Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/uYbq_AHPVGpyKLoWQrfsWiFLTz0.roa
File: uYbq_AHPVGpyKLoWQrfsWiFLTz0.roa (raw, json)
Hash identifier: GdvlHK4K7d0dOiKwefh64lIqoUUotrn0mdxZPtNv+/s=
Subject key identifier: B9:86:EA:FC:01:CF:54:6A:72:28:BA:16:42:B7:EC:5A:21:4B:4F:3D
Certificate issuer: /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial: 0185711E50DE6F2A09C4AE2B1D1132D6AAAC
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/uYbq_AHPVGpyKLoWQrfsWiFLTz0.roa
Signing time: Mon 02 Jan 2023 06:14:50 +0000
ROA not before: Mon 02 Jan 2023 06:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207143
IP address blocks: 194.56.191.0/24 maxlen: 24
194.56.190.0/24 maxlen: 24
194.56.189.0/24 maxlen: 24
194.56.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:50:de:6f:2a:09:c4:ae:2b:1d:11:32:d6:aa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Validity
Not Before: Jan 2 06:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b986eafc01cf546a7228ba1642b7ec5a214b4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:fd:4c:57:67:43:45:e1:36:e9:12:dc:ad:
f9:40:0c:51:95:3a:66:e0:10:7b:6f:ed:3a:92:f1:
13:5c:8b:4d:8f:83:25:eb:bc:ef:1a:7f:db:43:f3:
9b:b2:4f:7c:e5:34:32:6b:44:1f:45:d5:5f:59:6d:
8f:f4:ec:fd:52:e9:fe:64:ae:d5:1a:9b:3a:8b:86:
27:8a:23:65:16:1f:be:3c:6c:ec:d2:7c:03:7d:78:
56:e1:1a:c0:ec:84:86:48:fa:04:68:e7:1d:d5:70:
97:d2:fb:9d:63:2d:e2:3c:6a:f3:4d:8f:f5:fd:bd:
c6:a3:40:c9:ee:93:62:d9:c0:8c:86:eb:09:4c:63:
93:9e:0a:61:bc:b9:c4:70:41:38:59:0d:86:39:d8:
a7:11:55:fc:80:6e:c5:64:58:89:f8:49:0d:c8:be:
22:a5:72:ee:53:12:c4:ee:18:7d:32:9e:87:4b:37:
fb:d3:d5:3a:f9:a0:c5:2c:11:06:84:be:f2:62:0b:
45:37:b6:a7:bf:ab:74:6c:cc:bc:c5:ac:e4:c3:a7:
41:6a:80:f0:74:76:49:ca:c0:56:a3:00:c1:43:c1:
6e:bf:e8:fb:ec:81:25:b8:dd:bd:0f:bb:a3:f6:31:
e1:c4:26:70:fe:c0:5a:fd:af:17:a1:bc:a9:90:e7:
19:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:86:EA:FC:01:CF:54:6A:72:28:BA:16:42:B7:EC:5A:21:4B:4F:3D
X509v3 Authority Key Identifier:
keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/uYbq_AHPVGpyKLoWQrfsWiFLTz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:27:e6:fa:a2:76:5b:43:fd:5b:0c:91:11:d5:a7:ce:df:47:
2d:83:c7:33:1f:93:d0:72:d5:95:50:de:b3:17:4d:04:09:a9:
e6:58:b6:98:a5:41:a1:34:24:0b:11:d1:f8:f2:8f:c7:04:99:
77:4f:5b:cc:e1:af:b6:5d:4d:a7:5f:d5:b0:f4:df:cf:04:cb:
74:41:1d:46:8a:ec:37:7c:f0:e3:df:27:2e:df:52:16:0f:61:
50:dd:59:5d:0b:a4:b1:f4:aa:31:c3:df:8e:7b:5a:4d:df:5e:
3a:f0:bd:67:25:8e:38:33:a6:5e:90:c5:19:48:f4:b3:af:da:
41:f0:8b:59:50:25:16:ef:d5:a1:21:a4:64:8a:de:1b:95:f6:
9e:32:af:cd:70:cd:21:6f:31:57:c0:e8:22:4a:4a:93:b7:ef:
ac:a4:04:f2:02:69:c0:4a:a8:61:e9:2e:58:f3:13:b7:99:25:
a8:e2:01:12:b8:2d:37:99:72:4a:c5:17:4c:f8:db:e3:05:3e:
af:4e:f9:c9:eb:f6:f0:c4:3b:aa:84:04:00:56:38:07:55:21:
ed:43:6b:63:b1:2d:f8:f8:23:34:62:32:5d:e5:b2:29:17:b8:
34:14:ba:95:d2:01:36:28:63:66:51:ee:93:0f:c0:10:a2:7f:
bb:f6:fd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:53 2024 by rpki-client on console.sobornost.net