Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/CynJhtlSQz-jLszKa5Vw016Hm7g.roa
File: CynJhtlSQz-jLszKa5Vw016Hm7g.roa (raw, json)
Hash identifier: V+UBNN16NLkqcvAk8mrmHiH3AfLdm2CgLvtoVaYyfGE=
Subject key identifier: 0B:29:C9:86:D9:52:43:3F:A3:2E:CC:CA:6B:95:70:D3:5E:87:9B:B8
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018B5DA6D4C8D9796B37B337B1A1319C83B9
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/CynJhtlSQz-jLszKa5Vw016Hm7g.roa
Signing time: Mon 23 Oct 2023 17:48:16 +0000
ROA not before: Mon 23 Oct 2023 17:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216314
IP address blocks: 94.137.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:a6:d4:c8:d9:79:6b:37:b3:37:b1:a1:31:9c:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Oct 23 17:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b29c986d952433fa32eccca6b9570d35e879bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:41:8a:0f:46:b9:fd:e1:0f:bb:7e:cf:61:
90:0b:55:55:68:6b:0a:de:c0:49:e7:84:60:83:b2:
40:be:31:41:02:8c:f6:f6:5f:4b:4b:6b:d2:c3:46:
e3:67:43:ca:87:d8:f2:2a:89:e2:08:ab:2b:a5:6d:
e0:28:6b:f7:6c:45:3f:ec:70:79:d3:24:60:0d:c4:
0e:8e:5e:f4:ce:02:45:81:41:d7:88:32:7c:66:69:
1e:b2:b7:20:b9:d9:ed:5e:f0:ba:f4:c1:7b:6b:b7:
e9:fa:9d:b5:fe:63:ea:0c:b0:14:3a:d4:ac:dd:eb:
c1:f2:1a:73:e5:e7:e9:7a:f7:37:0d:e5:ae:4a:63:
09:e2:6d:1b:99:29:ce:00:30:ad:af:9e:38:96:d6:
3e:67:ba:b9:30:f8:9c:55:24:54:2b:3c:76:9c:2d:
b9:22:ca:83:d2:26:35:ca:6c:b3:04:9b:db:ea:64:
96:a1:9f:c7:e0:44:e2:4e:d2:ad:c9:6a:91:27:fc:
c9:14:67:d8:b4:ec:b9:0c:45:2f:81:da:66:93:1f:
dc:ac:4f:52:69:a0:de:92:85:cb:30:f8:9e:9f:4f:
6e:f2:fd:da:96:a3:33:9c:0f:0c:52:73:d4:fd:4d:
1b:06:ec:d0:26:ff:9e:53:6c:d9:18:aa:d8:92:03:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:C9:86:D9:52:43:3F:A3:2E:CC:CA:6B:95:70:D3:5E:87:9B:B8
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/CynJhtlSQz-jLszKa5Vw016Hm7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:6e:8d:11:22:e6:ea:08:8e:12:9e:3b:bc:d5:5c:1f:d4:62:
f2:2a:f8:a9:c3:50:dd:63:c4:07:a4:ad:87:07:1f:0a:d9:f6:
c1:ec:ef:0d:24:bf:94:a8:77:59:73:67:45:b1:d9:be:c2:e7:
31:5b:81:da:2a:90:80:82:c0:de:bc:57:67:ad:3c:b9:a3:9d:
03:7a:61:5e:9d:4a:e4:f1:a5:e4:f1:22:f1:bb:09:74:82:8e:
dd:81:9b:4d:37:00:41:09:85:de:59:7d:f6:1a:8c:32:86:8a:
43:61:9f:20:f8:df:26:e1:1e:3e:f5:f9:ad:f5:92:cd:f9:5b:
60:44:17:17:72:be:1b:19:2a:bb:fc:52:d4:66:09:75:6b:78:
17:a3:a3:76:31:59:22:09:06:05:3e:41:dc:24:99:50:96:1c:
87:bf:1b:1b:88:9a:71:44:7f:95:11:5a:32:fc:1d:89:eb:34:
a5:85:0a:78:dd:42:75:af:39:b0:ee:04:57:6f:6c:df:41:26:
97:15:0e:cb:94:88:62:5d:55:02:8f:99:9b:3b:9f:ba:a9:a4:
27:20:9e:21:33:f8:8a:08:50:a5:f6:a1:ae:4a:f2:40:1b:37:
90:8c:9b:e2:0f:dd:fc:48:60:40:0d:56:e9:e0:52:0c:d2:7c:
a9:dd:74:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:40 2024 by rpki-client on console.sobornost.net