Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/qcISJP6O4gwFU2uA3qqHXtu__RU.roa
File: qcISJP6O4gwFU2uA3qqHXtu__RU.roa (raw, json)
Hash identifier: 2B60pyUQXRTm8paUAqTMaiHnVMVScLmcPZclShJDmAc=
Subject key identifier: A9:C2:12:24:FE:8E:E2:0C:05:53:6B:80:DE:AA:87:5E:DB:BF:FD:15
Certificate issuer: /CN=f97a546b66e2449ce628432dd80ad6d4d00cd03e
Certificate serial: 018570F0AF92318703A29562A7D5C0D30220
Authority key identifier: F9:7A:54:6B:66:E2:44:9C:E6:28:43:2D:D8:0A:D6:D4:D0:0C:D0:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/qcISJP6O4gwFU2uA3qqHXtu__RU.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 195.206.243.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:af:92:31:87:03:a2:95:62:a7:d5:c0:d3:02:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97a546b66e2449ce628432dd80ad6d4d00cd03e
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9c21224fe8ee20c05536b80deaa875edbbffd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:6d:0b:79:b5:de:c5:d2:b6:a3:5c:26:ce:
d7:28:0a:fd:92:14:08:84:0a:e7:ff:f1:6e:29:07:
23:f4:8b:59:09:e4:45:43:6a:ad:e4:13:f6:39:af:
a0:52:4b:85:0e:ce:e2:6a:f0:74:98:46:eb:7e:ac:
42:ea:a4:10:77:78:45:7b:fb:d1:8d:f4:ae:69:dc:
cd:d1:2f:11:01:2c:24:d6:30:7f:9d:d2:e1:ad:1f:
fb:e6:43:4c:95:78:14:88:15:29:dc:a7:93:13:96:
37:4b:4a:f9:d6:1e:92:8e:70:e5:80:8e:0f:38:6f:
aa:cf:39:bf:77:45:14:96:cb:e5:d3:ff:2d:65:7c:
28:5f:66:24:c3:d0:ef:c9:2c:dd:a0:8c:50:a9:6c:
b8:d7:58:68:b2:d2:8a:2f:5b:7b:da:6f:5b:52:f6:
2a:b0:20:dd:93:e6:55:5d:7f:ad:d7:ce:5d:8d:4a:
75:41:71:bc:a2:14:03:c5:24:b6:24:ad:80:60:08:
a4:c9:db:43:35:f8:9a:7e:7d:90:5f:ce:a5:c4:cf:
1d:2a:7e:49:c7:81:da:b4:79:8a:f0:95:65:e8:82:
cc:a0:13:c6:ca:a3:4b:15:69:6a:a3:20:03:b2:41:
3f:42:f6:35:39:85:54:16:03:bb:e9:2a:16:bb:7a:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:12:24:FE:8E:E2:0C:05:53:6B:80:DE:AA:87:5E:DB:BF:FD:15
X509v3 Authority Key Identifier:
keyid:F9:7A:54:6B:66:E2:44:9C:E6:28:43:2D:D8:0A:D6:D4:D0:0C:D0:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/qcISJP6O4gwFU2uA3qqHXtu__RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c1:59:1f:c8:bf:1b:f8:a5:ad:fc:d9:39:6d:53:9a:f6:ee:
38:24:32:40:70:88:e9:88:66:3e:1b:1d:ab:f0:66:1c:91:1d:
9c:f7:f8:fc:5f:57:a8:14:af:0f:62:52:19:c0:1f:87:6b:9c:
1e:a3:5d:62:e4:25:23:85:9e:37:1b:07:8c:aa:ea:cf:6c:40:
01:ba:84:b6:b0:d3:e1:0b:a5:31:b5:63:f2:79:60:33:8c:69:
bd:bf:ce:e0:62:bb:fd:61:06:3c:69:be:03:41:2e:e2:51:78:
26:ef:7c:95:c0:16:78:26:05:b6:27:6e:4f:4f:fa:fa:8d:1d:
f5:fc:9c:f3:c7:33:6a:04:2b:fa:9b:3d:1c:e6:07:7f:73:64:
f3:8c:b6:ec:9d:b8:66:2f:fd:6c:4a:bc:82:f4:2b:5d:da:79:
65:2e:2c:1c:14:20:c3:70:3f:f5:4c:31:c6:91:21:e3:6a:23:
40:4a:b8:85:44:24:c8:95:24:1e:24:f9:05:29:95:f3:e3:ce:
62:54:89:72:52:82:63:a6:4f:12:30:b6:14:41:08:d7:73:bb:
bb:84:c3:56:b9:e4:a7:49:ec:4e:b2:f3:aa:5d:c0:3a:15:95:
12:e2:cb:ec:ff:03:28:9c:67:8e:6e:da:4b:2f:45:6c:6f:d7:
1d:ea:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:50 2024 by rpki-client on console-ams.rpki-client.org