Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/p4E3aRIGGZ7qt5DQ4rjmWMFJZ7A.roa
File: p4E3aRIGGZ7qt5DQ4rjmWMFJZ7A.roa (raw, json)
Hash identifier: IzVPzp1iyw1K1EJyzXsQo0LbgDuim7y7q7JfbE1zT9E=
Subject key identifier: A7:81:37:69:12:06:19:9E:EA:B7:90:D0:E2:B8:E6:58:C1:49:67:B0
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 0185700B921A20EE1A60FFFBF95775F0DCD8
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/p4E3aRIGGZ7qt5DQ4rjmWMFJZ7A.roa
Signing time: Mon 02 Jan 2023 01:14:44 +0000
ROA not before: Mon 02 Jan 2023 01:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20709
IP address blocks: 81.17.137.0/24 maxlen: 24
81.17.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:92:1a:20:ee:1a:60:ff:fb:f9:57:75:f0:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 2 01:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a78137691206199eeab790d0e2b8e658c14967b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:19:4f:0a:70:83:9c:b2:5f:fc:dd:f5:8d:
09:99:95:51:2f:d2:2c:c1:f1:fc:76:fb:fd:1d:17:
49:b4:6e:6f:68:92:02:01:9f:ca:9c:6b:84:a8:63:
f4:53:1f:d7:f4:0e:52:23:ab:6a:58:ea:3b:97:13:
a3:be:61:e7:d3:e8:5b:2a:b2:76:e9:00:f2:75:45:
a1:a4:07:bc:27:f6:d0:b5:5a:55:e1:23:e3:b4:f7:
8c:5c:21:98:d4:96:70:5d:30:31:01:b9:13:7f:4a:
d8:d1:ea:eb:2c:1d:84:b1:5a:c1:10:df:85:f8:66:
37:e3:46:aa:b5:e6:81:95:2c:17:5c:93:18:0f:2f:
40:ae:53:20:04:17:fa:10:ac:fb:87:53:4d:ca:14:
e9:f4:dd:aa:1c:90:66:8f:71:51:73:c8:e7:e8:8e:
d6:4f:ac:d7:2e:3c:a8:a0:cc:ee:18:c0:47:8c:fa:
3f:eb:1c:31:88:b7:c7:48:c2:12:83:ec:2e:ae:4b:
07:dc:26:41:07:bc:e9:11:47:84:43:40:d4:49:61:
09:a6:f6:7d:ba:e6:60:d8:f8:6a:c9:cf:fa:c3:0c:
b0:64:a4:ef:b6:e8:a5:81:18:e4:40:08:99:62:e1:
48:7c:17:79:b5:c6:2a:b4:29:48:ac:cb:3b:b9:31:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:81:37:69:12:06:19:9E:EA:B7:90:D0:E2:B8:E6:58:C1:49:67:B0
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/p4E3aRIGGZ7qt5DQ4rjmWMFJZ7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.137.0/24
81.17.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:45:8a:eb:85:c0:f0:14:3a:57:83:72:33:c6:2e:c1:e8:97:
7a:aa:c6:87:50:e6:fd:11:28:0d:d0:b8:95:85:ff:4e:c9:39:
09:1e:02:7c:71:18:4c:56:3d:23:10:29:7e:33:58:68:9d:af:
15:91:6a:8d:2b:35:90:f2:99:5e:0e:49:e9:8b:b0:f0:81:e7:
ca:78:7a:1f:3c:8f:45:dd:24:48:2c:fe:51:23:51:92:c9:69:
2e:26:af:f2:43:7f:3a:44:28:5c:f0:51:50:e2:ce:d1:bc:4e:
c7:17:e2:57:cb:f3:9d:01:bf:56:ea:82:21:f2:6f:72:a4:54:
2d:c8:7a:d9:2c:90:7b:7c:d4:8e:15:87:d1:93:0c:8e:8e:c0:
c2:e8:e1:54:c4:b1:25:f4:32:fe:a7:16:69:dd:6e:a3:e8:cd:
45:e9:07:6d:f7:4a:aa:37:c0:a8:f2:c3:10:5a:76:23:5b:3d:
f2:a1:33:c4:36:5b:31:6b:13:20:00:f5:f6:c3:e2:4c:38:d5:
8b:0a:63:a4:9b:98:da:a8:a0:16:79:e2:d2:dd:0d:ba:26:15:
84:58:5f:5c:03:a9:7a:6b:52:3d:9e:b0:8f:31:3b:c1:dd:9b:
0c:d6:15:3a:1d:b7:fc:09:46:8e:68:80:4f:0b:8a:78:e3:36:
9c:3d:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:55 2024 by rpki-client on console.sobornost.net