Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/a7NG5Y5CxZvkYl8YVvTHrtKXWuI.roa
File: a7NG5Y5CxZvkYl8YVvTHrtKXWuI.roa (raw, json)
Hash identifier: wx1wC4t2qcZ/h2W6Vk+tE1yi/eaUbK2IJwHIbVQ2Cq0=
Subject key identifier: 6B:B3:46:E5:8E:42:C5:9B:E4:62:5F:18:56:F4:C7:AE:D2:97:5A:E2
Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Certificate serial: 01856D789097AECD1D14101E4226FBE4B354
Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/a7NG5Y5CxZvkYl8YVvTHrtKXWuI.roa
Signing time: Sun 01 Jan 2023 13:14:55 +0000
ROA not before: Sun 01 Jan 2023 13:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27363
IP address blocks: 193.134.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:90:97:ae:cd:1d:14:10:1e:42:26:fb:e4:b3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2
Validity
Not Before: Jan 1 13:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bb346e58e42c59be4625f1856f4c7aed2975ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:7b:84:d9:69:37:cf:5d:06:99:cb:a1:a5:
c6:81:68:98:59:6b:5b:36:93:4d:75:f3:01:4d:67:
a6:3d:6f:6f:28:01:01:16:a2:96:02:29:1b:fb:1c:
91:f9:d1:29:0b:4f:cb:b4:ef:59:7f:56:30:7a:3b:
ed:bd:de:07:5b:48:de:06:57:e2:2d:2b:1d:ff:e6:
a6:55:29:9c:ae:e4:18:cb:a0:93:bc:32:14:f6:5c:
92:ab:b3:58:d5:73:52:96:82:46:58:79:30:5f:4f:
19:bd:37:82:57:82:6a:8d:7f:6d:89:11:58:92:53:
65:17:22:7f:b6:e0:a5:52:c2:f2:75:78:3f:21:32:
a0:24:e7:cd:f3:ab:dd:3f:ff:4e:84:c3:72:e9:07:
70:5b:c8:f8:7a:18:f1:b0:35:03:7e:d7:4d:d2:ef:
ab:ec:8c:c1:80:28:cc:ef:89:e3:3d:f5:65:f3:b3:
8e:3f:10:d6:57:75:15:8b:57:fe:1e:ba:e4:12:e1:
d6:da:75:b3:22:a8:d9:bc:2f:21:81:f3:2d:50:45:
14:60:80:dc:82:84:66:b2:6d:01:50:f3:6c:83:18:
1f:8d:a3:9d:f3:23:91:0d:40:2a:88:dc:ff:ea:37:
3a:c2:a4:11:73:09:31:08:c7:0d:04:91:6f:a8:c0:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B3:46:E5:8E:42:C5:9B:E4:62:5F:18:56:F4:C7:AE:D2:97:5A:E2
X509v3 Authority Key Identifier:
keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/a7NG5Y5CxZvkYl8YVvTHrtKXWuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.162.0/24
Signature Algorithm: sha256WithRSAEncryption
96:49:1f:82:1a:8c:51:e3:8c:33:dd:00:04:b7:41:af:d7:02:
33:09:1f:af:51:7a:c6:bf:1b:39:c9:2b:b5:b0:0b:de:b8:e2:
f4:f5:7b:a4:90:8e:a0:44:a3:0b:a1:54:a4:df:50:ea:dd:7d:
20:4a:1d:99:bb:80:cb:9c:21:9d:81:94:23:4a:8d:e8:86:b9:
19:b4:fd:a2:dc:be:80:76:24:37:2f:19:37:4c:f1:37:af:97:
e1:93:79:ed:6f:2c:07:de:5b:9b:fd:b0:28:63:08:cd:44:88:
ed:5e:ad:b7:29:7f:12:50:1e:97:51:91:72:f6:3d:1c:44:94:
f6:40:45:e4:06:4b:cc:b5:f8:87:c0:17:f0:a1:1b:f5:61:67:
22:ac:c9:e4:2b:3e:f9:41:25:f3:3e:89:29:e6:94:48:2a:3b:
68:62:aa:6d:69:ad:df:cb:c7:97:53:dd:07:d6:f2:f2:d4:30:
63:2f:84:91:47:82:a9:05:8d:e1:5f:79:27:79:7b:7e:da:dc:
b2:3d:4e:62:1e:38:76:9d:72:18:1d:ed:07:c4:d9:51:e2:35:
17:58:fd:69:cc:40:62:d4:d5:fc:af:a5:29:0d:25:af:41:46:
ab:a2:8a:3a:37:1b:10:d3:6f:9b:f6:f0:63:96:06:ac:c4:19:
d1:1b:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:55 2024 by rpki-client on console.sobornost.net