Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/Se9eY31-kcjqe1u1aMn45rBZD-k.roa
File: Se9eY31-kcjqe1u1aMn45rBZD-k.roa (raw, json)
Hash identifier: GPmRheMez0fwRKEm7u4WriZHA1iW78MadQG6YZdku/k=
Subject key identifier: 49:EF:5E:63:7D:7E:91:C8:EA:7B:5B:B5:68:C9:F8:E6:B0:59:0F:E9
Certificate issuer: /CN=99fea9717c280ec879335273f022e6b0537455c2
Certificate serial: 01856E78F1EAEB69334D1BA3A86D8470FCA3
Authority key identifier: 99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/Se9eY31-kcjqe1u1aMn45rBZD-k.roa
Signing time: Sun 01 Jan 2023 17:54:58 +0000
ROA not before: Sun 01 Jan 2023 17:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 185.5.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:f1:ea:eb:69:33:4d:1b:a3:a8:6d:84:70:fc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fea9717c280ec879335273f022e6b0537455c2
Validity
Not Before: Jan 1 17:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49ef5e637d7e91c8ea7b5bb568c9f8e6b0590fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d9:c8:a9:3f:2c:fe:0a:ff:5f:f7:10:b9:e1:
a1:eb:b3:08:2c:9b:a4:40:42:5f:01:53:ef:30:27:
c8:22:f5:76:71:92:85:c3:13:08:04:4c:77:5b:71:
86:28:0c:62:5c:9c:e6:36:d4:8d:20:ee:45:87:97:
01:a8:83:46:52:f3:54:b7:14:52:fa:56:d5:c7:ef:
3e:14:f6:1e:99:d2:52:83:88:73:cb:88:3f:3d:48:
30:9e:32:26:8f:95:be:ca:82:00:0f:d7:a9:7c:ce:
17:57:fa:c7:6c:e9:f7:92:fe:35:b9:87:be:ca:0d:
b5:38:b0:31:be:3d:6e:e9:54:29:e7:74:03:6c:8b:
b2:45:b5:82:a7:54:9e:dc:ef:47:62:44:e8:34:9d:
ac:cd:60:b5:4f:96:68:0b:3b:97:19:4e:c8:01:6c:
cf:86:b7:e9:79:3d:9c:33:31:b2:b5:89:44:77:8d:
55:4e:fc:6e:96:ec:42:85:6e:f3:f3:f1:e7:5a:71:
53:d9:0e:c3:6d:8e:0a:36:3b:68:62:cc:ae:44:71:
89:73:51:b6:5e:3d:73:c2:5e:f5:4f:aa:77:7e:77:
95:23:50:a0:b2:d3:e0:a1:b8:cb:2b:bd:b0:11:4d:
d7:fd:27:5a:01:fc:b3:9d:c3:e3:8a:ab:99:90:00:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:5E:63:7D:7E:91:C8:EA:7B:5B:B5:68:C9:F8:E6:B0:59:0F:E9
X509v3 Authority Key Identifier:
keyid:99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/Se9eY31-kcjqe1u1aMn45rBZD-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
28:af:02:9e:3d:23:4c:3a:cb:2d:2d:b5:d9:9a:11:af:ef:17:
45:67:d7:4c:0d:ef:39:37:65:05:b8:9a:cc:6c:c1:ef:13:ec:
d5:84:b3:c1:b5:4c:d8:9b:d7:ff:05:bc:8f:44:ae:29:d4:05:
74:48:c6:74:39:45:10:c6:e7:64:a9:ce:2a:5c:6e:bf:97:62:
45:07:74:4f:e3:11:18:ae:74:ed:3f:e6:0b:d5:9a:d1:9d:38:
d0:d9:9e:a0:da:09:68:12:cf:00:b9:47:d2:2c:68:a5:53:65:
2b:67:16:4e:a9:3e:2f:c3:56:0f:b6:61:04:67:b0:7d:7a:d5:
78:cc:7c:96:ae:20:94:11:52:4d:9f:4c:20:3d:ce:f5:24:a7:
f3:2a:35:a9:44:28:e8:f8:44:d2:1e:20:58:64:45:aa:37:23:
eb:ee:c1:ce:a2:10:fa:01:22:50:40:c4:53:0d:c1:ca:7d:de:
06:da:ba:8c:27:18:ba:ed:3e:0c:3c:29:c6:b0:19:a8:b0:01:
e9:f9:b8:47:93:05:82:fe:08:f8:34:de:ea:fb:bf:5c:66:61:
06:50:ca:d2:b7:92:e9:8e:09:48:4a:9f:1c:3b:aa:f9:26:36:
36:88:1b:b8:52:98:13:9f:d9:d8:43:1f:e9:40:b6:8b:3d:85:
3e:c2:e7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:15 2024 by rpki-client on console.sobornost.net