Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/tCXRwJj49sLzn8Q6D96yfbEUlxk.roa
File: tCXRwJj49sLzn8Q6D96yfbEUlxk.roa (raw, json)
Hash identifier: 8KNYURZaYSgBAw+vJdlvPwLVbx12x3cidsFyILBKXuY=
Subject key identifier: B4:25:D1:C0:98:F8:F6:C2:F3:9F:C4:3A:0F:DE:B2:7D:B1:14:97:19
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018B22F138223AA3A2149749244238F6DD26
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/tCXRwJj49sLzn8Q6D96yfbEUlxk.roa
Signing time: Thu 12 Oct 2023 08:11:55 +0000
ROA not before: Thu 12 Oct 2023 08:11:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139853
IP address blocks: 91.222.135.0/24 maxlen: 24
91.222.134.0/24 maxlen: 24
91.222.133.0/24 maxlen: 24
149.20.127.0/24 maxlen: 24
149.20.126.0/24 maxlen: 24
91.204.80.0/24 maxlen: 24
91.222.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:f1:38:22:3a:a3:a2:14:97:49:24:42:38:f6:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Oct 12 08:11:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b425d1c098f8f6c2f39fc43a0fdeb27db1149719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:3f:76:93:cd:f9:c8:6f:70:e9:de:50:ff:
57:28:97:06:45:98:b1:5d:8c:c1:46:e3:e5:8b:23:
56:2b:02:da:68:c3:96:03:7b:2d:1f:8f:28:08:3f:
c5:04:6d:d2:31:7e:91:82:1a:a4:ba:2e:b6:e8:28:
70:9e:24:a8:02:73:e3:56:2d:d0:f1:0f:ae:cf:1f:
2f:18:01:fa:de:ee:50:c5:d7:2d:23:c1:19:fc:02:
8a:3c:57:58:83:9c:a5:f1:d7:0e:2e:05:42:bf:b9:
db:c8:44:a7:5b:bb:31:d4:c1:ba:e5:5d:ff:65:bc:
47:1e:2a:7f:d8:a3:60:43:1f:fb:80:3d:2b:f7:d7:
f2:4f:e3:b6:a6:24:da:21:12:38:fb:52:f8:a3:29:
9a:55:06:14:31:eb:ce:06:eb:1c:11:54:8d:ab:d6:
e4:87:01:64:40:bb:a1:3c:79:bb:be:ab:30:ab:9f:
ba:06:d3:5b:b9:c3:33:c4:49:d1:4d:30:e1:b6:f3:
2b:f7:17:f7:27:1e:7c:53:39:49:4f:e8:b3:b1:6d:
35:99:34:4c:be:91:ac:a9:c2:01:a5:f5:a7:a7:3d:
d4:e5:99:3a:84:a1:e0:43:3e:f9:32:42:bb:84:e7:
96:d6:d3:9a:f4:a4:85:70:3a:68:8a:0a:b0:59:21:
7a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:25:D1:C0:98:F8:F6:C2:F3:9F:C4:3A:0F:DE:B2:7D:B1:14:97:19
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/tCXRwJj49sLzn8Q6D96yfbEUlxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.80.0/24
91.222.132.0/22
149.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:f7:82:8b:ef:35:89:53:28:29:9b:6c:40:a1:7d:0a:f0:48:
84:2c:95:2d:91:91:ae:86:f5:7f:cc:b5:c8:f1:d6:be:2a:42:
61:ae:b0:57:77:a7:5e:3e:b1:43:84:6d:25:ac:64:c5:46:e4:
15:81:3e:cd:9a:86:af:15:9c:ce:86:04:82:9f:f5:4d:4c:b0:
de:b3:96:f2:73:89:2f:5d:f2:f8:fc:87:6e:93:e5:03:f6:38:
b6:6b:66:ef:2a:a5:a2:8b:9f:dd:78:37:c4:8d:95:85:2d:36:
e6:83:8d:77:0c:0f:51:ba:6c:8b:1c:4c:98:06:3f:40:83:8f:
fa:4c:26:89:dd:09:92:dd:89:8b:88:4d:9b:bf:85:a7:e9:4e:
fa:62:74:eb:42:ca:75:ab:11:5e:12:12:0d:b2:4e:eb:45:bb:
9e:97:80:19:0a:1a:03:91:1c:7f:02:14:a7:c2:d0:c9:45:92:
2b:bf:2c:60:8f:52:a0:3b:f5:72:2e:69:d7:a5:e6:27:1a:a5:
ad:4a:0f:55:d4:83:ca:34:95:a0:98:56:a1:8e:ba:5c:5f:d8:
f6:b8:bf:09:1d:66:ed:2d:08:52:85:f3:24:44:81:2b:f7:94:
26:14:f4:11:88:6b:26:52:ae:2e:4d:fc:86:34:de:03:65:00:
25:00:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:24 2024 by rpki-client on console.sobornost.net