Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/S4Vx0Mqmm1LXFSKP2V2fNssvLc0.roa
File: S4Vx0Mqmm1LXFSKP2V2fNssvLc0.roa (raw, json)
Hash identifier: k6ibXqZ/SbmDzmJh6ySHXSrc4biGrt2YgXy++e68Baw=
Subject key identifier: 4B:85:71:D0:CA:A6:9B:52:D7:15:22:8F:D9:5D:9F:36:CB:2F:2D:CD
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 018571F9FDB8E1C1B4C3AEF8E0B14D259DC2
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/S4Vx0Mqmm1LXFSKP2V2fNssvLc0.roa
Signing time: Mon 02 Jan 2023 10:14:46 +0000
ROA not before: Mon 02 Jan 2023 10:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51270
IP address blocks: 194.149.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:fd:b8:e1:c1:b4:c3:ae:f8:e0:b1:4d:25:9d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Jan 2 10:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b8571d0caa69b52d715228fd95d9f36cb2f2dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:57:32:80:ed:9f:6a:91:94:6a:fa:bc:44:
6a:e9:65:5c:f9:0b:21:68:fe:80:82:1f:85:dd:bb:
00:f6:b1:29:c3:aa:ad:c4:b9:ed:55:81:91:cf:9e:
af:8e:74:e3:3d:3b:5a:dc:63:d1:01:14:56:66:8e:
68:01:99:21:13:ea:a5:95:48:d5:68:9f:56:3e:65:
b8:64:0f:e2:48:ca:36:85:2a:6c:e2:d1:14:07:b1:
dc:74:a8:0e:fe:fe:57:d2:1a:eb:31:0e:cb:78:7d:
f6:dc:f3:36:f6:6e:3b:91:6a:e2:a0:10:9f:36:b4:
10:f6:b4:5e:61:f2:f9:d5:3d:d4:09:ec:9f:c2:2c:
f2:dc:3a:49:4c:1f:82:78:37:00:64:a5:79:cb:79:
0c:f2:5b:a6:66:66:87:ec:66:08:f1:09:70:f1:44:
c6:44:dd:03:73:44:18:85:90:14:19:34:e0:76:04:
0f:ee:47:ce:66:a3:8c:85:35:b7:48:59:53:1c:fe:
60:ed:ef:ee:82:b9:c1:1b:18:0f:e4:ca:f3:38:6a:
ff:17:95:f2:b1:a7:7a:8f:c7:54:8d:87:1a:a7:5f:
a9:82:0b:ed:5d:d8:ee:19:50:f1:27:cc:4c:45:e4:
24:a1:25:9c:b8:6e:c2:97:32:e4:28:d8:83:f2:f3:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:71:D0:CA:A6:9B:52:D7:15:22:8F:D9:5D:9F:36:CB:2F:2D:CD
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/S4Vx0Mqmm1LXFSKP2V2fNssvLc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5d:ed:8f:9d:14:13:d5:e4:b2:37:15:f8:eb:46:60:b5:12:
93:0e:e9:1d:4a:c6:be:68:73:9b:2c:7b:54:8b:97:35:9c:86:
58:71:49:39:e8:68:21:5f:b0:2b:33:37:cd:73:e5:7e:b4:b7:
4a:9e:d3:86:8b:a6:dc:1c:80:a2:66:56:59:18:38:3d:94:ab:
23:bd:59:ee:5f:01:b0:59:0f:21:cf:06:9d:fe:cc:da:72:bf:
b7:35:44:55:21:3b:22:46:58:52:d2:fb:2a:91:a2:de:9e:ac:
6f:2a:b2:fe:4c:a0:85:70:d1:ac:87:d1:c9:a0:cd:ba:54:e7:
6c:66:ab:35:5f:f4:ca:4a:bb:b6:4f:74:ed:df:1b:a1:12:23:
9e:1e:21:55:8c:f6:9a:98:e0:7d:12:a6:b0:11:57:74:17:76:
72:88:42:f9:97:a5:3b:31:27:df:64:89:91:de:c2:fe:93:d3:
1a:7c:6c:ad:f3:90:44:e6:83:4a:25:10:9f:91:14:9a:ab:f9:
71:3f:27:a3:bf:91:59:d2:6e:7f:46:ff:8b:12:b3:78:93:85:
dd:0c:89:6b:0e:1b:99:55:d3:bc:e2:55:4d:96:fa:71:db:e9:
06:cf:7b:7f:ef:c0:74:2d:dd:08:40:8f:a7:f9:6e:0a:db:8a:
2d:80:9f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:36 2024 by rpki-client on console.sobornost.net