Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/u0xxSftNQ3AbSiAduwHhr_5m94Y.roa
File: u0xxSftNQ3AbSiAduwHhr_5m94Y.roa (raw, json)
Hash identifier: bV1aoxvoCCVog24UmGSCz2gKrJ2SNFssyIrfqU+K0yc=
Subject key identifier: BB:4C:71:49:FB:4D:43:70:1B:4A:20:1D:BB:01:E1:AF:FE:66:F7:86
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 0185723110FA1B380D4355428826611DC130
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/u0xxSftNQ3AbSiAduwHhr_5m94Y.roa
Signing time: Mon 02 Jan 2023 11:14:56 +0000
ROA not before: Mon 02 Jan 2023 11:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198470
IP address blocks: 91.235.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:10:fa:1b:38:0d:43:55:42:88:26:61:1d:c1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Jan 2 11:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb4c7149fb4d43701b4a201dbb01e1affe66f786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:57:5c:79:61:1f:d6:57:61:7c:70:fa:cd:
51:69:8f:1d:73:ec:3f:ee:fb:03:d2:68:e2:40:43:
bf:c5:f5:5f:3c:99:db:d7:10:aa:fa:c4:8d:52:8e:
a6:17:6f:54:b4:a6:df:34:1d:6d:14:fc:1c:0f:f0:
22:76:cc:61:aa:31:5a:9d:ad:93:3c:ad:bc:2c:9f:
78:ac:39:2a:f6:0b:1a:03:fe:ef:86:07:2f:8b:b2:
2a:4c:a6:c9:89:dd:62:1c:a2:8a:ff:c2:5a:df:25:
8c:f5:63:7e:a5:1f:94:42:6e:18:5d:02:59:0a:37:
42:f1:61:81:17:79:6b:a1:a6:fa:ed:09:a8:43:ea:
4d:6d:be:c7:71:5d:80:e4:b8:0a:2e:5f:3d:e4:6f:
79:07:ad:b0:a4:17:0e:65:27:45:b7:c7:63:e4:42:
88:c2:b1:c7:c7:07:27:5d:5e:00:60:99:40:20:76:
50:30:eb:f9:2a:6e:55:80:28:ff:7c:bb:9a:af:05:
b5:e4:41:61:25:54:8e:0e:14:40:1d:55:7b:1d:a8:
4d:b5:e0:89:1a:7a:49:a3:ba:8b:a0:d9:69:bb:55:
db:ef:74:89:d8:39:4d:f1:e2:f3:70:95:eb:ce:30:
53:6b:61:f6:69:a6:2f:43:19:92:54:27:95:35:44:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4C:71:49:FB:4D:43:70:1B:4A:20:1D:BB:01:E1:AF:FE:66:F7:86
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/u0xxSftNQ3AbSiAduwHhr_5m94Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.82.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7b:0c:e3:8b:6f:b6:a7:e5:5e:cc:da:d3:d0:09:03:82:ab:
fc:93:94:37:ae:0f:78:28:65:ba:d1:cc:a9:e3:5c:64:c1:aa:
44:74:46:9f:a9:d9:b8:ed:e7:d6:cf:38:fb:ce:eb:62:ee:75:
8f:95:60:01:39:da:37:ac:42:d1:08:d0:b1:b9:c0:bb:27:d1:
ea:db:b2:9c:3b:b1:43:ed:c5:ae:cb:a9:7a:9c:23:b6:04:aa:
34:db:bf:8f:2c:ee:94:2d:56:cc:30:be:6b:0f:49:a7:65:99:
3d:29:1f:65:7e:5e:51:62:3c:ca:da:2a:c6:7c:a9:66:9d:30:
45:17:46:1d:35:c1:c5:d9:c1:d2:7a:e7:d4:8c:73:bd:ad:b1:
06:30:b4:ae:15:a9:13:1e:e6:60:bd:43:f4:ef:1a:aa:cd:1f:
01:36:5c:97:05:2a:f6:9c:84:f8:bc:75:49:1b:79:8a:87:c2:
26:b0:11:d3:74:9e:7a:6e:79:98:8d:4a:18:56:9f:a1:46:3d:
ca:36:3c:9e:01:9e:98:29:b1:87:24:bc:a2:09:49:0f:57:64:
cf:62:9e:e0:d3:6e:ff:ed:2f:49:6f:22:4c:d6:0e:ee:f3:57:
42:f4:03:d1:3c:84:ab:9b:93:cf:b8:28:09:2b:47:e6:53:27:
50:53:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:58 2024 by rpki-client on console.sobornost.net