Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/1AU1RqXc27rAcLEFqZ4Cq6az8nk.roa
File: 1AU1RqXc27rAcLEFqZ4Cq6az8nk.roa (raw, json)
Hash identifier: jcWgXgHKtbjFLbQSuMQOphfyyUrptO5GF83ZC/kyRoc=
Subject key identifier: D4:05:35:46:A5:DC:DB:BA:C0:70:B1:05:A9:9E:02:AB:A6:B3:F2:79
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 018571830E239BD3F286510121D002B526B1
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/1AU1RqXc27rAcLEFqZ4Cq6az8nk.roa
Signing time: Mon 02 Jan 2023 08:04:52 +0000
ROA not before: Mon 02 Jan 2023 08:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3332
IP address blocks: 193.203.196.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:0e:23:9b:d3:f2:86:51:01:21:d0:02:b5:26:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Jan 2 08:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4053546a5dcdbbac070b105a99e02aba6b3f279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:61:61:c2:53:52:2e:92:cb:66:5d:44:f7:
a0:3e:52:00:63:53:c0:43:82:0a:ac:6a:97:06:fe:
1b:55:bc:1c:b9:68:c3:8f:cd:2a:46:ff:50:b2:a4:
99:33:2e:0f:f1:31:aa:b5:87:42:44:08:95:d4:a9:
a9:7c:77:0a:82:b1:f0:ab:bb:fa:78:90:2e:af:12:
d2:85:52:b3:e1:38:b7:33:99:9a:57:d9:2a:8f:6c:
c8:d9:03:0d:fb:e8:18:fb:63:76:08:1c:3e:71:2a:
05:b6:ee:91:8c:66:e8:55:cd:e1:f3:22:21:89:72:
52:44:96:af:d1:56:d5:d3:21:42:7e:d0:a5:03:98:
8c:61:d4:97:f0:f0:e2:19:72:21:ad:42:2b:17:dc:
30:53:e9:b0:58:c2:01:35:1c:6f:c4:18:d8:4f:f6:
b4:d5:a2:03:af:8d:b5:dd:16:82:e6:22:9b:ca:3f:
d5:64:84:4d:a3:c5:ea:ab:1e:dc:6d:2b:49:9f:c5:
76:06:e6:f6:af:ca:98:dc:4b:49:bc:b2:4f:33:0e:
5e:69:0a:47:b5:0f:96:56:d7:56:cb:f2:34:b7:85:
f9:72:cb:da:76:65:f5:73:bf:67:b4:cb:0b:87:71:
a2:ce:94:d4:6d:fb:18:19:86:38:87:03:3e:f2:92:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:05:35:46:A5:DC:DB:BA:C0:70:B1:05:A9:9E:02:AB:A6:B3:F2:79
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/1AU1RqXc27rAcLEFqZ4Cq6az8nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.196.0/23
Signature Algorithm: sha256WithRSAEncryption
97:7f:51:ad:b9:69:08:b8:c6:3a:93:ff:49:14:d3:66:d3:b2:
9f:35:ad:48:87:9f:60:60:57:18:44:e8:cc:fe:2e:1f:b0:4e:
e8:f3:ef:f2:17:c7:24:1c:55:4a:16:7a:98:84:20:cf:07:c0:
95:05:96:e9:b0:98:24:f1:f9:6a:69:8e:cb:ca:96:22:23:8a:
14:8e:af:10:96:00:c1:98:b0:e9:8a:32:63:f9:e9:7c:da:f8:
6d:fe:41:b9:8e:fa:7c:da:c8:e5:02:24:b8:6c:3a:9f:a2:02:
11:db:cf:ff:90:a7:74:9a:c0:f2:3e:4a:25:f5:d0:49:03:3f:
40:01:d0:e3:15:3f:b4:2e:8d:19:13:c6:d3:cd:bb:1e:c0:a9:
b0:20:0d:5d:30:23:e9:11:78:57:dd:4b:db:9c:69:e8:f2:65:
8d:bf:61:69:86:9b:44:ef:b5:37:13:52:78:fc:47:59:85:60:
33:42:3a:cf:9b:90:e5:ac:fb:15:52:77:e1:85:a2:b8:b2:fd:
b3:b1:8b:2f:a0:46:1f:03:1f:be:e7:2c:05:07:32:6b:b7:d6:
e7:df:1a:7a:5b:5f:3d:08:66:69:16:7c:bd:8f:39:ee:7d:56:
54:3f:19:06:00:ef:d6:88:69:49:af:80:e1:1c:97:2e:75:dd:
cc:d1:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:18 2024 by rpki-client on console.sobornost.net