Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/VGnHZWnv7O_YlXBiaAUuXaXyCJs.roa
File: VGnHZWnv7O_YlXBiaAUuXaXyCJs.roa (raw, json)
Hash identifier: sdHtrxBIYL7FfEiq0uIKV2Qz3qtIKk62baKO/MsIz1k=
Subject key identifier: 54:69:C7:65:69:EF:EC:EF:D8:95:70:62:68:05:2E:5D:A5:F2:08:9B
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 0189263D2EF0ACEA637C45781862C7CD9901
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/VGnHZWnv7O_YlXBiaAUuXaXyCJs.roa
Signing time: Wed 05 Jul 2023 13:28:11 +0000
ROA not before: Wed 05 Jul 2023 13:28:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209
IP address blocks: 195.93.196.0/24 maxlen: 24
195.93.197.0/24 maxlen: 24
95.130.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:3d:2e:f0:ac:ea:63:7c:45:78:18:62:c7:cd:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jul 5 13:28:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5469c76569efecefd895706268052e5da5f2089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:9e:2b:f4:c9:10:79:2e:41:20:37:2b:e1:
eb:bd:d1:d9:26:a0:81:51:9b:61:38:f5:e3:5d:62:
30:92:4c:20:46:2f:2b:38:91:39:a9:77:cd:c3:5d:
bc:f3:c6:c0:16:66:54:9e:e2:66:47:06:3f:9a:b7:
23:b2:ba:c7:af:d6:33:df:28:5c:e2:ea:77:f5:bd:
28:2b:0d:78:35:0c:27:55:95:1c:ef:2f:3d:1c:8e:
8d:64:7f:8d:8a:f0:a4:d3:4e:0f:12:60:5d:48:10:
05:ef:24:8b:3e:c7:15:42:e2:a2:f9:87:45:7e:bf:
1e:96:87:8f:a3:2c:3b:c4:71:20:b6:91:8e:6f:bf:
11:c9:3c:1f:0b:d8:34:fd:51:4d:5f:5b:80:e8:0e:
d5:93:ed:33:92:bd:ca:27:42:ee:4a:fa:85:fa:65:
e5:07:07:92:29:2c:bc:70:a2:ff:40:06:0c:60:ac:
4a:64:b7:1d:94:9f:01:89:37:f6:1f:91:1c:bf:90:
b5:4b:4c:7c:fe:3e:ca:f4:3c:6e:51:e3:ca:32:9d:
c8:50:87:b5:2e:ce:2b:35:90:6d:7f:ca:e4:f4:81:
85:0d:97:c3:c8:79:bb:d2:c6:a8:6c:28:e1:3a:99:
7a:e8:5d:8c:9d:71:fb:2a:8c:98:2f:0c:16:d6:0e:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:C7:65:69:EF:EC:EF:D8:95:70:62:68:05:2E:5D:A5:F2:08:9B
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/VGnHZWnv7O_YlXBiaAUuXaXyCJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.110.0/24
195.93.196.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:51:65:6a:00:a9:5b:20:f7:b0:72:96:7c:a8:38:08:12:5f:
50:38:ed:98:96:b5:5e:7f:fa:27:1b:c2:e8:4e:4a:14:a0:4c:
a2:c5:6e:eb:c5:fb:b2:bd:1d:0a:68:75:f0:e6:2c:47:11:fe:
76:fb:25:e0:51:c2:83:ae:9f:6a:b4:52:df:e0:ef:b2:64:65:
e2:07:cd:2c:5e:67:54:37:47:4b:3d:b0:57:2f:49:77:35:72:
dc:07:64:5c:de:fe:14:55:96:f1:a7:67:ae:e7:40:c7:4d:81:
ea:dd:47:62:e4:9a:a9:e9:50:68:bb:e0:33:c5:4e:c0:c7:ce:
f6:8e:3e:74:81:e8:1b:fb:9f:cb:3f:d0:e3:68:29:e7:72:16:
2e:22:d6:4d:a8:85:8d:50:77:80:c2:e4:c5:91:3a:9c:51:c1:
92:cd:fe:8e:d1:75:6a:22:15:79:8d:68:97:b9:15:e1:21:bc:
20:4c:01:17:a4:f1:ab:e6:9f:52:12:b4:42:78:a3:68:b0:4c:
6a:2c:b3:51:16:ff:f7:64:ff:8a:d8:09:58:75:f0:7b:ed:29:
90:f6:86:6e:31:d1:14:0d:67:0b:28:71:be:f4:c2:d3:29:e6:
88:1f:df:32:44:cf:96:e7:f7:ce:92:61:53:19:78:2e:83:b7:
97:9a:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net