Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/flUsI73L06GVnleiXxLQ_7bU8iw.roa
File: flUsI73L06GVnleiXxLQ_7bU8iw.roa (raw, json)
Hash identifier: qh7Zjte7YDbhgzB2zZIFKqlAE6dFbk2ksUKN0aKJbKs=
Subject key identifier: 7E:55:2C:23:BD:CB:D3:A1:95:9E:57:A2:5F:12:D0:FF:B6:D4:F2:2C
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 0186E43951DCC49CAF3C0A7F201F33EE24CA
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/flUsI73L06GVnleiXxLQ_7bU8iw.roa
Signing time: Wed 15 Mar 2023 07:43:27 +0000
ROA not before: Wed 15 Mar 2023 07:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56971
IP address blocks: 194.116.214.0/24 maxlen: 32
194.36.171.0/24 maxlen: 32
194.36.208.0/24 maxlen: 32
2a13:7c00::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:39:51:dc:c4:9c:af:3c:0a:7f:20:1f:33:ee:24:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Mar 15 07:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e552c23bdcbd3a1959e57a25f12d0ffb6d4f22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:99:b3:02:ed:88:b0:74:0a:a5:2c:ea:66:
89:99:a3:fe:9b:91:68:20:91:3b:dc:21:df:fe:17:
12:57:5b:b5:c8:bf:76:3e:df:f7:6c:b8:75:1f:f0:
c7:56:3a:09:ce:17:49:ba:fa:40:e7:26:3d:08:60:
7c:f6:62:7d:3d:f3:99:a3:9e:79:6f:4e:5e:12:58:
d2:0a:d2:df:82:c0:d5:12:3b:8d:d9:7e:ac:47:68:
78:91:df:58:b5:0a:5b:95:2e:7e:4a:f1:33:fe:51:
03:9c:79:b5:aa:7b:4f:c4:1d:71:0b:06:ad:34:5a:
de:9d:4d:0e:2f:82:ec:c9:b4:2f:f9:7e:af:92:80:
cf:45:57:ee:ae:66:77:c5:c2:ce:76:a6:cb:cf:58:
12:5c:cd:17:e9:54:96:72:47:dc:d1:ee:19:12:22:
04:ee:53:22:f5:93:a5:72:c9:a5:ba:c9:a1:be:f5:
9e:3c:21:5c:0b:0e:2f:3f:87:3c:85:84:1d:b8:51:
36:d6:0d:52:bc:c2:ef:cd:6d:19:d5:09:84:f9:08:
9f:18:00:7e:0a:a7:40:a2:99:5c:46:56:3b:f8:f7:
13:4c:df:2e:9e:94:13:c8:59:04:47:25:33:fd:51:
60:84:71:65:3e:c8:83:ea:fd:be:95:a5:31:0b:76:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:55:2C:23:BD:CB:D3:A1:95:9E:57:A2:5F:12:D0:FF:B6:D4:F2:2C
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/flUsI73L06GVnleiXxLQ_7bU8iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.171.0/24
194.36.208.0/24
194.116.214.0/24
IPv6:
2a13:7c00::/32
Signature Algorithm: sha256WithRSAEncryption
80:15:99:59:f3:e3:bf:95:5f:30:c1:3c:41:54:ba:28:79:6e:
97:33:d1:0c:fd:fe:ec:a0:f0:e0:0f:8c:6a:b3:8a:6c:2d:5f:
cc:a5:af:21:d9:63:0e:49:b6:53:26:f1:f6:8b:ba:79:b3:2e:
29:f7:5c:2c:0e:40:4f:b3:5b:94:e7:2b:29:06:11:07:2f:81:
61:2a:d1:7c:ab:67:0b:ab:28:ae:1f:1a:36:42:f9:a5:bf:ca:
51:a1:7d:f3:44:d5:96:2a:18:44:13:e7:59:32:6f:88:e2:ae:
96:e7:2d:b6:e1:0e:ac:02:23:f4:09:87:86:d1:09:a4:c8:f2:
b4:aa:9c:a6:c5:3f:56:5d:cb:19:da:04:35:d2:3d:b7:bd:81:
fc:f7:69:4b:bc:17:9f:e4:0a:a8:98:12:60:da:ee:bb:62:3e:
c2:46:c4:0b:63:b1:70:89:4a:7c:a8:39:9c:ee:4b:d0:b7:80:
c8:25:59:81:b5:22:63:1c:8e:8b:93:61:f3:b6:f4:1f:84:d3:
ab:e2:06:92:46:e8:6a:6c:ed:b4:26:bd:82:46:d6:a3:a7:72:
d9:fc:43:0b:68:80:68:93:8a:e9:30:af:1a:b8:a9:9a:50:64:
b3:0f:53:ef:b6:7a:fb:4b:83:09:47:db:59:3a:2a:7c:46:36:
9a:11:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:57 2023 by rpki-client on console.sobornost.net