Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/kCY6DlZA8FoDkasxdHhbzaP5xTs.roa
File: kCY6DlZA8FoDkasxdHhbzaP5xTs.roa (raw, json)
Hash identifier: fCXWI/Gn/qireMt3t2Ik2IDz5PfdXsMmuL7BFtIaepI=
Subject key identifier: 90:26:3A:0E:56:40:F0:5A:03:91:AB:31:74:78:5B:CD:A3:F9:C5:3B
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 018570F08F0B27846FF07C0E1BB6D0619CE2
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/kCY6DlZA8FoDkasxdHhbzaP5xTs.roa
Signing time: Mon 02 Jan 2023 05:24:51 +0000
ROA not before: Mon 02 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6681
IP address blocks: 193.200.64.0/24 maxlen: 24
193.200.65.0/24 maxlen: 24
195.191.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8f:0b:27:84:6f:f0:7c:0e:1b:b6:d0:61:9c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jan 2 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90263a0e5640f05a0391ab3174785bcda3f9c53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:c8:d5:40:ad:54:3b:4b:fd:e8:6a:01:5f:
30:46:e7:7d:b0:da:c7:b1:b6:3a:19:21:27:4f:a1:
6b:0c:ac:41:94:33:19:6e:00:12:fa:1c:af:0b:ad:
c6:28:dd:dd:2f:4c:5c:a6:0b:56:44:a0:e7:7b:3d:
6b:65:7e:79:85:f6:f9:8f:e4:fc:12:08:66:c4:be:
df:31:df:82:3c:0b:61:f9:bd:38:e5:70:7f:bd:6e:
2f:e4:c4:7e:e5:1d:6d:55:53:c2:80:07:78:c7:a9:
9d:e2:1e:92:6b:a4:38:b3:d5:24:ea:2a:2c:d5:3f:
a9:c2:6c:cc:1a:09:ee:d9:b1:96:c4:77:c8:59:e0:
7f:49:9b:8f:b1:9d:a4:82:3d:ad:7f:ec:b6:09:5a:
4c:a2:aa:e4:0e:62:17:18:e7:70:15:a4:25:59:7d:
ce:f0:d2:33:4f:bf:56:05:2d:b1:e9:46:af:55:13:
fc:79:ba:51:c3:4a:84:0c:28:29:c8:8f:59:21:b5:
d7:ae:13:d7:1d:e2:15:2c:7e:58:b1:99:8d:29:d3:
36:61:1b:82:4d:5d:57:14:e4:2f:42:3a:47:2b:ef:
b4:0e:ee:02:aa:e2:73:00:a1:b4:57:e8:83:7f:db:
20:4a:39:6c:64:8c:2a:f2:c6:75:64:4b:e6:08:aa:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:26:3A:0E:56:40:F0:5A:03:91:AB:31:74:78:5B:CD:A3:F9:C5:3B
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/kCY6DlZA8FoDkasxdHhbzaP5xTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.64.0/23
195.191.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:09:de:72:4c:49:1b:81:f2:08:4a:1d:f7:cc:0e:0d:bc:c8:
31:b8:9f:b2:b9:cb:00:16:08:a7:30:06:14:a8:3d:8a:60:27:
92:60:70:0b:4f:ac:24:5a:05:1c:94:f2:7a:75:5f:e1:0d:11:
7c:9a:f2:e0:1c:bd:b0:15:7e:70:db:ee:1d:74:ec:a2:1b:2b:
4b:bc:df:1b:7f:31:bd:a7:0b:94:48:03:f1:d9:16:7c:08:f8:
b2:6e:82:75:51:bf:a7:21:74:4a:6c:5b:22:25:98:20:47:fd:
9a:7b:62:e3:be:ff:ae:f6:33:ef:f4:ee:5d:20:27:71:e5:13:
59:5a:dd:8d:06:77:47:92:81:cb:f4:61:6f:b6:eb:af:bb:8b:
c1:d6:a7:c6:52:1d:39:6a:51:92:6d:60:70:c7:85:a7:f5:14:
14:2b:d0:9b:46:65:45:94:9c:d5:9a:31:be:21:cd:09:e3:83:
f8:b4:b2:0e:39:5c:b3:af:b2:6c:62:2e:75:4d:bf:53:74:dd:
f1:d2:7e:9b:9e:11:b1:35:3c:49:76:53:6f:c5:74:8f:ac:d9:
93:d6:f4:81:8b:4f:dc:8c:b5:d8:6b:2a:07:11:58:5a:c8:ca:
0f:84:16:c1:7f:95:97:2a:2e:d1:af:6d:68:04:6b:76:02:2e:
45:76:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net