Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/qKX1m5WPYzniBobwYIknQTwWoWc.roa
File: qKX1m5WPYzniBobwYIknQTwWoWc.roa (raw, json)
Hash identifier: Mw5sxNQX5PXXjQnm2ZwTz7AULq8XqZXA0rn2BDRZ0KI=
Subject key identifier: A8:A5:F5:9B:95:8F:63:39:E2:06:86:F0:60:89:27:41:3C:16:A1:67
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 0185711E88B2D7A305B660C2AB1DD15ED096
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/qKX1m5WPYzniBobwYIknQTwWoWc.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209153
IP address blocks: 2.59.164.0/24 maxlen: 24
2.59.164.0/23 maxlen: 23
2.59.165.0/24 maxlen: 24
2a09:f540::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:88:b2:d7:a3:05:b6:60:c2:ab:1d:d1:5e:d0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8a5f59b958f6339e20686f0608927413c16a167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:e1:1b:b0:3e:5e:d2:d8:f6:a7:65:9f:68:
12:da:a9:14:d2:84:1a:ab:61:c6:23:90:4b:a8:ea:
a2:ca:46:c6:49:d7:3c:48:e7:d5:ea:58:bc:9f:41:
cc:d8:c6:56:26:a7:46:6f:5d:8e:57:fd:bd:2c:d6:
40:49:59:32:77:1a:61:61:eb:8f:f6:a5:ef:b3:f6:
76:94:f8:33:ed:00:49:fe:7c:9e:5e:18:eb:21:e9:
02:6c:7f:b3:61:ee:67:14:c7:d8:5e:dd:2b:b7:0c:
7d:03:9d:0c:9e:5b:e9:54:cf:c0:ae:ae:df:ef:17:
30:f7:0d:c9:53:07:ab:42:4c:36:0c:df:d2:90:99:
bc:10:64:5b:80:41:59:e8:01:6a:d8:49:8b:c3:3c:
42:5a:a6:0b:bc:38:98:23:95:95:db:f9:7e:b9:5e:
e6:bc:f8:d6:b1:7d:42:b4:6f:1a:be:71:52:8f:d0:
a5:6e:80:84:d7:ba:f7:85:48:0a:d0:37:18:70:f4:
a9:ac:ea:81:24:e3:63:26:92:03:87:28:f6:9d:a7:
e9:24:a7:6c:14:bf:7f:cd:0a:59:4e:a3:c9:a9:d7:
41:0c:3e:2e:79:ee:14:10:bd:5a:dd:9f:01:9f:75:
b4:b3:41:30:c5:39:8d:f4:e6:97:99:7f:73:cf:ce:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:F5:9B:95:8F:63:39:E2:06:86:F0:60:89:27:41:3C:16:A1:67
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/qKX1m5WPYzniBobwYIknQTwWoWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.164.0/23
IPv6:
2a09:f540::/29
Signature Algorithm: sha256WithRSAEncryption
94:7f:2e:7d:99:b5:d1:af:d6:42:1c:3a:97:9c:8e:35:82:49:
d3:dd:98:70:c6:c6:8c:b8:1e:5a:3f:dc:f7:a9:d0:51:7b:bf:
dd:96:d8:cf:de:7a:23:1d:59:23:4d:77:60:57:16:35:5f:d8:
54:ac:49:fb:fb:31:61:ec:df:c7:3c:ee:36:a4:55:52:e7:15:
49:bc:ef:d6:bd:9d:b3:22:0f:1e:f4:8a:77:e5:65:17:a8:ba:
20:d5:80:5b:dc:b6:1a:70:11:91:7f:3b:0b:1b:42:04:80:a8:
0a:10:be:d9:cd:85:51:df:6c:e0:d8:dc:68:ba:6f:16:31:4a:
4b:9e:a8:fc:f5:29:fa:90:8d:ee:10:ba:0f:d5:0f:f2:30:f9:
5c:33:64:f1:b9:54:d1:9a:df:87:91:c1:78:53:4c:f6:84:f6:
a5:da:10:98:a7:a2:ed:ff:5c:8d:93:d5:34:82:5d:5e:f1:25:
e4:93:38:98:fd:43:a9:8d:04:bb:30:4f:dd:dc:12:cb:9f:c2:
42:94:26:78:ff:91:5e:33:ec:f8:d0:12:62:d9:24:c5:54:f6:
65:cf:ee:18:7b:df:d8:b9:04:1f:68:de:0f:4f:cd:91:70:31:
65:4d:d3:75:f2:70:67:27:3f:51:25:49:47:d8:68:3f:12:64:
a5:3d:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:19 2024 by rpki-client on console.sobornost.net