Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/FrSER4IUnUzIqXMKuSRrM0XIjK8.roa
File: FrSER4IUnUzIqXMKuSRrM0XIjK8.roa (raw, json)
Hash identifier: hLDdvudhEsq38kxUMzVjaTckheVdRDxGxx52Uu09Vl4=
Subject key identifier: 16:B4:84:47:82:14:9D:4C:C8:A9:73:0A:B9:24:6B:33:45:C8:8C:AF
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 018571F0D84780C3144754E3ED23FA8DE929
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/FrSER4IUnUzIqXMKuSRrM0XIjK8.roa
Signing time: Mon 02 Jan 2023 10:04:47 +0000
ROA not before: Mon 02 Jan 2023 10:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 85.208.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:d8:47:80:c3:14:47:54:e3:ed:23:fa:8d:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Jan 2 10:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16b4844782149d4cc8a9730ab9246b3345c88caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:5e:b6:c6:c0:14:05:dc:56:ef:0d:e0:53:
a7:ec:b0:43:32:55:83:09:c1:1a:45:4d:e4:7e:f6:
85:4b:ad:95:5b:3d:26:93:9a:98:82:40:64:c1:ce:
94:1a:e4:34:ac:47:0c:34:bc:bd:e8:8e:29:d1:25:
d0:e1:fe:02:5d:36:66:67:86:b5:c4:9b:77:b1:2c:
c1:a7:ac:b6:a8:cf:42:73:15:6d:71:e8:f8:05:43:
88:af:37:b7:26:29:f6:39:e3:65:1f:70:ff:ed:86:
c3:6a:d6:06:a6:5f:83:2d:43:56:6f:d2:da:82:83:
33:af:66:ff:73:33:8f:7f:47:e4:a4:e6:d8:75:01:
05:61:d8:49:6b:31:d1:50:91:a5:e7:1a:83:2f:55:
55:c9:41:8b:95:95:b3:ca:7d:13:25:2b:a4:22:80:
f9:2a:83:94:6d:81:7c:3a:e7:0b:3e:7e:ca:57:10:
ce:7a:b8:89:3d:1d:c9:b3:ef:42:5f:45:3a:08:f0:
df:ac:21:3b:72:5c:eb:64:82:ba:77:74:d7:ea:87:
ec:f7:9b:87:01:59:5e:fa:73:83:15:4f:c9:97:c1:
8c:f2:2b:eb:08:22:ad:25:e9:5e:5c:b8:96:3d:af:
9a:ec:e4:35:b7:d8:0c:b0:04:9d:7e:ab:8f:60:87:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:84:47:82:14:9D:4C:C8:A9:73:0A:B9:24:6B:33:45:C8:8C:AF
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/FrSER4IUnUzIqXMKuSRrM0XIjK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.164.0/24
Signature Algorithm: sha256WithRSAEncryption
00:a7:ad:b2:47:ae:73:dc:d7:5a:26:5f:94:76:b9:58:f8:25:
63:39:c3:db:1d:76:a1:96:14:c9:bd:32:05:52:16:b2:f3:bf:
9e:42:d2:01:39:e5:f7:11:63:0a:41:55:c1:e1:64:0b:92:52:
c2:59:81:a7:ec:b1:63:25:8a:81:95:e0:27:b8:49:53:49:22:
fb:6f:73:8c:41:98:e2:14:a1:e4:6a:3d:34:f3:88:6a:cf:a3:
26:b0:a1:fc:35:26:b2:a0:e7:91:51:86:9b:d5:5d:df:47:d3:
44:32:91:c8:e1:43:3d:69:75:72:02:71:90:84:4b:d1:a7:11:
fb:16:05:12:b1:e1:19:e1:7e:b6:c7:f7:48:4d:6c:25:a7:e8:
5e:3c:4d:68:2a:9a:77:69:b5:b6:ac:52:1e:4b:e2:46:74:2a:
d7:63:95:37:5e:bf:c8:53:d2:4b:59:e6:22:72:da:2f:5e:3e:
6a:cc:86:00:7d:25:cd:09:8d:e2:0f:d0:e1:86:a8:b5:6c:77:
26:4e:f7:0c:24:8e:e6:ce:ff:d0:d1:32:f9:31:a4:22:3c:51:
5f:b2:b7:10:df:23:33:d2:b4:4b:d9:5a:f6:42:1b:a3:1f:b5:
fe:d7:5e:4c:2b:b2:c6:aa:9a:16:86:2a:fb:a8:52:45:a9:1f:
bd:43:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:36 2024 by rpki-client on console.sobornost.net