Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/kDFez6L2ndBL0GkIX0F3aZSStow.roa
File: kDFez6L2ndBL0GkIX0F3aZSStow.roa (raw, json)
Hash identifier: 2Bz3Ui5vKHM9dbqagm9WyH05CWNtk4A5BmLX34xr1yA=
Subject key identifier: 90:31:5E:CF:A2:F6:9D:D0:4B:D0:69:08:5F:41:77:69:94:92:B6:8C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 01856F4B4697AD6824F18FDE5717076D0F74
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/kDFez6L2ndBL0GkIX0F3aZSStow.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33907
IP address blocks: 193.26.17.0/24 maxlen: 24
194.145.172.0/24 maxlen: 24
194.145.173.0/24 maxlen: 24
194.145.174.0/24 maxlen: 24
194.145.175.0/24 maxlen: 24
2001:67c:2968::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:46:97:ad:68:24:f1:8f:de:57:17:07:6d:0f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90315ecfa2f69dd04bd069085f4177699492b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:86:e7:08:4a:92:70:49:0d:61:d8:e3:cd:
b5:70:a8:39:0c:a6:31:bd:03:d2:cf:df:65:ba:13:
0d:c5:6b:a0:8c:ca:fe:ec:46:1f:30:0f:36:d2:0b:
94:3d:4c:e0:60:94:a3:73:83:6f:d5:4e:ef:40:3f:
46:b1:73:c2:cf:7a:53:68:dd:43:6c:28:9f:dc:40:
61:8d:dd:5c:ea:4a:fe:cd:33:2d:02:e1:40:79:e9:
0d:3a:13:71:52:d3:6d:90:2c:e8:f1:3f:09:9d:05:
ce:4f:81:27:2b:f8:06:55:32:3e:2d:f8:80:39:18:
e9:6d:b1:b3:de:66:9b:55:a6:aa:61:aa:e6:c6:97:
1f:2e:09:50:5a:3f:32:e6:d6:b4:2d:58:74:58:d4:
d5:c1:a9:66:ab:28:97:b5:38:b4:74:6d:82:96:37:
bc:c7:b5:16:a3:97:ec:20:64:b6:5c:6c:84:7e:3e:
12:b1:07:cb:a2:69:f2:d1:d7:e5:7c:45:45:af:d1:
3f:08:63:a5:91:3f:57:56:94:88:aa:62:47:56:ef:
60:37:44:2b:4f:ab:e3:ac:11:f8:24:64:7b:f8:b9:
f3:83:32:3e:e3:79:28:e3:96:ea:4f:86:0d:69:06:
14:0b:51:a9:ec:95:62:e7:f9:19:ef:df:24:51:83:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:31:5E:CF:A2:F6:9D:D0:4B:D0:69:08:5F:41:77:69:94:92:B6:8C
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/kDFez6L2ndBL0GkIX0F3aZSStow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.17.0/24
194.145.172.0/22
IPv6:
2001:67c:2968::/48
Signature Algorithm: sha256WithRSAEncryption
62:b0:11:e7:12:52:1b:f6:f8:80:cc:29:90:c7:5b:c4:4b:d1:
a4:d6:21:fa:ce:34:53:4e:7f:5b:7a:00:f9:15:0c:1b:80:e2:
4c:41:8a:39:62:ab:86:8d:8a:ed:74:5d:71:92:71:77:37:f5:
71:e3:14:ae:15:4d:5e:01:d5:cf:07:f6:1f:40:48:3c:1e:35:
77:e2:18:fd:43:33:f6:c1:ce:32:fa:cf:8c:60:ef:8d:82:e3:
02:c4:7f:a6:6c:d2:ac:7e:7b:71:cb:ca:fb:57:f3:a3:c4:44:
db:ba:df:e2:09:9a:b5:91:87:13:ae:79:58:e1:82:e5:a5:40:
40:55:65:b4:2f:61:3d:5d:89:f3:1c:fb:b3:d5:c0:8a:3c:fa:
4a:37:a8:f3:f9:2a:cd:44:f5:10:47:4c:08:d8:e1:c0:4c:b8:
ef:6b:81:39:3e:8e:94:51:8f:77:2c:d8:fc:30:57:d9:8f:8a:
08:23:91:dc:56:0b:6e:2a:e0:bd:14:f8:fb:e6:42:93:bd:1a:
29:a9:6f:98:33:94:2a:cb:38:7e:58:2c:91:dd:fc:68:97:86:
f8:23:09:d4:4f:e9:5a:2b:68:02:28:3c:9c:38:8d:82:c6:70:
f6:8c:1c:b1:d2:62:1c:04:24:86:85:47:ab:28:30:0c:73:39:
bd:11:81:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:32 2024 by rpki-client on console.sobornost.net