Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/9RyVKYlUHNEBmcEW9OWyoOKcuEg.roa
File: 9RyVKYlUHNEBmcEW9OWyoOKcuEg.roa (raw, json)
Hash identifier: hxPjjEFqqW4rNrFCl/aFfwRvbwLbzY9MF2qaAf0vOLU=
Subject key identifier: F5:1C:95:29:89:54:1C:D1:01:99:C1:16:F4:E5:B2:A0:E2:9C:B8:48
Certificate issuer: /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial: 018570151BC2E429F3496019DC95FF623DF4
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/9RyVKYlUHNEBmcEW9OWyoOKcuEg.roa
Signing time: Mon 02 Jan 2023 01:25:09 +0000
ROA not before: Mon 02 Jan 2023 01:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20897
IP address blocks: 193.93.101.0/24 maxlen: 24
193.93.102.0/24 maxlen: 24
193.93.103.0/24 maxlen: 24
193.93.102.0/23 maxlen: 23
193.93.100.0/24 maxlen: 24
193.108.162.0/23 maxlen: 23
2001:67c:2380::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1b:c2:e4:29:f3:49:60:19:dc:95:ff:62:3d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
Validity
Not Before: Jan 2 01:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f51c952989541cd10199c116f4e5b2a0e29cb848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:66:5d:21:b4:be:e4:3f:d9:b5:a2:f6:af:
f5:ff:13:9d:0a:6e:a3:b3:cd:3a:e6:36:75:2c:4e:
7a:4b:62:07:10:60:cd:28:bd:93:e0:77:4b:29:44:
de:e4:c1:01:f8:15:cc:34:ad:de:6a:e0:19:a1:9d:
56:de:54:bf:d9:ac:f7:43:33:44:f5:d6:e7:cb:59:
e7:21:ea:c8:db:62:40:c4:91:f5:67:b2:4f:2c:99:
ec:57:e4:ac:62:64:37:f5:3b:43:12:90:a7:7f:08:
04:88:c2:eb:56:18:c1:b2:c8:57:6f:44:29:6f:0a:
49:cd:c3:0a:23:6b:5a:61:97:dc:e6:26:07:e7:67:
d7:8a:f2:a6:50:98:8e:68:1a:a3:b5:6e:07:b2:6b:
74:44:c7:66:c5:eb:35:fb:66:31:9a:19:ca:ad:94:
7f:a7:9c:ba:53:9f:1a:8b:b4:94:86:04:13:7c:7f:
a0:b4:ad:d2:31:92:e7:a9:42:a8:3e:b8:87:83:64:
69:df:1b:3d:81:60:83:31:80:a1:0d:24:6a:a0:5d:
d7:56:3b:3d:b2:e3:9f:78:55:b1:ce:e9:54:b1:8e:
ba:52:6c:84:bc:1e:00:67:88:37:6c:85:3c:65:05:
26:c0:5c:c8:db:85:d5:7d:b2:3e:79:d4:3b:8f:15:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:95:29:89:54:1C:D1:01:99:C1:16:F4:E5:B2:A0:E2:9C:B8:48
X509v3 Authority Key Identifier:
keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/9RyVKYlUHNEBmcEW9OWyoOKcuEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.100.0/22
193.108.162.0/23
IPv6:
2001:67c:2380::/48
Signature Algorithm: sha256WithRSAEncryption
38:ef:19:85:b3:58:6a:d0:7c:9c:6c:3c:4f:64:95:1c:72:1d:
48:50:64:a5:96:21:c0:70:f8:7d:04:fb:b4:7a:67:79:7f:27:
a6:ce:81:20:a2:5a:43:3b:68:6b:bc:50:12:b3:fa:fb:f7:53:
88:6a:8d:f8:22:49:d0:5e:a6:93:2c:5f:59:98:66:8f:33:c9:
0a:ad:2a:95:1e:6a:b9:18:0f:e7:51:f0:55:53:c2:33:fe:cd:
98:b8:71:3c:c5:25:9d:04:0a:57:2e:f2:0c:78:b1:da:ae:6d:
1b:87:6d:a8:c6:58:1e:a9:d3:a9:e5:b7:f1:36:58:90:21:99:
c8:b4:d2:64:5b:f6:55:9d:79:16:40:79:42:21:b9:1e:be:35:
ce:de:26:78:d2:b0:d1:95:c5:e8:d8:3c:e3:51:02:ff:d4:79:
29:d7:e1:45:34:00:d7:c4:58:a0:13:81:51:20:4b:f1:37:55:
45:85:fc:7b:7e:f4:ad:9e:3e:d9:5a:32:8a:2b:99:58:1b:79:
5e:bc:4f:17:5a:fc:6e:73:3b:a5:80:04:54:71:e1:ff:ea:57:
9c:60:f2:61:6f:ec:3c:05:f3:5d:82:46:fd:a4:7e:53:74:b6:
73:e6:c5:a1:44:0a:d7:46:66:ba:8e:33:43:9e:75:93:e9:9a:
5c:ef:71:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net