Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/H-B0qNwdgBvOdVZXOiHF7g1HV-I.roa
File: H-B0qNwdgBvOdVZXOiHF7g1HV-I.roa (raw, json)
Hash identifier: TWnwWgq/5VYv7FUdtAMAd6YEEzrlbpADd7XKFi/7j+4=
Subject key identifier: 1F:E0:74:A8:DC:1D:80:1B:CE:75:56:57:3A:21:C5:EE:0D:47:57:E2
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 01856B533842BD0E430F0D2BEB93BA46AFAF
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/H-B0qNwdgBvOdVZXOiHF7g1HV-I.roa
Signing time: Sun 01 Jan 2023 03:14:54 +0000
ROA not before: Sun 01 Jan 2023 03:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197870
IP address blocks: 176.57.40.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:38:42:bd:0e:43:0f:0d:2b:eb:93:ba:46:af:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Jan 1 03:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fe074a8dc1d801bce7556573a21c5ee0d4757e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:50:12:ca:f0:61:81:2d:6f:6c:7f:2d:53:
9e:d3:21:47:1b:ff:d6:35:d5:1e:66:d8:f1:d1:76:
6d:0f:e4:6c:c9:2a:8a:48:a2:40:55:e4:85:61:ff:
e6:c8:99:a3:c8:af:8a:46:bb:cf:18:35:8b:39:26:
bd:30:be:f3:5d:85:ee:47:52:2c:75:55:44:32:37:
6d:3c:1d:21:2f:3d:6e:a6:ed:b7:4e:d1:0e:65:d2:
cd:03:93:14:22:91:42:6f:15:3c:ad:c7:d6:4f:6f:
d7:01:c9:63:c4:58:a4:24:1a:88:84:1e:e3:bc:01:
c2:5f:bf:c2:b5:51:0a:95:c6:67:d4:28:06:a0:d6:
67:cd:ae:eb:66:78:66:78:ae:3d:f9:46:c7:82:80:
54:53:79:0b:76:9b:5f:e5:9a:02:7c:2d:43:04:f7:
f3:33:2a:e8:83:ac:79:49:16:b8:bd:e7:8b:b3:31:
40:8f:c0:d8:b1:e6:1b:b0:0e:91:98:f6:35:d0:bb:
0d:77:12:77:e2:02:80:2a:5e:bd:86:8c:aa:a6:90:
12:d6:a7:d3:eb:b2:92:72:0d:8c:a7:9d:21:db:43:
ef:8b:f8:b2:a5:62:1e:04:1c:39:ad:55:f3:0e:2a:
46:7c:89:93:48:2e:87:a2:e8:40:e6:12:76:ec:97:
c5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:74:A8:DC:1D:80:1B:CE:75:56:57:3A:21:C5:EE:0D:47:57:E2
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/H-B0qNwdgBvOdVZXOiHF7g1HV-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
30:5a:46:a8:19:8d:e9:4e:fa:8a:f4:79:b1:91:51:73:cc:9b:
a0:79:05:ef:7c:01:be:01:e5:fd:b9:c7:31:40:8a:b7:3e:c3:
70:3f:53:b6:e1:39:ea:33:83:8c:de:83:8b:1b:3e:16:c8:76:
33:04:ee:07:19:bb:c7:9d:b9:96:ff:64:03:65:3a:8f:cb:8c:
78:97:48:33:72:b0:15:52:17:05:17:b9:03:26:22:37:4e:1c:
b6:02:ac:47:0f:ff:78:a6:fd:ab:53:58:3e:34:da:e3:c4:92:
ec:b4:dd:b5:50:a6:ec:04:41:e3:2d:53:d4:39:a5:46:92:d8:
8b:e4:cc:57:59:95:a7:91:1e:09:10:10:3c:23:81:69:c5:ee:
bb:85:dc:11:96:72:b8:3e:f3:e0:b6:ce:fb:e7:11:46:ce:b1:
45:35:f7:0c:d5:88:6a:d9:f6:db:54:8b:e3:4f:44:4d:24:5d:
d7:5c:75:0d:a9:2b:82:f5:51:c6:86:f0:04:65:84:0b:a1:ca:
6d:df:bd:54:93:db:2d:95:d1:3d:22:11:80:58:ef:25:a0:e6:
d1:01:8e:45:cb:99:9a:7d:45:15:74:96:6c:07:53:cf:ad:3e:
04:5c:7f:8f:47:34:16:5d:ff:d4:e1:20:aa:ce:8d:26:bd:a0:
6c:3f:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:00 2024 by rpki-client on console.sobornost.net