Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/eEW9Wt8WAGehroa88f1_vrn5uJ0.roa
File: eEW9Wt8WAGehroa88f1_vrn5uJ0.roa (raw, json)
Hash identifier: 5Vryl5Si7gXOwZSmbz5xBawgfaWvnQfPgdHupyAvM0s=
Subject key identifier: 78:45:BD:5A:DF:16:00:67:A1:AE:86:BC:F1:FD:7F:BE:B9:F9:B8:9D
Certificate issuer: /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial: 01856E6FCF72BE8426AFBF17725782A9E171
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/eEW9Wt8WAGehroa88f1_vrn5uJ0.roa
Signing time: Sun 01 Jan 2023 17:44:59 +0000
ROA not before: Sun 01 Jan 2023 17:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41493
IP address blocks: 195.93.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:cf:72:be:84:26:af:bf:17:72:57:82:a9:e1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Validity
Not Before: Jan 1 17:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7845bd5adf160067a1ae86bcf1fd7fbeb9f9b89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e1:0c:1b:2c:3e:79:f6:c8:94:e1:04:02:e7:
29:b7:4c:ee:06:5f:55:93:59:01:28:3f:27:cb:d5:
e4:cd:1e:30:9e:f7:b8:16:93:17:46:23:38:b7:71:
3c:fd:42:ff:ee:93:f4:7f:55:42:d7:9a:24:9c:60:
a4:15:26:ed:d7:70:f6:33:cb:4c:62:4b:8c:4e:17:
24:bc:38:35:05:f3:fa:97:e3:ae:f2:6e:6f:ec:ec:
86:bf:ad:12:48:4a:40:0b:6b:9f:ac:45:e1:17:a6:
f5:bc:72:e7:a9:ab:dd:05:08:b0:c8:5b:f3:d4:1b:
9a:bc:2c:36:be:d9:83:cc:70:0a:ec:3e:8f:34:38:
16:cd:5e:78:ce:f8:c7:32:71:ae:a9:af:50:80:c9:
9a:0d:7e:a8:22:0d:96:94:ea:e7:a1:61:f5:fe:39:
7e:de:d0:0c:f0:60:3f:f9:6b:5c:76:b7:c1:62:51:
1c:ee:bc:69:f0:6b:c6:8f:6e:2a:f1:06:4b:04:d9:
69:44:92:51:8c:11:14:32:07:ed:66:f8:86:1f:3d:
1f:21:d9:06:4b:f7:3f:02:14:39:c2:db:46:42:76:
97:c3:2e:7d:c4:0b:b4:58:f6:c8:80:e0:b4:1d:51:
76:a8:5e:ea:18:6d:67:bc:65:be:9b:ea:f7:10:07:
93:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:BD:5A:DF:16:00:67:A1:AE:86:BC:F1:FD:7F:BE:B9:F9:B8:9D
X509v3 Authority Key Identifier:
keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/eEW9Wt8WAGehroa88f1_vrn5uJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.196.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:71:00:3e:eb:99:03:c5:0a:66:a9:13:18:76:66:27:3c:3e:
95:38:69:ed:df:2f:35:b8:7c:8c:f2:f5:02:18:00:e4:10:6f:
fd:c4:ca:0a:b6:36:ee:b3:c1:56:39:86:9d:3a:bc:4c:77:28:
a1:b0:89:0d:d1:6f:aa:fa:46:a6:00:ba:80:c1:aa:f2:b8:52:
33:f8:68:f0:7a:69:ca:e9:3c:4e:08:7a:39:26:8a:70:3d:49:
cc:fe:89:33:48:ef:44:3c:ae:df:1f:8a:6c:ce:e1:03:a2:0a:
95:9c:00:ef:7e:d9:a1:ee:5d:f4:2a:09:21:5c:93:f1:cd:b1:
63:13:70:04:6e:e9:12:59:44:b3:5f:1f:eb:5d:09:3c:01:e5:
cf:8a:66:1e:27:55:28:fc:42:15:77:74:ed:90:02:cc:73:19:
bd:e0:56:6b:a4:05:70:e2:01:21:98:b0:af:db:23:77:f7:00:
f3:93:a0:31:3e:8f:95:35:e8:e6:c4:20:b5:72:29:70:92:87:
0b:65:0b:01:95:38:e5:5e:5f:a5:9e:05:90:fc:42:df:d0:af:
66:a9:76:a6:8f:ca:9a:0f:e0:cb:41:88:ea:30:31:0f:d0:cc:
f2:33:70:57:1c:9c:ab:13:32:94:8a:bf:54:55:c3:cf:9c:8b:
1f:e9:3a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net