Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/kQXOdnESHgz2uTbr5RfVL8ggKvk.roa
File: kQXOdnESHgz2uTbr5RfVL8ggKvk.roa (raw, json)
Hash identifier: iWPlFLwJJaujmo+yqcS2XY0Z0csp+OklCa5pv9SzBLE=
Subject key identifier: 91:05:CE:76:71:12:1E:0C:F6:B9:36:EB:E5:17:D5:2F:C8:20:2A:F9
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 01856F54766BD48CBB50770F8FD2E399F855
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/kQXOdnESHgz2uTbr5RfVL8ggKvk.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199773
IP address blocks: 193.142.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:76:6b:d4:8c:bb:50:77:0f:8f:d2:e3:99:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9105ce7671121e0cf6b936ebe517d52fc8202af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:9f:26:40:b2:d7:86:cc:02:93:5e:e4:94:
6d:13:03:84:cb:12:6d:2b:80:30:00:44:8a:c4:df:
04:22:83:4e:6a:d8:5d:a0:62:f9:27:ff:c8:b9:80:
50:90:e9:62:52:4c:09:31:99:90:78:20:bf:06:96:
2c:45:4d:5e:59:0f:cf:e8:d1:24:74:df:b1:5a:7e:
84:23:da:97:6a:f0:54:8d:d1:17:d5:44:da:c7:8e:
c2:11:10:58:05:51:82:c2:44:f9:92:a2:df:f5:f6:
1f:ae:d2:0f:49:d9:e4:e1:1b:ba:ab:42:cc:29:e8:
74:f9:7f:c7:b7:a6:f0:6c:e4:1e:1c:dd:ba:d8:8a:
ae:e1:3b:e0:cc:bc:4e:40:ac:ec:7e:6f:99:0d:f0:
39:af:b8:cc:6e:6e:63:b7:e6:f6:eb:a8:19:b8:9c:
34:13:cd:5a:a5:49:9a:80:4d:63:6b:6b:02:16:67:
57:39:14:a2:fd:3d:ba:78:dc:c0:9f:8c:af:8b:b3:
dc:39:b5:ee:94:be:21:5d:0d:bd:6c:7a:51:0f:58:
c1:81:6a:9f:34:45:5e:4e:43:f2:90:e8:e1:5d:56:
28:1d:6b:c6:42:93:d6:5e:22:d3:3b:2c:97:87:a6:
3a:57:4b:13:c9:ba:10:09:d1:ed:b8:21:a1:63:52:
c8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:CE:76:71:12:1E:0C:F6:B9:36:EB:E5:17:D5:2F:C8:20:2A:F9
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/kQXOdnESHgz2uTbr5RfVL8ggKvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.211.0/24
Signature Algorithm: sha256WithRSAEncryption
81:39:33:d2:a5:c5:76:9c:b5:fd:da:2a:70:8d:3a:2d:64:ac:
f8:a8:bd:8a:a1:25:b4:4b:fd:e1:39:a6:f5:3e:d7:7b:ad:8d:
78:c5:b8:13:e3:55:a6:45:ff:15:d1:4b:64:34:b6:92:ae:a7:
b6:32:25:21:d5:9c:3b:a2:79:be:9e:2d:c5:dc:6e:33:e5:80:
b5:44:d9:bb:6d:3b:60:4b:e7:2a:46:69:6f:a0:6e:18:52:68:
6c:3b:2d:bb:db:da:90:b3:69:80:a7:dd:2f:df:1d:9a:42:6b:
dd:a9:93:1e:11:c5:76:48:54:d2:bb:a2:73:7a:83:ec:46:aa:
c4:c8:49:76:1d:34:fa:e8:e8:77:63:ae:55:54:f6:d8:c6:f4:
e5:b8:1a:e3:53:c0:4d:a4:96:59:2e:1e:80:b5:4f:a3:c0:71:
3a:2c:47:4f:43:5b:28:2c:cc:d3:7f:29:91:df:35:97:e7:4d:
39:c6:e1:52:01:20:af:30:8b:21:30:a3:f6:e5:1d:51:32:6c:
ab:69:2b:5d:bf:b5:ca:ac:f8:16:8a:b4:df:97:65:25:56:3e:
75:57:f1:30:39:2f:16:7a:ca:39:cf:90:84:76:17:aa:78:a2:
5a:db:0a:20:b1:eb:0d:24:61:67:3e:0a:75:6e:bf:72:a5:15:
4f:c6:e7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:06 2024 by rpki-client on console.sobornost.net