Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/ogPXODx3Y3IDKDikJET28oUGoas.roa
File: ogPXODx3Y3IDKDikJET28oUGoas.roa (raw, json)
Hash identifier: h4EYZ3bWZZ3ArIhy6hOaeKVkxtCyVFglRL0jw/KIXj0=
Subject key identifier: A2:03:D7:38:3C:77:63:72:03:28:38:A4:24:44:F6:F2:85:06:A1:AB
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 01856F949FDAADD7423E1F53D608AF5C7B9B
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/ogPXODx3Y3IDKDikJET28oUGoas.roa
Signing time: Sun 01 Jan 2023 23:04:49 +0000
ROA not before: Sun 01 Jan 2023 23:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56791
IP address blocks: 185.134.122.0/23 maxlen: 32
185.134.121.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9f:da:ad:d7:42:3e:1f:53:d6:08:af:5c:7b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Jan 1 23:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a203d7383c776372032838a42444f6f28506a1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:53:2f:dd:46:1b:c3:bb:44:13:c0:47:2d:37:
a9:a0:53:0e:96:24:aa:d3:6d:b4:f3:1e:91:98:01:
e0:ac:b6:c9:9f:ae:73:2b:0a:ac:5b:b4:d1:4a:73:
05:df:0f:37:53:59:fc:f5:f1:13:33:11:5b:b2:68:
e3:be:a3:e2:0f:22:bd:57:54:79:fd:cd:be:95:64:
1a:9c:3e:bf:ab:75:98:c5:c3:8b:da:64:24:d6:e1:
bd:cd:07:fd:5c:3b:f7:45:b2:30:d4:61:c7:56:b8:
25:b3:7d:04:c5:79:a9:06:c2:9d:bb:a4:25:39:c1:
3e:24:5e:e0:60:b0:55:42:60:3f:00:33:c1:ff:6c:
f9:a6:21:a9:d0:3d:03:6b:68:bb:44:89:d9:ce:85:
ec:5c:ac:67:a0:f9:60:13:1e:ae:95:36:a1:db:71:
71:4b:ea:8f:d9:1b:1b:20:46:4c:2a:2f:fe:a1:3b:
9f:e7:96:ac:ba:b9:71:fc:a9:9e:df:bb:48:9a:6f:
20:73:6a:c3:f3:fb:82:b9:25:08:af:0c:6a:5e:47:
38:b8:5d:e4:1a:38:d9:5c:16:0e:53:f7:d8:6f:85:
11:89:85:5e:a8:e2:bf:1a:2a:a4:55:4e:b9:d4:ee:
8e:f8:42:1f:02:d5:1c:e4:13:58:d1:81:8e:5b:64:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:D7:38:3C:77:63:72:03:28:38:A4:24:44:F6:F2:85:06:A1:AB
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/ogPXODx3Y3IDKDikJET28oUGoas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.121.0-185.134.123.255
Signature Algorithm: sha256WithRSAEncryption
21:11:9a:56:fc:ca:d1:20:08:31:1b:35:c7:bf:a0:ab:12:a3:
04:c7:de:5a:6a:92:92:7b:a4:2e:7e:01:dd:d8:19:e7:53:ea:
65:fb:53:e0:6c:df:79:8b:a7:2b:5a:0e:26:ce:21:ef:55:6b:
a9:c7:8f:f8:fd:73:ef:0e:f4:8e:22:e8:3c:3f:26:31:6b:1b:
ea:24:67:8e:bb:28:4b:22:40:b7:4e:05:a3:87:41:02:f7:6c:
9a:bb:35:bd:ad:df:84:33:c5:84:64:fb:a5:fd:e4:33:91:6d:
3b:a1:c3:84:03:55:36:ba:00:bf:97:b6:45:bc:35:16:e6:52:
32:b4:fc:35:ad:5b:9d:76:8e:74:07:e8:be:71:ca:2b:e7:cf:
0e:c0:ec:b0:12:a9:ac:eb:dd:48:3d:2b:97:3e:39:8a:b5:b3:
3c:e1:4b:e4:b7:7b:69:7d:fb:e8:cc:85:e9:f3:97:1b:6a:45:
49:cd:c6:3a:96:53:e4:2f:db:bc:32:96:04:76:3d:70:64:d7:
a8:ec:ba:98:73:d1:fc:44:8e:dc:b1:fc:61:53:e4:79:c0:41:
0c:ce:f6:05:02:59:1e:7f:ca:3e:58:10:36:0f:73:84:30:9f:
ed:05:77:33:12:b5:66:2c:6e:b9:69:28:8b:6a:9b:c1:35:18:
d0:18:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:59 2024 by rpki-client on console.sobornost.net