Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/SPW_T7DZXQWdezovvZits1X6C2E.roa
File: SPW_T7DZXQWdezovvZits1X6C2E.roa (raw, json)
Hash identifier: hYardwgiztqF/tfBzMuc/WbeZ+3RD/ot1A2BsfLaJsc=
Subject key identifier: 48:F5:BF:4F:B0:D9:5D:05:9D:7B:3A:2F:BD:98:AD:B3:55:FA:0B:61
Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Certificate serial: 01899371F9D3F88644FE65A02CE2C1238B46
Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/SPW_T7DZXQWdezovvZits1X6C2E.roa
Signing time: Wed 26 Jul 2023 18:24:27 +0000
ROA not before: Wed 26 Jul 2023 18:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50964
IP address blocks: 194.59.39.0/24 maxlen: 24
91.205.76.0/22 maxlen: 22
194.59.38.0/24 maxlen: 24
194.59.36.0/24 maxlen: 24
194.59.36.0/22 maxlen: 22
194.59.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:93:71:f9:d3:f8:86:44:fe:65:a0:2c:e2:c1:23:8b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8
Validity
Not Before: Jul 26 18:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48f5bf4fb0d95d059d7b3a2fbd98adb355fa0b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:46:39:f2:63:de:49:b9:02:89:dd:7a:fa:
30:b4:6e:a4:19:64:5e:af:27:55:89:ff:e0:c4:c7:
ef:d3:ea:c7:12:e6:a4:4b:82:6f:c3:e3:28:cb:d1:
b5:d0:05:5f:73:06:01:ca:f0:72:75:e7:68:a7:31:
1a:cd:d6:03:cf:fc:83:6e:d6:17:fb:62:16:19:1d:
af:42:a1:53:a6:fd:43:33:58:55:14:79:07:f5:29:
fd:1f:45:c6:59:a5:d3:3a:c4:e8:4a:ba:92:38:62:
73:78:5e:5f:a5:fa:ef:47:22:46:ac:d2:d4:e3:ad:
3e:06:d6:0b:32:14:0c:b7:80:30:b7:04:94:72:9b:
fb:74:a1:16:6f:95:21:4b:49:0e:51:cc:fd:0f:22:
d0:97:f1:29:11:82:69:b9:10:41:68:78:38:5b:7d:
1c:a1:08:9a:c5:0e:72:5d:d4:f9:4c:49:ca:f0:10:
a2:c8:45:8a:26:52:b2:57:51:6e:67:3a:91:38:6c:
b9:09:80:8b:8c:97:9b:8b:f9:97:e7:d2:f6:63:a2:
63:a8:83:72:63:c8:47:c0:f5:24:2d:c5:8e:d9:e4:
20:64:6b:a7:ae:c2:c9:72:3c:67:4a:12:f4:50:bd:
6c:42:51:9a:a4:f9:a5:58:f4:90:c3:99:9b:05:ff:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F5:BF:4F:B0:D9:5D:05:9D:7B:3A:2F:BD:98:AD:B3:55:FA:0B:61
X509v3 Authority Key Identifier:
keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/SPW_T7DZXQWdezovvZits1X6C2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.76.0/22
194.59.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:0f:f1:8b:4e:72:d8:61:80:53:a8:5a:c3:45:ef:80:9e:64:
89:fd:0f:20:7b:87:f7:f9:9e:e1:dd:a1:64:ae:fa:be:51:03:
f1:e9:09:24:69:46:9b:bb:5e:f0:ef:29:27:95:1e:e0:68:e8:
fa:e2:37:68:52:67:91:d7:ea:a1:bb:72:12:7f:76:d4:da:dc:
72:b9:e8:cf:06:7e:5f:0b:85:85:91:6e:5d:33:07:9a:05:29:
93:8a:0a:23:8a:95:e5:80:4f:7c:60:8d:32:72:46:8a:9b:01:
6f:19:07:8f:8b:ed:25:cc:81:36:05:7e:03:17:f8:1e:21:70:
3b:1d:4b:4f:d2:5c:82:22:26:5e:e4:69:59:4f:ad:36:fc:ed:
f1:5b:8e:ed:af:f0:1b:b3:ea:9a:7d:a9:36:fa:ab:79:bb:ff:
9f:4c:33:ee:4b:1b:0d:b6:60:16:05:e6:10:17:7b:c2:8e:47:
d9:5e:ee:59:e9:0a:02:a9:47:b5:8a:74:db:e8:15:f3:fc:f7:
f3:2e:5f:02:7a:c4:ed:42:d0:e9:23:59:cd:be:a7:bf:8c:a2:
04:1e:cc:82:02:67:30:3b:9a:56:33:0d:cd:c2:74:58:c8:5b:
c4:e7:15:8d:72:65:02:aa:ae:ad:f3:8b:1e:77:1c:68:6b:95:
8d:51:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:32 2023 by rpki-client on console.sobornost.net