Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/M9j8Gov3p6DXKwgPqKCbPgRZrjg.roa
File: M9j8Gov3p6DXKwgPqKCbPgRZrjg.roa (raw, json)
Hash identifier: 2POTF5hvb35a4jmfSY75sJ1fL2Qt0a9nTaQCwWGhYNQ=
Subject key identifier: 33:D8:FC:1A:8B:F7:A7:A0:D7:2B:08:0F:A8:A0:9B:3E:04:59:AE:38
Certificate issuer: /CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Certificate serial: 0185730CC2F202E08CAE95F27C7D4A1ED563
Authority key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/M9j8Gov3p6DXKwgPqKCbPgRZrjg.roa
Signing time: Mon 02 Jan 2023 15:14:54 +0000
ROA not before: Mon 02 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 195.64.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:c2:f2:02:e0:8c:ae:95:f2:7c:7d:4a:1e:d5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Validity
Not Before: Jan 2 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33d8fc1a8bf7a7a0d72b080fa8a09b3e0459ae38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:58:62:6a:14:47:fa:95:73:c9:70:77:da:
3a:ab:bb:b6:79:80:ba:23:a7:51:0c:f1:48:5c:b0:
19:06:77:94:57:30:77:93:65:99:17:74:88:4b:81:
c9:2f:a6:cb:e1:64:94:0d:22:34:f0:06:87:d0:0b:
9a:23:07:ba:dc:33:bc:44:5f:60:d1:7f:7a:6e:01:
ba:14:1c:81:79:27:9b:07:84:93:0d:03:90:3a:df:
b5:7b:fd:bf:6b:1e:9c:61:cc:a7:70:ad:f5:76:73:
c3:49:bc:be:c1:4d:68:bd:07:d7:0e:fd:1b:7d:42:
c3:6f:1e:8f:b4:f9:77:cc:24:df:06:d9:51:11:83:
61:d8:7c:7b:81:a9:ba:58:3e:66:49:3c:60:66:bb:
14:64:9c:a4:9c:8b:12:43:40:f7:ab:0a:4e:b6:df:
bf:15:fc:ea:35:15:bd:21:9b:2f:50:63:61:12:76:
b2:d3:f0:22:f6:22:a6:5e:d3:b3:0d:d7:53:33:ba:
b1:dc:66:2d:2c:dc:15:7e:27:c1:dd:0c:ce:9a:de:
9f:c6:af:bb:3d:5b:4d:02:54:6e:a9:6c:52:5a:9b:
97:a1:6c:7b:09:81:76:1c:36:d8:23:bf:13:54:b3:
24:9c:7b:43:ff:8f:d8:75:3b:e3:68:f1:a4:0b:18:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:FC:1A:8B:F7:A7:A0:D7:2B:08:0F:A8:A0:9B:3E:04:59:AE:38
X509v3 Authority Key Identifier:
keyid:7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/M9j8Gov3p6DXKwgPqKCbPgRZrjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.106.0/24
Signature Algorithm: sha256WithRSAEncryption
72:40:9b:8f:db:d5:d4:fc:be:5a:36:d6:54:39:f2:27:25:3a:
a4:87:b8:75:b6:d4:9b:5a:1c:9f:c7:53:c6:ef:4b:ed:70:97:
59:c2:2b:44:d5:56:16:68:69:d6:a6:b8:0b:3a:9e:57:8c:b1:
08:63:05:2c:f3:cb:1d:ee:72:2a:b3:35:3d:23:69:bb:98:3a:
36:52:3b:44:d3:9f:7f:03:cd:4f:20:42:6e:99:93:a1:ba:a9:
8f:70:0d:f5:73:7c:d7:7c:b2:56:b4:7c:71:d2:91:d0:81:90:
1e:08:65:30:57:37:99:5e:1f:39:f8:08:43:ea:90:55:ca:53:
9d:e6:60:e8:f6:45:a2:61:01:56:a0:58:3c:0b:f2:cd:54:c3:
c0:b5:c4:10:12:84:ea:41:fd:0a:af:0e:a6:34:06:bf:90:15:
8c:ef:95:f6:6e:61:c3:ec:9b:31:4e:f7:95:ff:e7:07:4c:a7:
b1:56:45:8b:5f:8d:bd:75:ab:42:46:84:70:7b:9f:75:6e:96:
ce:eb:01:b0:4d:fe:db:e5:7d:01:1a:05:5c:96:07:c7:77:a0:
31:0a:af:72:86:ab:d0:7f:f4:20:04:92:1d:d4:5c:30:6c:3c:
48:74:1e:28:39:a3:b7:75:21:49:54:93:d1:c6:dd:8b:29:1d:
13:de:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:29 2024 by rpki-client on console.sobornost.net