Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/ifaURkcxs697LvjDyMfqqnaB-GE.roa
File: ifaURkcxs697LvjDyMfqqnaB-GE.roa (raw, json)
Hash identifier: JFwosCqRa2DqFMzJN1A1zA/edJNhVQXN61HOJHzNhH8=
Subject key identifier: 89:F6:94:46:47:31:B3:AF:7B:2E:F8:C3:C8:C7:EA:AA:76:81:F8:61
Certificate issuer: /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial: 01894F9809FA186327A54720FA7B692ACF11
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/ifaURkcxs697LvjDyMfqqnaB-GE.roa
Signing time: Thu 13 Jul 2023 14:11:51 +0000
ROA not before: Thu 13 Jul 2023 14:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23393
IP address blocks: 178.255.80.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:98:09:fa:18:63:27:a5:47:20:fa:7b:69:2a:cf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Validity
Not Before: Jul 13 14:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89f694464731b3af7b2ef8c3c8c7eaaa7681f861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:e0:74:fb:6f:66:1f:56:4f:5c:59:ab:2b:
a3:b0:98:91:00:30:c8:70:33:e9:9e:bb:8f:aa:95:
56:e2:f6:b7:a3:64:bd:4d:f3:f7:8e:89:34:e3:d8:
b5:58:da:b8:18:e0:ce:e0:7f:37:af:09:d9:9d:97:
be:ae:9f:6d:df:d8:14:43:17:57:94:a0:1c:cc:f1:
bb:f0:55:24:c1:31:d4:8b:94:ab:21:a5:fb:aa:97:
3c:c4:3f:26:59:17:64:30:79:da:42:27:38:ad:7d:
5b:47:14:b2:88:ed:76:23:71:92:d3:9f:19:49:3f:
fe:73:a0:54:5e:40:55:55:94:67:d2:7d:9f:27:1c:
d4:f2:83:f0:12:c8:58:02:ca:43:3a:d8:cc:a6:85:
4a:63:e2:4f:4b:42:bb:10:d8:a8:dc:24:31:c6:c0:
cf:53:14:30:c3:4c:89:b4:69:5a:83:66:fb:01:e1:
17:e8:ab:94:93:fa:9b:47:bf:71:4c:e4:0d:a8:f3:
90:9c:1e:05:ac:7b:10:1d:99:62:e7:43:e0:9e:2a:
ce:99:ac:27:57:c4:61:86:5a:e5:90:eb:0a:bb:ee:
84:c0:56:39:98:29:3e:cc:67:a0:2d:4c:a1:4e:1d:
79:4d:78:f4:26:11:da:ec:2f:6e:f0:69:0d:29:44:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:94:46:47:31:B3:AF:7B:2E:F8:C3:C8:C7:EA:AA:76:81:F8:61
X509v3 Authority Key Identifier:
keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/ifaURkcxs697LvjDyMfqqnaB-GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.80.0/21
Signature Algorithm: sha256WithRSAEncryption
19:35:cc:f5:61:02:85:e5:f1:4b:21:bd:d5:e4:be:3b:20:d2:
c3:12:15:ec:f9:71:36:f6:4c:ba:96:8b:d4:8b:e4:03:80:ea:
9a:51:53:ec:7a:4e:66:28:72:bb:fe:60:f2:1a:b6:67:e8:ca:
28:13:ff:3e:3a:68:0e:ae:62:8e:46:de:8f:00:0e:46:53:cd:
3b:bc:1d:42:2a:5e:a3:e8:9e:ed:f8:33:36:d2:d9:c2:bc:96:
54:6e:3d:94:60:54:38:a8:ac:df:91:c9:7a:a9:f8:44:1d:b6:
4c:76:16:94:3b:b2:06:e6:f6:c7:48:2b:bf:d0:50:d7:32:7e:
96:2b:c7:9e:b4:03:49:d7:6f:9a:06:09:b6:b3:fe:4b:5f:75:
7e:63:31:c2:8a:6a:01:17:83:a0:b1:1f:86:87:7e:c9:bb:7a:
cd:10:7b:cc:b3:0b:58:55:9c:08:4f:07:45:c2:44:0a:0d:76:
8f:29:50:c6:1a:73:b4:e4:1e:e8:16:ac:77:d3:1d:d7:d3:83:
56:28:15:c0:82:5f:cf:16:ba:93:be:0f:b6:c7:79:31:a4:bf:
3c:be:0f:b4:2e:6f:0d:d1:8c:09:42:c2:c9:9f:ad:23:99:34:
7f:38:46:a8:70:cd:e2:e5:b4:79:46:7c:e9:8b:9c:fa:f1:59:
79:70:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net