Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/t4tXlTZ6CQPeqtzHuiYCrEEwBas.roa
File: t4tXlTZ6CQPeqtzHuiYCrEEwBas.roa (raw, json)
Hash identifier: a4h7H/xgRsrgE9Cg1HpbOSEphn51bY7V+oG0RErgmZ0=
Subject key identifier: B7:8B:57:95:36:7A:09:03:DE:AA:DC:C7:BA:26:02:AC:41:30:05:AB
Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial: 01879DC4ED5169F4CF48F2D5E477DF2AE919
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/t4tXlTZ6CQPeqtzHuiYCrEEwBas.roa
Signing time: Thu 20 Apr 2023 08:25:41 +0000
ROA not before: Thu 20 Apr 2023 08:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197883
IP address blocks: 91.217.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:c4:ed:51:69:f4:cf:48:f2:d5:e4:77:df:2a:e9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Validity
Not Before: Apr 20 08:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b78b5795367a0903deaadcc7ba2602ac413005ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:d7:1d:c7:71:09:03:1e:2b:5a:22:8c:3f:
c1:21:21:0a:b8:a5:1b:0c:18:1f:e9:c8:5f:da:32:
45:44:15:2f:5c:17:aa:93:52:86:07:6e:75:3f:0e:
75:99:b3:b8:68:75:a0:76:ea:a7:08:6c:d0:a0:1c:
e1:3a:8d:d9:11:6f:26:09:84:11:0a:70:49:ac:e0:
2e:6e:dd:f6:f4:12:4f:21:14:f9:72:a9:ab:ca:54:
43:4c:75:54:24:f3:6b:78:07:cc:10:71:0c:8b:dc:
c0:96:77:0f:45:10:e2:75:06:22:6e:dc:79:20:03:
f2:0f:b7:c8:58:a0:0e:ce:86:17:ee:ba:83:34:a3:
ca:5d:0f:dd:73:ee:81:1b:ce:8e:b3:0c:45:d0:38:
6f:77:60:a8:db:a6:0b:a1:0a:3f:55:ca:77:05:5d:
28:c2:fc:f2:5c:48:58:a7:fc:29:bf:aa:87:75:84:
34:be:06:1a:10:02:b1:ec:f9:0f:24:77:21:ce:53:
e6:94:84:1a:63:3d:44:6e:2a:bc:25:23:de:8a:1e:
c1:8c:1d:91:04:53:82:ca:b8:90:e7:72:ae:83:48:
2d:f3:b4:f9:bf:62:e9:89:09:af:b3:fb:c0:d7:19:
26:0e:95:2a:df:c7:12:0b:b3:1c:89:1c:39:12:4e:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:57:95:36:7A:09:03:DE:AA:DC:C7:BA:26:02:AC:41:30:05:AB
X509v3 Authority Key Identifier:
keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/t4tXlTZ6CQPeqtzHuiYCrEEwBas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:95:9a:9c:39:bc:68:1f:d8:fc:e1:5a:63:1d:ea:dc:67:9f:
14:fd:2e:b8:77:4f:34:79:f0:a7:8b:13:fe:0b:e9:7a:3d:b8:
00:d8:cd:e6:63:9c:df:23:5c:8f:48:d2:40:26:e1:e3:d4:b9:
a4:e8:a6:76:f6:30:2d:11:a8:91:f0:4e:9b:54:0c:3a:78:c7:
1b:28:73:af:b0:5f:fc:ea:d9:88:b3:77:07:c8:3d:f5:78:c5:
cb:eb:6f:c0:b2:b6:2c:42:b3:e0:6c:ff:5e:17:5f:cd:11:e2:
29:ac:08:6b:05:e3:b1:c2:c4:0e:99:b3:a2:cc:78:bc:14:99:
3b:04:fa:22:39:d8:15:9a:6c:b4:a6:6b:eb:ac:ff:08:cd:3e:
11:3f:cf:28:85:37:65:b4:c0:00:48:ca:09:b3:54:70:83:f7:
db:45:cb:0c:56:b8:7f:d1:19:f6:f4:fc:70:df:28:29:45:fc:
ac:7d:45:f2:b2:bf:14:cb:72:d1:2b:2a:3b:2d:3c:36:18:e6:
80:65:ad:6e:dd:f2:b0:bb:68:d2:37:2d:96:c0:b7:b7:d2:29:
39:5d:80:3b:06:ca:70:dd:d1:75:35:07:45:2c:99:3d:5b:e0:
fb:3a:c7:8d:d2:5f:7c:19:54:31:50:81:a8:01:88:2e:45:ee:
5c:84:bb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:58 2024 by rpki-client on console.sobornost.net