Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/2GBxfYe7wnCiVLKWnZcdRmwq1B0.roa
File: 2GBxfYe7wnCiVLKWnZcdRmwq1B0.roa (raw, json)
Hash identifier: tYQIPQ2LqK3pEkWSVJTwNcduV25zVFIC8pkpR+DoVyM=
Subject key identifier: D8:60:71:7D:87:BB:C2:70:A2:54:B2:96:9D:97:1D:46:6C:2A:D4:1D
Certificate issuer: /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial: 018572C384542E1DA0873195937C24B0574A
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/2GBxfYe7wnCiVLKWnZcdRmwq1B0.roa
Signing time: Mon 02 Jan 2023 13:54:54 +0000
ROA not before: Mon 02 Jan 2023 13:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8758
IP address blocks: 193.247.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:84:54:2e:1d:a0:87:31:95:93:7c:24:b0:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Validity
Not Before: Jan 2 13:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d860717d87bbc270a254b2969d971d466c2ad41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:32:62:5d:3d:ba:5c:8a:59:af:b0:17:4a:
74:c1:8a:c6:aa:aa:9e:56:0a:e2:78:cf:69:dc:b4:
f8:d5:3a:b3:31:94:88:6f:cd:fa:51:47:64:70:2e:
75:c3:42:4e:76:cd:71:b6:9c:cc:e0:65:97:62:f5:
43:52:3e:c7:37:95:e2:e1:71:49:da:86:21:18:ff:
f3:d2:0c:70:d8:94:3b:ce:cd:a8:19:72:2b:bb:9d:
94:81:11:b7:2b:ad:61:49:16:14:51:64:fc:27:1a:
bb:5f:c5:8f:ed:8e:76:bc:c7:4e:71:e3:1f:76:03:
cb:c0:33:ca:64:be:3c:50:1a:43:60:e6:bb:c2:91:
5c:ec:c7:ca:43:34:c0:40:f0:28:e3:3e:64:e6:c0:
25:70:44:2b:03:86:36:80:38:05:cb:51:e0:61:50:
71:bb:c3:2e:64:19:d9:84:48:24:37:53:d8:26:17:
64:f1:d3:e3:53:12:4c:84:29:b4:ad:48:14:0c:51:
d6:3f:ab:ae:ed:be:ad:28:57:04:34:c7:37:ab:3a:
84:6e:a1:46:22:20:d7:ce:7f:20:b1:00:84:77:ab:
ad:02:ab:32:42:38:89:0d:c8:b2:98:80:fa:f0:a5:
0d:ef:d6:3a:41:28:56:f7:a9:15:9e:12:39:84:05:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:60:71:7D:87:BB:C2:70:A2:54:B2:96:9D:97:1D:46:6C:2A:D4:1D
X509v3 Authority Key Identifier:
keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/2GBxfYe7wnCiVLKWnZcdRmwq1B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:59:e3:34:9f:47:0c:60:ab:5b:62:86:db:c7:3e:43:8d:b8:
6b:85:8b:47:70:0c:9f:ec:7c:43:b3:96:ce:70:54:94:b6:65:
93:c7:23:18:00:d9:3b:9c:ed:34:9e:f2:0b:82:eb:e4:76:8d:
45:ae:41:95:23:6a:72:80:5d:7c:be:7d:52:b6:22:00:4f:b3:
b2:91:e4:2d:64:81:61:d6:ff:25:54:86:98:a1:c7:0f:fc:03:
7c:f5:45:9d:31:d3:a4:92:3e:81:62:a0:f6:0e:ac:99:3b:f9:
61:d8:54:be:2a:bd:59:00:df:f4:71:e3:ff:8f:36:c4:38:c2:
e0:f4:e6:8a:1d:d4:33:73:33:da:c9:37:bf:56:68:e4:c8:7f:
69:e4:3a:d2:ff:02:c8:f2:e2:a0:88:94:84:c8:1a:39:8f:50:
d9:89:a3:6c:83:bc:b5:51:57:db:03:cb:5d:d9:c9:02:8b:86:
bd:f6:0e:b9:f4:a0:db:4e:26:83:cf:65:7b:39:5d:de:d2:af:
53:39:47:ab:7e:05:55:f3:90:8d:60:36:f7:43:76:04:c4:35:
6e:02:cf:c9:fc:dd:85:da:c1:0e:85:4b:3e:b5:41:70:ab:93:
48:0c:29:45:46:39:e5:17:1c:94:e5:98:4c:df:8d:f0:77:40:
7c:2e:bd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:55 2024 by rpki-client on console.sobornost.net