier:
keyid:86:E2:3F:FC:78:95:12:50:8D:90:AA:3D:35:20:34:55:56:B2:08:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huI__HiVElCNkKo9NSA0VVayCAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/LU_idOx6HMqx9nl1HVIRni9H_Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/93b300-84d9-44c1-8b61-558c846b2fa7/1/huI__HiVElCNkKo9NSA0VVayCAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0d:f0:3c:13:7b:33:ab:47:a1:78:a8:98:19:ce:67:0f:b7:
c9:41:1a:bd:6b:bf:23:e2:30:2f:c4:bf:25:79:41:4f:60:18:
16:8c:64:34:db:bf:c4:8d:f4:3d:ae:53:25:30:c4:7d:af:4e:
b4:3f:62:83:f7:f4:51:0e:1b:b9:d7:2a:6e:19:4b:17:d4:48:
19:71:1c:9c:f4:58:74:14:f9:ea:b1:61:e2:fd:f2:7a:2a:d7:
44:22:3b:58:be:c3:a8:be:84:0d:96:0b:aa:78:e3:bd:b7:5f:
2d:12:d5:32:58:4d:61:9b:97:a4:ed:80:9e:d6:83:71:09:d0:
44:61:91:de:86:3e:92:00:bd:31:bc:5a:f7:5a:6b:cb:87:b1:
98:ac:ad:e9:e5:67:98:87:ea:1c:96:7c:18:9b:22:6f:d2:e8:
9f:fd:7d:bb:cc:74:e6:d1:ba:64:7a:39:d7:24:ff:b9:12:b3:
b9:82:1d:ff:0d:0a:13:e2:47:6b:a1:2b:b3:b1:ab:81:a2:08:
dc:92:69:35:91:75:1a:4e:3f:f6:15:81:ec:6d:85:f6:1a:3a:
bb:e4:c3:d6:5c:43:f9:d8:31:47:6a:ae:20:80:4d:1f:15:57:
87:ea:05:aa:b6:c2:10:32:1a:60:81:89:ea:2d:e0:9d:b2:e1:
77:37:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:07 2024 by rpki-client on console.sobornost.net