Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa
File: xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa (raw, json)
Hash identifier: 0vgJIO9+h7c2mbSVzNPAZELxWF5+K01pByF8TcGC1nU=
Subject key identifier: C5:58:3F:81:68:27:D9:34:C2:32:85:13:E9:36:DB:28:8D:27:8F:58
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 0186839A54BBAEA19C24507B2A46AD088B34
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa
Signing time: Fri 24 Feb 2023 13:26:14 +0000
ROA not before: Fri 24 Feb 2023 13:26:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34986
IP address blocks: 193.104.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:9a:54:bb:ae:a1:9c:24:50:7b:2a:46:ad:08:8b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Feb 24 13:26:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5583f816827d934c2328513e936db288d278f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7f:08:74:d8:a9:86:72:8d:09:9a:89:b1:79:
d4:3f:d9:c4:ff:ab:7d:44:26:cb:bc:f3:72:4c:de:
27:66:d8:01:c6:b8:6c:11:5c:95:2e:b4:49:8d:f4:
56:24:04:af:0d:95:dd:d7:28:03:39:7b:7c:1c:cb:
19:31:bf:dd:68:17:78:9e:77:0c:c4:44:42:35:60:
cd:e8:a8:3d:c4:51:c0:2a:8a:5a:4a:cf:1f:09:9d:
88:a5:c3:f5:16:26:5a:5f:98:e4:7a:50:d1:15:0b:
31:f2:84:04:b3:f8:a4:94:95:40:19:84:42:c3:89:
01:2c:f8:7e:f5:07:dc:59:08:92:a4:7c:27:4e:ee:
2f:3b:c3:6f:33:98:61:e6:d7:84:73:63:df:92:2d:
f7:bc:51:70:aa:41:dc:95:bc:d8:bd:89:03:65:9d:
9e:fc:fb:1a:9f:b8:b6:23:a1:ca:c3:7d:a8:a8:8c:
1a:22:9c:d9:94:33:8d:d7:cf:a7:f5:ce:71:1e:d2:
3b:17:cd:70:1c:07:83:06:8d:c5:22:b2:0a:ff:6a:
8a:64:f6:73:2d:06:e0:c8:32:e5:cc:b1:c2:6e:ce:
24:f3:58:f7:0a:37:7f:39:a6:d2:f6:6e:43:65:37:
15:7d:3e:dc:4d:5b:b7:8b:a4:e7:38:cb:6c:ae:0d:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:58:3F:81:68:27:D9:34:C2:32:85:13:E9:36:DB:28:8D:27:8F:58
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/xVg_gWgn2TTCMoUT6TbbKI0nj1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.166.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f4:21:99:26:b6:aa:38:a0:01:1a:d8:d9:5e:15:ff:42:34:
1a:7e:3e:1e:6a:cf:b1:91:ef:06:3d:39:70:a4:ca:02:ac:18:
e6:9c:2e:6f:6b:df:1d:bb:88:78:42:dc:43:7e:b8:ba:7d:a2:
a6:b9:f9:f7:2d:12:84:18:92:6d:82:07:fb:2e:98:8e:57:76:
43:d1:2f:b3:8b:94:5a:ac:85:81:21:aa:8f:0d:f2:eb:54:03:
0f:0f:13:65:11:c2:81:68:81:ff:30:8d:b5:53:61:b7:09:2b:
64:6e:52:36:02:4e:f5:6c:5d:48:64:69:ba:d3:3d:70:cf:fa:
ec:c3:c1:a9:cb:02:b4:1c:d8:1b:d8:07:96:59:ee:4b:35:89:
35:c9:e9:33:6d:dc:56:27:01:e1:7a:22:54:0a:e6:92:d5:05:
cd:98:db:11:6f:9a:04:bf:bd:0c:e7:3d:5b:6e:b5:cf:f2:15:
03:03:cc:e5:0b:c5:1b:d0:48:06:bd:78:04:82:ef:c4:9b:88:
c7:97:fc:c8:f5:5c:dd:4f:8c:30:a1:00:83:d6:f2:39:53:55:
cc:8b:b7:28:a0:d2:5c:1c:fb:af:2e:87:3f:f2:2b:e5:40:f7:
1a:42:40:5d:1b:fa:4a:62:c3:3c:69:48:af:32:dc:db:4b:6d:
9b:4d:b0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:54 2024 by rpki-client on console.sobornost.net