Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/62Ih66EB1MGeYajb34mDMTYnhCY.roa
File: 62Ih66EB1MGeYajb34mDMTYnhCY.roa (raw, json)
Hash identifier: wC8l5jDEn7GTOae6YNiWWsRb4ovN9Jp8rsBFoSWYv3E=
Subject key identifier: EB:62:21:EB:A1:01:D4:C1:9E:61:A8:DB:DF:89:83:31:36:27:84:26
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01891818602D4C2334EDFE25F03FC739C07A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/62Ih66EB1MGeYajb34mDMTYnhCY.roa
Signing time: Sun 02 Jul 2023 19:33:17 +0000
ROA not before: Sun 02 Jul 2023 19:33:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.222.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:18:18:60:2d:4c:23:34:ed:fe:25:f0:3f:c7:39:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 2 19:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6221eba101d4c19e61a8dbdf89833136278426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:30:3d:1d:ef:dd:d6:97:52:b1:cb:83:d2:
21:9b:cd:2f:74:75:93:c0:72:06:eb:17:db:31:f1:
a6:70:e0:1a:1f:7d:e5:5a:4b:af:6d:2f:d6:29:a3:
46:d1:fb:2c:04:66:99:1e:9b:b7:8a:e3:30:95:97:
f3:18:b8:60:08:6a:ae:7a:20:c7:80:70:89:cd:50:
31:e6:fb:e3:0a:47:51:f8:61:1c:0e:a6:f0:f0:67:
1f:5b:c5:fb:4a:d7:bb:73:de:9d:67:1c:e5:35:eb:
44:ef:22:26:64:50:dc:fe:0b:31:b8:9c:fb:85:e9:
9b:4b:2c:a5:c9:55:57:98:33:b7:f3:b9:23:39:94:
a3:1d:6b:0b:7a:aa:36:b7:fb:79:07:08:e4:df:d0:
a8:71:01:d5:d2:b2:2d:5e:fb:99:bc:7b:66:fa:86:
c4:80:00:00:66:bf:6d:b6:39:37:78:91:81:33:6b:
fa:e6:7d:f5:6b:1c:a5:5f:b3:9b:2b:48:4b:cc:67:
af:d7:77:1c:7a:ad:5d:76:cc:64:95:fb:3b:2c:04:
5e:a0:e3:5c:47:50:15:41:fb:be:2c:e6:6e:2a:e2:
b9:43:ed:67:92:4c:39:4e:99:1d:82:ff:39:63:13:
8c:f7:f2:cf:4c:4d:0a:c5:a0:a9:68:46:c6:59:57:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:21:EB:A1:01:D4:C1:9E:61:A8:DB:DF:89:83:31:36:27:84:26
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/62Ih66EB1MGeYajb34mDMTYnhCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
91.200.222.0/24
109.122.46.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b2:c8:a3:97:67:09:0d:6f:c8:02:1f:8c:d9:87:ef:60:9e:
da:3c:e0:db:be:f3:40:72:a3:05:52:16:40:c1:f4:9e:05:b6:
60:fb:cd:da:98:3f:68:83:5d:1a:b3:04:58:7b:12:12:ac:0f:
f2:61:4b:bd:03:07:28:53:fd:fb:e6:82:26:0d:5e:11:eb:85:
50:25:e6:2c:db:40:5b:2c:f5:ea:7f:75:62:7f:50:32:36:a9:
43:a8:e5:44:2b:8a:ec:00:b9:dd:df:8d:26:11:7f:93:36:4f:
0f:7a:75:40:a9:9a:26:f1:84:6d:36:05:50:fd:31:b3:1a:a6:
85:a9:60:bd:54:99:42:b9:55:96:f7:27:6f:e4:30:43:e4:a4:
e8:2a:12:5d:c6:08:b9:f9:ee:b7:16:ad:24:bc:87:d7:19:80:
82:0b:bb:0c:92:97:75:b8:3f:e3:d0:fb:85:01:6f:e3:cf:44:
c8:b2:d2:03:92:63:83:ad:96:36:80:a7:ff:6f:b9:4b:9e:d5:
a5:d6:23:32:ff:4c:8b:12:4b:a2:47:c1:2f:39:26:ee:58:6b:
e9:61:47:57:02:4b:a8:d7:5d:59:d2:31:ab:1a:da:2d:ee:5e:
1d:99:1d:f8:78:ab:f1:68:a0:04:c2:3c:e7:6f:93:57:b0:f5:
ae:fe:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net