Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/1Or4NZnZCmRz9JoVyPiEoa1Pxpc.roa
File: 1Or4NZnZCmRz9JoVyPiEoa1Pxpc.roa (raw, json)
Hash identifier: jcgbP6AjzLAJpmLrpLlsLuOztWAL9QxwhRqWm33ow4Y=
Subject key identifier: D4:EA:F8:35:99:D9:0A:64:73:F4:9A:15:C8:F8:84:A1:AD:4F:C6:97
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0186A6B55D88F71FC11EB79EA2B282C33D66
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/1Or4NZnZCmRz9JoVyPiEoa1Pxpc.roa
Signing time: Fri 03 Mar 2023 09:02:29 +0000
ROA not before: Fri 03 Mar 2023 09:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9076
IP address blocks: 212.104.0.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:b5:5d:88:f7:1f:c1:1e:b7:9e:a2:b2:82:c3:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Mar 3 09:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4eaf83599d90a6473f49a15c8f884a1ad4fc697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:7e:84:46:67:1e:dc:55:d6:ed:25:cd:32:
56:35:e7:93:f0:cc:7a:5a:8c:cd:51:5c:05:fc:96:
6a:e1:fc:6c:7b:66:40:5b:a2:a5:10:9b:9c:23:ad:
69:ef:55:45:bb:12:a9:1c:f1:ae:d5:d4:e0:66:f5:
2f:bf:00:e5:10:86:f0:43:6e:d1:e3:52:89:2b:de:
b6:e0:3e:35:f4:a8:c1:42:f4:44:bf:44:59:42:bf:
99:d1:78:5a:2e:8f:c8:69:be:b4:00:98:88:d5:36:
21:22:d5:0d:25:09:9e:11:94:0f:e3:e1:d1:6f:4c:
ee:10:cf:45:50:a9:6e:95:f4:7d:26:61:2b:81:02:
ef:90:9a:34:7b:3a:6a:8b:69:59:9a:fa:7e:d2:ac:
f3:8f:e9:72:bb:8f:45:a0:3a:ba:da:f2:84:1d:0b:
53:3e:49:c5:f0:5c:94:64:4d:bb:d9:86:95:2a:d8:
e3:e2:3a:3c:8e:3b:2d:3a:c6:83:91:74:96:dd:da:
c8:3e:3a:37:00:d1:87:3d:b8:2e:50:d8:72:d0:64:
9e:1a:10:d4:af:e5:e9:21:04:a4:bc:f2:94:e0:10:
0a:a5:41:50:6d:01:3e:4b:a5:68:52:a5:15:4c:7f:
a4:66:c9:13:b9:e5:af:a3:45:0a:ae:cf:04:aa:0e:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EA:F8:35:99:D9:0A:64:73:F4:9A:15:C8:F8:84:A1:AD:4F:C6:97
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/1Or4NZnZCmRz9JoVyPiEoa1Pxpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.104.0.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:89:7b:89:51:8a:d5:e3:90:00:92:d3:6a:de:23:9e:cd:9d:
3e:4b:ec:74:2c:54:10:b2:97:1a:b9:12:da:7d:1c:67:ba:6b:
0d:4b:8b:ff:f3:b4:d3:92:51:1b:20:8b:6b:ad:e6:f2:21:2f:
81:d3:f7:28:ab:aa:9e:00:ca:56:c8:b9:99:79:c8:d8:bb:c9:
ab:46:09:0f:33:20:16:8b:05:62:92:d8:9e:9c:42:e8:a1:c2:
27:ea:64:df:f5:1e:6a:2f:5c:14:ce:ed:5c:df:b2:c5:2d:d1:
3b:aa:2e:1b:94:e6:47:c9:72:74:24:be:a3:d8:70:74:8e:3e:
9d:cd:86:63:67:d9:0f:ae:85:17:4b:33:e3:ad:4f:50:b8:75:
2b:97:6b:ad:c3:c2:c9:ad:b5:27:7e:b2:f1:6b:ce:22:39:61:
64:98:b8:ba:e9:13:69:0b:bc:65:4f:15:1d:8d:ac:67:a2:b3:
a6:be:9f:b1:0e:7a:3b:23:80:ae:c8:37:74:f1:05:1f:0d:8b:
8b:93:21:af:ee:86:ce:93:25:2d:23:48:90:9f:39:1e:73:2a:
0a:5b:87:a8:be:a9:b8:05:1d:b5:fb:ef:b5:42:c4:ae:4e:e1:
fd:a9:cf:b6:db:3b:c1:6d:0f:1a:f2:9c:66:3f:dc:90:0d:cc:
22:56:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net