Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/O0ezkCBviHBgYu-MywNExV8lsrU.roa
File: O0ezkCBviHBgYu-MywNExV8lsrU.roa (raw, json)
Hash identifier: uB5VYGc/2qojjkr7Cir1CPB1sf8RYzXNmds3zkNJhkI=
Subject key identifier: 3B:47:B3:90:20:6F:88:70:60:62:EF:8C:CB:03:44:C5:5F:25:B2:B5
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018A945FA28E4CE83D72990C46CE4714BC70
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/O0ezkCBviHBgYu-MywNExV8lsrU.roa
Signing time: Thu 14 Sep 2023 15:46:50 +0000
ROA not before: Thu 14 Sep 2023 15:46:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 91.243.178.0/24 maxlen: 24
89.46.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:5f:a2:8e:4c:e8:3d:72:99:0c:46:ce:47:14:bc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 14 15:46:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b47b390206f88706062ef8ccb0344c55f25b2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:bc:d1:a2:84:91:94:98:ca:7d:5a:ab:9c:
9b:8d:aa:eb:6c:d8:f2:0b:bc:7a:00:d7:88:ba:44:
1d:8d:1a:c6:ba:a2:6d:9a:8c:a0:db:aa:48:05:4d:
39:e7:17:ea:d9:9a:65:9c:17:95:d0:9d:4d:06:6f:
a8:08:b1:8a:94:81:ca:d1:91:2e:bf:aa:21:a5:9a:
c4:69:fb:ec:e3:62:48:10:96:18:83:a6:ed:5f:a7:
18:ec:aa:35:87:61:67:86:bb:12:7a:47:e3:ff:f6:
29:bd:2d:ad:04:2f:09:a0:02:09:fd:5a:e2:24:66:
ef:05:31:cf:da:f8:29:56:c4:d4:d6:d9:f4:39:32:
1b:67:0e:7c:ec:33:07:61:37:7c:a8:26:44:b6:1b:
0a:4c:d3:b7:a7:ef:c3:05:9d:a9:90:7d:8d:61:3f:
14:0b:28:95:64:84:3b:25:e8:ae:86:39:73:1e:6b:
9c:84:bf:ef:b5:68:28:d3:89:0f:6b:67:fd:55:ec:
35:e2:8d:6e:24:53:bc:fe:3e:62:d7:25:70:c8:78:
47:e0:35:1b:84:a5:8d:90:91:7c:8d:a8:c3:38:14:
bc:76:2e:fd:fa:6d:68:ff:76:15:a0:fd:1f:8f:c3:
cf:b0:14:b3:e2:70:51:28:4b:6e:64:69:66:fb:09:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:47:B3:90:20:6F:88:70:60:62:EF:8C:CB:03:44:C5:5F:25:B2:B5
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/O0ezkCBviHBgYu-MywNExV8lsrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.11.0/24
91.243.178.0/24
Signature Algorithm: sha256WithRSAEncryption
15:8c:a8:01:7e:1b:29:b3:a1:e3:e7:e5:99:c7:57:0f:d7:72:
ed:61:51:58:54:44:4a:b5:2d:8a:cb:7e:0d:a1:ba:56:49:b8:
4a:96:e1:a3:c3:0d:8d:0c:9d:c3:54:c7:b0:78:62:a4:2d:a8:
cf:ca:c4:bb:4a:b5:e7:4e:3e:b3:a4:79:15:f9:9a:ff:d8:ea:
1d:4e:46:08:10:b2:0d:6d:69:49:12:9d:f1:4c:eb:9d:4a:7a:
99:da:67:04:cf:d1:38:44:04:6d:20:2a:92:c5:0b:f2:34:a1:
5d:b1:0b:47:68:4a:a0:c3:01:e5:bf:bb:55:61:62:ed:00:b2:
d1:ee:8c:f3:a6:e0:8a:ca:b4:97:7a:37:1d:80:39:32:e7:55:
29:d1:8a:ec:68:02:a7:2e:17:8a:79:57:5b:16:80:cf:f7:f1:
4f:84:99:d9:35:4a:34:ce:32:ec:16:8c:e3:8a:7c:b2:80:97:
92:4d:ad:70:29:18:ef:52:e2:11:7d:34:5d:8e:92:8e:22:a3:
bb:4a:ff:60:9a:35:a9:32:4e:32:46:29:e9:a8:b9:45:99:37:
c5:b6:cd:52:4c:ef:71:13:e4:39:cb:85:ba:2c:88:25:e9:25:
77:88:87:f9:6b:b2:e9:b7:40:bc:16:ec:4d:5e:5a:69:38:24:
4b:2b:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:09 2023 by rpki-client on console.sobornost.net