Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/excu-e5bi41jlA3p5XXEydrxNt4.roa
File: excu-e5bi41jlA3p5XXEydrxNt4.roa (raw, json)
Hash identifier: P/CCKdvOgBQy75/cxDlnuSRm89t+qIWFDmq2GT+pKYA=
Subject key identifier: 7B:17:2E:F9:EE:5B:8B:8D:63:94:0D:E9:E5:75:C4:C9:DA:F1:36:DE
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 01856F5477482868E14AC5005192442C3A62
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/excu-e5bi41jlA3p5XXEydrxNt4.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207035
IP address blocks: 193.161.30.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:77:48:28:68:e1:4a:c5:00:51:92:44:2c:3a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b172ef9ee5b8b8d63940de9e575c4c9daf136de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:22:ca:7c:0c:6b:60:c5:5c:61:d5:fe:07:91:
f4:be:5b:b5:95:63:4a:cd:89:34:a3:42:af:bc:0c:
15:33:f8:53:4a:3b:10:02:95:5f:d4:50:84:ec:d7:
e8:d5:87:27:57:ea:f8:23:30:ac:58:9b:25:9a:2b:
d6:f3:b2:36:ac:71:3c:5d:94:35:95:b2:f4:4e:52:
59:7a:4f:8f:ad:15:62:b0:41:de:25:0b:dc:49:6d:
a1:7b:9f:b0:df:dd:5a:ba:8f:09:62:d8:b0:4f:85:
8f:96:9f:f2:29:40:50:6f:85:be:85:df:66:3a:cf:
c2:86:5c:21:41:5d:4b:14:89:71:f9:19:03:5c:07:
65:62:ae:c8:f6:db:af:70:e0:1d:a7:d1:fa:ef:3e:
71:15:df:48:d6:3d:79:dd:d7:d8:93:3f:05:f4:03:
59:62:78:ee:cc:46:9e:89:9e:37:9d:b0:0e:0d:2a:
3f:da:a1:8e:45:46:10:d3:00:94:07:68:65:04:1c:
a6:d8:d9:3d:45:00:ac:76:85:75:57:f4:27:0d:92:
a1:b9:04:03:d8:af:74:0b:11:60:a8:93:69:f5:ba:
c3:7f:9d:93:27:1e:27:de:63:8d:79:e4:06:47:3b:
bf:97:12:f2:f9:21:99:42:b1:61:12:0b:08:83:c6:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:2E:F9:EE:5B:8B:8D:63:94:0D:E9:E5:75:C4:C9:DA:F1:36:DE
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/excu-e5bi41jlA3p5XXEydrxNt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.30.0/23
Signature Algorithm: sha256WithRSAEncryption
80:9f:e7:20:64:a4:ad:33:51:e0:54:86:9f:3b:3e:84:a7:0c:
57:dc:63:8e:af:59:7a:1d:16:bb:6a:00:63:47:a6:ec:1a:77:
33:ba:da:11:93:f7:23:b9:94:a4:de:91:bb:40:a1:05:bc:13:
f9:b3:6f:39:d7:ef:11:39:48:1c:19:8a:d0:34:71:ab:24:b6:
2d:b9:88:2c:73:ea:c3:7a:74:41:d8:02:d3:cc:47:66:65:3c:
29:bd:5b:1a:1a:b3:78:2e:d8:e7:fe:0b:ef:8a:31:d8:74:30:
99:9a:68:51:7e:55:eb:41:b7:8b:a2:a9:97:2c:6c:bf:13:23:
15:a9:77:a6:a3:53:8d:44:14:16:01:ab:3e:2b:44:eb:ea:15:
27:6c:13:10:fc:2d:c1:11:f0:f1:78:b4:12:44:f9:41:28:6d:
9c:18:22:fb:de:64:21:89:7d:94:48:3d:2a:d8:5f:70:f6:2f:
de:55:79:aa:ac:71:8a:94:1c:de:8d:25:88:82:10:97:2a:a9:
6b:d8:d7:a3:5a:7d:e6:79:df:1a:8e:77:f7:bb:c7:3e:a8:2b:
7e:21:45:e3:8c:26:c3:57:24:15:89:f0:69:1f:20:a8:95:a3:
4d:6c:ed:f8:ae:d8:18:e6:15:0e:a4:e4:32:d8:cc:5f:05:de:
67:51:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:06 2024 by rpki-client on console.sobornost.net