Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/HxAglBm9F07DC6Yv3Dumq7DUkmg.roa
File: HxAglBm9F07DC6Yv3Dumq7DUkmg.roa (raw, json)
Hash identifier: YbBH4dHxwklEjNQFC0h8GLBLiYXWLb7A6+VokHIPuD4=
Subject key identifier: 1F:10:20:94:19:BD:17:4E:C3:0B:A6:2F:DC:3B:A6:AB:B0:D4:92:68
Certificate issuer: /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial: 01877ADCCD6E7C7C1940D383FEC47DE2020C
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/HxAglBm9F07DC6Yv3Dumq7DUkmg.roa
Signing time: Thu 13 Apr 2023 13:45:03 +0000
ROA not before: Thu 13 Apr 2023 13:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60265
IP address blocks: 91.199.126.0/24 maxlen: 24
2a01:bf00::/32 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:dc:cd:6e:7c:7c:19:40:d3:83:fe:c4:7d:e2:02:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Validity
Not Before: Apr 13 13:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f10209419bd174ec30ba62fdc3ba6abb0d49268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1a:14:62:10:cc:24:08:9e:f9:12:7f:a8:fd:
60:38:2b:72:22:62:fa:89:fc:b7:3e:ae:c7:c3:93:
a4:aa:72:4d:40:50:e9:c8:09:47:88:10:de:af:68:
9e:ed:08:fb:01:23:1b:4f:45:ae:80:56:ec:10:b4:
73:05:23:cf:d8:c2:1a:89:a4:5e:9c:d3:fb:83:57:
f8:48:eb:25:64:d6:68:ef:c5:26:dc:34:29:9c:12:
74:c8:59:22:82:2e:f0:87:e5:1a:cc:6c:69:28:44:
cf:8f:99:95:76:40:8c:3a:c4:64:f0:93:bf:7d:d3:
c5:eb:68:65:3f:f2:36:b4:71:cc:93:fe:4b:7b:d8:
bc:d9:e9:36:a2:00:c7:c1:60:7d:0a:8e:3d:66:1d:
ae:8e:f0:39:8a:ed:40:8a:5a:ed:bc:b6:fa:84:3c:
30:d0:62:62:f4:77:4f:be:a0:33:ac:c0:21:60:3d:
33:69:6a:67:bd:57:a3:c5:8f:5b:79:26:82:1b:40:
ac:c2:d0:bf:80:7f:86:6d:d7:3a:e5:53:ac:00:63:
92:a2:fe:37:06:74:ca:44:b5:86:86:4d:5d:f7:31:
31:e2:5a:f6:74:02:99:21:78:61:63:72:61:72:d3:
a9:e3:48:1b:9e:7c:60:30:01:1c:de:e1:2c:31:a2:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:20:94:19:BD:17:4E:C3:0B:A6:2F:DC:3B:A6:AB:B0:D4:92:68
X509v3 Authority Key Identifier:
keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/HxAglBm9F07DC6Yv3Dumq7DUkmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.126.0/24
IPv6:
2a01:bf00::/32
Signature Algorithm: sha256WithRSAEncryption
d9:7d:f6:4f:73:d7:a9:57:e9:dd:62:c4:03:76:88:84:bf:be:
cd:2a:d6:ee:18:f4:08:46:6b:02:6d:b3:ec:05:d1:31:68:cb:
8b:bd:35:30:6f:72:9c:23:13:34:e3:7d:f5:fc:88:7d:58:51:
cc:38:83:b9:43:d2:38:b1:4d:2c:3b:f1:f6:6d:78:94:4c:dc:
4f:66:b3:32:4a:b3:3e:62:df:1e:48:3c:35:a3:df:39:c9:f3:
e6:7b:69:af:db:60:74:1e:c7:6a:69:92:e4:9b:48:6f:71:63:
1e:d5:5a:4b:c5:4b:bf:24:05:4b:05:43:b9:06:89:a8:10:a1:
38:f0:e7:8e:3d:06:48:30:1d:0b:f0:99:4d:b6:7c:96:a4:a4:
83:0e:21:63:ed:45:6d:4b:e6:f2:be:0b:8a:82:38:80:fd:c4:
e2:18:7d:fd:5e:45:fa:a7:d2:e6:53:b9:28:a2:54:4f:cd:c1:
69:be:40:27:d0:28:c3:18:c3:21:96:14:d8:5e:0b:77:63:9d:
e1:17:24:b2:bf:36:0a:21:5e:93:2c:dc:d8:d5:2f:36:1a:cb:
7d:85:a9:11:3e:c6:74:bc:3f:61:7c:35:0d:e7:7e:10:d0:d2:
2e:00:38:9f:95:47:ee:b6:ff:9d:82:dc:70:7a:91:fb:95:58:
8f:cc:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:37 2024 by rpki-client on console.sobornost.net