Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/fghvaFPEF3C17G0Twc0lt1y81KA.roa
File: fghvaFPEF3C17G0Twc0lt1y81KA.roa (raw, json)
Hash identifier: mOH0MKdfb8Uv3bp99cpvHw0yoaVPX2Y4c4CBJv4Tf84=
Subject key identifier: 7E:08:6F:68:53:C4:17:70:B5:EC:6D:13:C1:CD:25:B7:5C:BC:D4:A0
Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Certificate serial: 0189F42B7AAF60A58DD8488E7ED78C243094
Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/fghvaFPEF3C17G0Twc0lt1y81KA.roa
Signing time: Mon 14 Aug 2023 13:10:37 +0000
ROA not before: Mon 14 Aug 2023 13:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12703
IP address blocks: 185.71.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:2b:7a:af:60:a5:8d:d8:48:8e:7e:d7:8c:24:30:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a
Validity
Not Before: Aug 14 13:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e086f6853c41770b5ec6d13c1cd25b75cbcd4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:2f:3d:87:bc:59:1a:4d:a1:54:1b:fc:bd:
46:c3:38:e7:4a:82:ea:ae:6e:c2:69:03:7b:e0:c9:
12:5e:98:9a:28:86:20:44:6c:8e:64:c4:4d:e3:5d:
7e:ca:c4:61:f7:1c:8b:c6:ba:66:cf:34:ae:81:3f:
4b:35:53:9c:58:06:1d:ec:e6:0e:52:c9:32:50:01:
d7:e4:c2:70:29:13:3f:09:91:56:14:e4:e9:57:9e:
3c:44:58:46:4a:0c:ed:4e:de:fb:62:fd:e5:30:40:
cc:21:04:7e:8c:28:b1:7f:4d:46:37:e5:26:45:1f:
bf:8b:fb:1a:c8:23:7b:e3:fc:3d:b8:1e:f9:30:db:
7a:59:5f:05:fa:f8:b7:fd:1e:18:32:af:f2:35:46:
0b:45:1c:c3:ee:51:f5:4a:a6:5e:d6:e3:37:b6:a7:
df:33:21:f0:c1:45:a5:5a:df:53:e7:fe:bc:94:d9:
c6:b1:1f:cc:00:d2:a7:7d:8c:6f:75:0b:05:21:ce:
16:2a:db:05:6a:41:47:f0:4e:df:f6:bd:d5:34:44:
0b:ed:c9:5f:1c:27:be:8c:14:38:8c:ab:78:59:79:
f9:6a:d0:79:14:58:9e:94:b0:d9:d7:2d:92:ed:af:
85:a7:50:40:fc:55:b2:29:ee:fb:4f:f0:17:bc:91:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:08:6F:68:53:C4:17:70:B5:EC:6D:13:C1:CD:25:B7:5C:BC:D4:A0
X509v3 Authority Key Identifier:
keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/fghvaFPEF3C17G0Twc0lt1y81KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.100.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:44:44:e7:db:f3:2b:27:c9:8a:eb:1b:5a:2c:fc:95:64:5a:
c4:25:96:a0:e3:30:b4:06:fd:2a:43:e9:26:e5:fe:68:0e:1a:
d9:09:61:9c:67:7a:02:05:09:71:28:59:70:86:fc:5b:85:7d:
0f:ea:ed:cf:d5:21:e8:c5:2a:11:b1:cd:2b:7a:84:3f:7c:7f:
a2:d2:18:41:94:89:a7:c1:78:a2:4a:ed:27:27:ac:d4:31:24:
07:6b:f8:a9:dc:7a:ae:df:a1:63:e4:98:fa:6f:06:03:37:a6:
46:0f:b2:61:c0:bc:86:61:bc:69:70:3a:1d:0d:73:2b:4d:fe:
75:3e:ef:f5:d4:96:f3:92:de:c8:dc:19:90:7f:c9:fa:b2:f0:
1d:ed:c2:aa:2b:a6:76:cf:c1:1b:fc:cb:b1:97:b1:a1:a0:8f:
28:50:16:b0:9e:c8:3d:9f:92:63:5e:db:16:e7:15:e0:ab:f2:
30:d2:6b:66:41:f1:67:f3:33:49:84:ac:7d:08:38:c4:10:72:
bb:e1:ff:3a:73:8c:03:8c:c0:c1:f2:cb:0d:80:ca:41:57:a0:
e9:99:72:ac:53:cd:93:6a:6e:28:27:4e:b4:f5:db:86:34:15:
ca:76:bf:7e:1c:23:03:2e:38:37:6f:fa:f4:00:31:ad:74:57:
e3:4d:07:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:29 2024 by rpki-client on console.sobornost.net