Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/ExJX69dOUGpgDFyQNCLr9nZiO_w.roa
File: ExJX69dOUGpgDFyQNCLr9nZiO_w.roa (raw, json)
Hash identifier: Xo87+ZiC1qc1oP4rqUbYDf8hNakTIuvXX8mJn6crf7M=
Subject key identifier: 13:12:57:EB:D7:4E:50:6A:60:0C:5C:90:34:22:EB:F6:76:62:3B:FC
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 018CC26D3E64D5B1035167885147E24FAC8A
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/ExJX69dOUGpgDFyQNCLr9nZiO_w.roa
Signing time: Mon 01 Jan 2024 00:29:48 +0000
ROA not before: Mon 01 Jan 2024 00:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44939
IP address blocks: 193.142.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3e:64:d5:b1:03:51:67:88:51:47:e2:4f:ac:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jan 1 00:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=131257ebd74e506a600c5c903422ebf676623bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:50:b2:32:ab:9d:be:a8:62:9f:c0:53:56:
cb:f9:4d:83:a9:48:a1:64:3a:12:05:17:76:59:fa:
2f:1e:b1:0b:5c:57:f8:3e:a6:de:b3:f6:55:a7:09:
c9:4b:f3:b2:b7:00:04:2b:c7:d4:ac:50:ba:f6:f8:
a2:ed:92:69:cd:c6:24:37:52:f6:12:64:18:7a:ad:
af:ba:d9:cc:0a:fe:8f:31:fc:75:31:98:ae:6f:86:
61:2c:1a:ae:3a:8b:7d:3d:24:05:e9:cd:0a:5d:f3:
32:d4:ea:ad:4e:e7:24:60:60:61:15:b7:4e:77:52:
1f:f6:9e:a1:00:a4:90:13:0f:fe:d4:f9:06:47:b3:
b8:a9:00:ea:4b:67:46:45:79:1f:61:c9:c9:c2:ca:
71:64:dd:a9:56:56:bb:a3:03:a5:5c:f3:a8:7e:fb:
7a:a6:ba:bf:93:27:8b:e3:15:ea:1b:a0:93:f1:5c:
69:c0:64:46:89:67:9d:bc:1a:ba:29:8d:19:32:07:
57:44:f8:c8:15:69:0e:6d:c8:82:17:d5:2a:24:dd:
a3:52:ee:2c:6a:86:36:7e:82:4a:1d:14:77:b6:1f:
bb:8f:4a:cb:de:34:fe:74:78:eb:7a:f2:49:73:35:
e3:0f:fa:9f:ca:22:00:58:1c:ae:29:d7:72:21:05:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:57:EB:D7:4E:50:6A:60:0C:5C:90:34:22:EB:F6:76:62:3B:FC
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/ExJX69dOUGpgDFyQNCLr9nZiO_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:88:a6:8d:3a:f3:f2:9e:9a:bd:94:1c:a6:30:79:e7:8e:cc:
04:60:a7:c7:7e:1a:aa:33:d3:14:ea:7c:3e:6d:96:a2:34:bf:
51:42:52:d6:77:3a:8b:c5:35:cd:dd:4c:1d:50:c7:f6:65:86:
94:8c:50:13:49:f2:d7:18:29:bd:73:31:1b:1d:61:4d:d0:fb:
00:2f:19:df:34:86:1e:be:c0:72:6c:08:f3:c3:24:ea:62:ef:
f5:77:dc:97:4d:55:52:b3:7e:51:5f:69:e6:15:bd:f9:47:3f:
74:cc:31:90:db:a1:d7:9e:a9:7c:cf:7e:85:03:34:27:15:9b:
82:9a:62:33:dd:41:7b:c6:ff:df:c4:5b:56:6a:14:2c:a1:cc:
f8:10:19:4e:91:82:ef:fc:96:49:28:cc:fb:8f:a6:54:f0:2f:
fd:4e:a6:9c:d7:cf:8d:d5:6d:cd:87:2e:7c:07:e4:b4:66:13:
ff:99:86:d4:a8:86:d6:f4:d5:bf:7a:09:22:72:55:e7:1e:84:
0c:30:a3:1c:cc:2a:fa:c6:6d:4f:30:cb:72:0f:17:f7:6c:19:
e2:60:23:a5:0e:57:81:25:15:14:1d:32:ea:80:33:44:4b:2f:
ab:ec:70:4e:23:d9:cf:86:54:61:9e:0f:00:06:42:4b:90:c3:
90:29:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 14:53:10 2024 by rpki-client on console.sobornost.net