Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/HpkILLCSJhYOua3OqCnWWNrzTa8.roa
File: HpkILLCSJhYOua3OqCnWWNrzTa8.roa (raw, json)
Hash identifier: BxAxDImV4aKXKiwXbOg2J0wkBZBE2W7Ett4bFQac0lk=
Subject key identifier: 1E:99:08:2C:B0:92:26:16:0E:B9:AD:CE:A8:29:D6:58:DA:F3:4D:AF
Certificate issuer: /CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Certificate serial: 01856B931E6D6843CEC34C9DB678032A634C
Authority key identifier: 20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/HpkILLCSJhYOua3OqCnWWNrzTa8.roa
Signing time: Sun 01 Jan 2023 04:24:41 +0000
ROA not before: Sun 01 Jan 2023 04:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43866
IP address blocks: 91.195.202.0/23 maxlen: 23
91.195.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:1e:6d:68:43:ce:c3:4c:9d:b6:78:03:2a:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bd702dd7800b61c96c50f42a46b6949b228dbb
Validity
Not Before: Jan 1 04:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e99082cb09226160eb9adcea829d658daf34daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:7c:69:3f:78:b1:ad:49:60:8c:2d:14:ac:
03:f4:88:d6:9d:a5:fa:64:e2:04:2c:12:37:05:37:
a7:b0:1e:63:6f:72:aa:54:54:3a:69:42:0f:d4:59:
aa:5e:b4:dd:e0:31:d2:14:05:7b:0e:eb:00:6e:62:
48:d8:f4:c0:f8:c0:6c:55:7e:f6:b4:78:ca:c9:a4:
f3:28:2e:a8:e5:e0:af:27:f3:63:0a:d2:67:2c:2e:
a3:54:ef:0d:a6:3b:08:b4:38:72:c0:f3:57:08:c0:
b4:ad:7b:7b:50:d1:ed:74:a5:05:50:bf:f0:24:48:
4b:40:87:2c:a1:03:4d:ee:e2:83:a8:43:8a:73:60:
ec:b8:b7:31:8b:7c:75:9d:25:7b:ce:c0:dd:89:3a:
8c:2e:be:9b:99:a4:90:4c:22:5e:14:fe:dc:9e:51:
59:1e:7a:c7:0f:ba:ad:5f:6c:99:92:0a:d3:b4:e0:
f9:84:55:3c:5e:85:df:56:cf:b0:83:b7:be:8f:c9:
57:a4:92:8c:71:4e:2d:40:39:f4:8a:ec:9c:2b:63:
82:ab:75:0b:89:5a:bc:a0:5e:b0:68:10:c8:59:27:
b6:85:4d:76:54:22:e5:5e:81:5a:1d:b0:49:a9:1a:
2c:d7:24:73:0e:77:99:aa:38:f1:e9:8f:2c:e2:37:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:08:2C:B0:92:26:16:0E:B9:AD:CE:A8:29:D6:58:DA:F3:4D:AF
X509v3 Authority Key Identifier:
keyid:20:BD:70:2D:D7:80:0B:61:C9:6C:50:F4:2A:46:B6:94:9B:22:8D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL1wLdeAC2HJbFD0Kka2lJsijbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/HpkILLCSJhYOua3OqCnWWNrzTa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/aceb1d-28f6-41fa-acca-7fa5ebcf574e/1/IL1wLdeAC2HJbFD0Kka2lJsijbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
67:59:a1:2d:80:6c:b9:de:b0:58:74:60:d0:2d:54:49:9f:84:
6b:b8:21:b8:e7:66:e8:f3:fd:6f:69:01:5d:96:67:a9:23:e5:
e4:18:6b:47:91:99:d6:90:f3:15:26:69:cc:41:dd:c1:8b:f6:
91:79:14:48:43:2c:d5:14:39:6f:44:33:b6:d6:fb:02:64:58:
71:53:f9:ab:8b:e0:84:33:72:2c:b0:8f:19:8b:88:9f:42:58:
58:98:82:c8:59:4d:43:22:60:02:cd:d2:04:01:09:6c:85:67:
b4:9b:d9:60:8e:b3:02:f6:24:37:ad:e8:fb:a1:92:ef:df:0f:
a8:e1:54:d3:13:65:d5:1a:7c:d3:b3:b1:9c:e1:c4:56:f2:22:
62:9e:e8:e0:aa:45:1d:15:68:ec:a5:bb:cc:31:f9:65:9c:fd:
16:1c:7b:6b:23:28:2c:03:b7:35:03:0e:91:a8:6f:a1:6a:8c:
b7:3b:f0:03:6c:26:bf:f3:f4:6f:09:12:08:be:05:7f:77:52:
3d:09:e1:25:a4:71:d1:9a:30:1c:d7:fb:18:76:9f:c3:b0:63:
dc:f9:80:50:48:12:77:ad:13:66:19:3a:57:8e:c3:7e:2e:33:
85:3b:16:06:e0:c6:b1:76:70:85:a8:93:48:db:e0:87:c4:48:
e4:2e:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:18 2024 by rpki-client on console.sobornost.net