Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/xyuxyqeGjRm5sXR92MqZjBzb95Q.roa
File: xyuxyqeGjRm5sXR92MqZjBzb95Q.roa (raw, json)
Hash identifier: q7xoYAYhtLxJKd3e7H5SELZ4DOh0mAtI1zmkmgkNV7w=
Subject key identifier: C7:2B:B1:CA:A7:86:8D:19:B9:B1:74:7D:D8:CA:99:8C:1C:DB:F7:94
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 01887A435217EE2C4D5D34C410F62F39CFC7
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/xyuxyqeGjRm5sXR92MqZjBzb95Q.roa
Signing time: Fri 02 Jun 2023 04:00:12 +0000
ROA not before: Fri 02 Jun 2023 04:00:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207668
IP address blocks: 194.53.194.0/23 maxlen: 23
45.66.20.0/23 maxlen: 23
45.66.22.0/23 maxlen: 23
45.144.120.0/22 maxlen: 22
2a09:60c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:43:52:17:ee:2c:4d:5d:34:c4:10:f6:2f:39:cf:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Jun 2 04:00:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c72bb1caa7868d19b9b1747dd8ca998c1cdbf794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:2a:9e:dc:bb:fe:f6:09:24:75:9e:04:f4:
71:53:57:fe:fd:3c:d7:18:19:58:b4:6d:7e:41:73:
97:09:60:f0:fa:b6:5a:df:b5:33:f4:ef:d4:45:b9:
42:6f:e5:43:d9:31:81:28:8d:48:dd:e1:a5:56:e1:
fd:83:e5:a4:9b:b4:ee:01:39:2b:b8:0e:b2:fa:18:
c9:2b:7d:25:e0:22:45:f6:e6:f1:07:85:df:0f:c8:
3f:f2:5f:f4:3d:2b:56:eb:90:c8:6f:b0:49:af:6b:
33:8a:d7:96:cd:c8:d4:9d:8f:dc:99:01:8e:f8:87:
ff:61:22:59:0d:92:e7:ec:af:12:53:ab:1e:89:03:
69:8a:67:09:f3:40:f9:86:bb:b4:63:22:9a:4d:85:
76:f1:3d:02:6f:3c:4f:78:21:fd:7a:4d:58:92:e7:
4d:af:3b:6b:6a:15:ae:dc:04:d3:f4:a4:90:82:79:
b1:ff:82:d9:96:27:f9:6b:4a:5e:b1:c9:de:15:1e:
a9:33:e1:1c:19:46:31:62:05:41:9b:9a:d9:7c:42:
47:c3:ef:59:f8:1a:33:86:86:c4:c4:59:61:c3:d1:
c2:1a:7c:46:34:a8:42:8e:f4:32:e8:52:fe:c8:7c:
1d:c8:c6:c0:28:70:af:c4:c3:4a:bf:92:b1:52:01:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2B:B1:CA:A7:86:8D:19:B9:B1:74:7D:D8:CA:99:8C:1C:DB:F7:94
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/xyuxyqeGjRm5sXR92MqZjBzb95Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.20.0/22
45.144.120.0/22
194.53.194.0/23
IPv6:
2a09:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
c7:92:de:e2:11:82:6a:19:23:31:22:c2:7f:5a:4f:dc:df:55:
02:78:68:8a:b4:c4:29:b8:b1:ab:02:70:c8:93:e3:86:f8:cd:
f1:a8:3f:5e:1c:f8:5b:9d:43:02:31:6a:e9:28:cf:1f:a1:0e:
1c:4e:69:d2:0b:ff:63:a2:19:12:9d:8e:70:2a:2d:f3:5a:aa:
d2:19:4f:02:72:bf:d6:f3:47:13:57:f5:a1:51:b2:39:68:eb:
c7:b3:16:52:83:dd:66:81:72:fd:71:64:8f:ac:d0:05:e3:8c:
04:18:36:a3:dc:52:e2:77:42:ae:aa:5b:93:00:d0:51:ab:96:
4a:59:20:b6:ca:51:bb:63:ec:3f:ad:9f:43:05:71:cf:91:80:
96:b0:5c:10:c9:69:44:45:07:cb:af:0a:d6:63:b7:3e:84:ac:
1c:eb:d9:be:9f:12:85:e2:03:75:ee:70:3f:a6:d8:99:84:c4:
fe:10:44:51:14:a1:38:3a:d2:13:ab:54:91:20:2c:c6:d4:f4:
74:48:cb:7e:31:7a:bd:c8:7d:41:1f:82:00:8c:97:5b:29:6c:
2d:2a:2a:00:e1:dc:b3:45:39:74:cc:7a:6d:cf:63:13:c9:25:
6c:4d:f2:1f:bc:d5:aa:48:10:72:d0:82:3b:b1:28:e5:63:77:
cb:a7:23:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net