Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OTD0u74iMnyekh4voyIw1rgIpJQ.roa
File: OTD0u74iMnyekh4voyIw1rgIpJQ.roa (raw, json)
Hash identifier: StVaFeXR2hoX9BMxe4Mazn8nlChbQ7Cdd/xqyBpUWow=
Subject key identifier: 39:30:F4:BB:BE:22:32:7C:9E:92:1E:2F:A3:22:30:D6:B8:08:A4:94
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01891B8814C12A9D5BDD2AD5DC421EA0C4B8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OTD0u74iMnyekh4voyIw1rgIpJQ.roa
Signing time: Mon 03 Jul 2023 11:34:10 +0000
ROA not before: Mon 03 Jul 2023 11:34:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.200.222.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
193.93.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:88:14:c1:2a:9d:5b:dd:2a:d5:dc:42:1e:a0:c4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 3 11:34:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3930f4bbbe22327c9e921e2fa32230d6b808a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:fd:4b:2a:12:dd:90:a2:a7:21:5f:e7:bb:
2b:aa:24:2e:b5:19:cb:2c:e2:de:60:c5:f8:6f:64:
a1:a6:39:50:ce:c1:1f:8c:bf:44:23:6d:58:ef:51:
0f:c2:37:17:06:5d:81:66:53:27:01:55:43:61:1b:
b1:fc:d8:74:f8:18:89:b9:ba:15:af:40:9a:7b:8e:
9c:3c:e3:0b:ea:3d:7e:7d:0a:65:a0:9e:70:be:a7:
ea:7f:2e:93:77:f2:73:c0:e1:b1:5f:98:29:44:ae:
47:e8:bb:de:c8:d7:72:4f:77:dd:29:ec:32:03:60:
e8:73:83:f4:48:0b:0b:7a:d7:fd:62:37:0f:b1:30:
dd:a4:97:39:d3:0e:ed:f3:48:be:dd:d9:e4:11:ad:
21:2e:9e:f2:39:f0:b0:a2:1a:18:f3:73:1b:23:7d:
64:ef:03:6d:8b:18:79:df:5e:c3:50:07:b4:f7:e2:
f9:f2:66:e7:41:f9:61:94:c4:2d:ec:e3:c0:f3:a1:
d1:40:10:4c:f1:f1:f0:60:0a:78:14:68:d6:78:98:
c7:ec:02:0c:24:10:8a:e1:f8:ee:54:02:bb:97:01:
05:d1:99:ba:44:1e:63:5a:2b:75:80:1b:2f:40:4a:
8e:80:c9:6c:18:5a:f2:23:d8:c6:3f:4a:57:76:ba:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:F4:BB:BE:22:32:7C:9E:92:1E:2F:A3:22:30:D6:B8:08:A4:94
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OTD0u74iMnyekh4voyIw1rgIpJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/24
109.122.46.0/24
193.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
42:62:5c:2a:5b:49:4f:2e:11:c6:e2:a4:d0:1c:92:ff:83:c8:
0c:2c:75:1c:b9:cf:59:c2:c6:da:48:8e:9b:0a:fb:62:54:9f:
03:f4:b1:63:65:16:7a:2c:2a:a2:f8:78:c6:15:58:d6:dd:8b:
f3:97:78:05:e3:4a:b1:8c:c4:43:c5:ca:26:d5:b5:e0:36:14:
3f:ff:b1:cf:f0:b1:01:2a:aa:c0:10:0c:7e:2e:39:f0:d7:98:
b1:88:ce:01:01:27:e3:86:d0:25:9a:5c:8a:4e:00:e8:12:7a:
27:b2:31:9a:62:1a:cc:b7:95:b6:0c:b4:89:53:c9:b7:ec:05:
2a:11:f1:4c:30:50:7a:a9:6b:d7:6a:21:a6:c6:f6:fc:b5:3f:
84:5e:4f:a6:2e:02:29:c0:56:b6:b0:a1:23:8b:68:91:3a:0f:
a3:22:32:5c:31:a5:e9:91:37:ef:f4:c9:68:de:da:18:a3:dc:
29:44:73:ac:6b:14:03:72:73:78:34:3f:45:04:17:7f:7c:d8:
60:92:4c:57:4a:50:a5:b1:30:96:93:8e:55:2f:8c:9e:c4:1d:
15:8a:61:e4:88:d8:19:d5:b3:1b:e2:f4:60:20:fd:c7:0a:ed:
82:35:4d:a8:67:c3:bd:a4:ce:b9:4a:c5:0c:f4:b5:48:ff:50:
27:6e:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:47 2023 by rpki-client on console.sobornost.net