Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/G-gcNjnudlC0Rhw-9FPRkeZqjEY.roa
File: G-gcNjnudlC0Rhw-9FPRkeZqjEY.roa (raw, json)
Hash identifier: 6uGeGlA97khLGLs1gS6EhSzmoiGifs/oYQEb9mmdTzg=
Subject key identifier: 1B:E8:1C:36:39:EE:76:50:B4:46:1C:3E:F4:53:D1:91:E6:6A:8C:46
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 01856E2F95A5459C48980124B3A2E777B54A
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/G-gcNjnudlC0Rhw-9FPRkeZqjEY.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59526
IP address blocks: 91.242.44.0/24 maxlen: 24
91.242.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:95:a5:45:9c:48:98:01:24:b3:a2:e7:77:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1be81c3639ee7650b4461c3ef453d191e66a8c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:96:1a:9d:58:6e:72:a1:86:a0:4b:45:ec:
b7:4b:63:2f:f7:ed:42:39:50:13:09:04:22:52:05:
96:0b:b8:22:4b:66:5a:c4:75:7c:ee:8f:8e:68:81:
64:94:48:c4:f2:a1:3c:3d:00:b8:d8:9f:31:67:ea:
39:9a:24:f3:b1:85:1c:bd:67:72:78:72:c5:69:8d:
b6:01:ef:b9:49:40:bc:8e:a3:d7:93:4f:55:73:c9:
8e:55:ae:ab:71:a4:b8:38:21:1b:ad:84:03:fc:7f:
d9:6d:62:3f:6a:c7:1c:48:0e:4a:03:44:3b:b4:4b:
48:43:b0:3c:8e:83:cc:bc:5b:1c:5d:63:81:3f:06:
1c:5e:40:f6:23:82:4e:ce:b6:c5:d3:3a:d1:6f:ec:
2e:d1:01:81:2a:99:c4:30:4f:64:67:9e:d6:b1:15:
fd:cb:64:c2:70:85:1a:92:41:15:ee:b7:5e:ea:e0:
7d:7b:97:6a:3f:1b:e4:89:6a:5a:db:27:6a:54:1e:
d4:84:7b:e1:cd:c7:b1:79:3e:8d:02:be:34:0a:85:
0c:c1:2c:8c:2e:f9:ea:3b:f3:36:f6:b0:a6:cd:51:
3a:45:b5:55:bf:3a:72:79:57:61:98:b6:13:e6:da:
7e:09:35:98:b2:85:f1:d4:16:9e:7a:56:6d:11:e0:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:1C:36:39:EE:76:50:B4:46:1C:3E:F4:53:D1:91:E6:6A:8C:46
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/G-gcNjnudlC0Rhw-9FPRkeZqjEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.44.0/23
Signature Algorithm: sha256WithRSAEncryption
43:ae:7f:01:cc:02:1d:cf:02:f1:21:97:86:7e:62:62:ce:e6:
d8:2f:86:70:89:2b:f9:5b:af:44:65:d2:af:d6:d5:19:e1:33:
31:3a:f3:b1:dc:b7:99:cf:0b:a5:ec:13:2c:b9:2e:59:d8:93:
d0:58:82:b0:bb:f2:1c:1e:7d:7c:cb:9b:25:54:28:41:1c:b8:
62:55:d1:08:3b:ff:fb:17:72:07:3a:dd:6d:af:51:b8:e6:af:
49:5c:50:2c:96:09:9c:58:b3:fe:e8:e1:ec:f3:c6:f5:9a:6f:
9c:66:da:b6:65:d9:e6:96:64:30:05:8a:86:d9:4d:b2:93:5b:
d2:a5:40:dd:23:c7:e6:4a:ec:27:bd:50:76:b2:05:bb:cc:9a:
56:77:0b:8a:cc:db:21:2c:2c:35:c5:c4:be:1d:28:2a:5e:ba:
db:f2:a6:25:20:a4:a1:b3:f1:95:36:32:c3:a7:34:6f:81:22:
59:66:ce:7c:7a:b4:52:b1:fc:e9:53:2a:dc:c5:b7:8f:09:3b:
f6:08:fe:f4:41:d8:86:9e:ca:96:2a:b4:0a:9a:8d:28:04:37:
2c:1a:7e:a2:eb:b8:16:dd:c0:6a:68:e2:28:7b:e7:0d:63:cb:
ff:8e:3b:12:60:5f:14:8e:2b:6a:a7:b3:f1:f0:f5:e9:28:da:
d0:87:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:29 2024 by rpki-client on console.sobornost.net