Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/jvMDZq-Pp4rz6u8D8Uq9tN8LJMg.roa
File: jvMDZq-Pp4rz6u8D8Uq9tN8LJMg.roa (raw, json)
Hash identifier: DdsTWMtp0jUcU9rby7SGon3G20wRj324XE1MXuy2fyU=
Subject key identifier: 8E:F3:03:66:AF:8F:A7:8A:F3:EA:EF:03:F1:4A:BD:B4:DF:0B:24:C8
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 018C3E6069E8BBDBD537C988BB120659DA4B
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/jvMDZq-Pp4rz6u8D8Uq9tN8LJMg.roa
Signing time: Wed 06 Dec 2023 09:05:55 +0000
ROA not before: Wed 06 Dec 2023 09:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44710
IP address blocks: 91.217.244.0/24 maxlen: 24
31.131.141.0/24 maxlen: 24
31.131.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:60:69:e8:bb:db:d5:37:c9:88:bb:12:06:59:da:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Dec 6 09:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ef30366af8fa78af3eaef03f14abdb4df0b24c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:b4:ea:ca:34:56:50:2d:2f:9b:54:a8:ba:
09:03:19:84:8c:f9:d5:a5:52:64:47:f7:a8:0b:88:
7f:71:43:ee:3f:40:7a:1b:e8:af:83:3c:ee:f7:c1:
26:93:f8:43:79:2b:58:fb:41:3f:2c:66:65:05:b4:
74:c5:c8:27:e4:e5:d4:d1:6d:ad:8c:9e:ef:a7:2d:
ce:d1:74:a3:09:99:1e:af:fe:66:7c:87:f3:31:d1:
e4:72:77:ee:2f:a0:a1:be:e2:6e:54:d1:6b:cd:86:
ed:82:11:26:30:24:83:2e:ab:56:f0:8a:10:55:dd:
f3:b3:e6:19:2b:17:49:9f:83:42:ca:95:8a:8a:f0:
e1:94:df:b5:1e:3d:75:a5:3c:93:75:4d:57:11:10:
81:e6:b8:28:1c:45:43:35:89:83:2d:a1:f1:33:b4:
2a:59:81:68:33:61:98:43:1a:39:b7:90:a2:9c:de:
9f:f0:2c:4c:bb:ef:54:dc:2a:bb:d7:02:82:72:51:
f1:46:e9:6b:2b:ca:32:46:d1:99:a9:6f:39:d2:33:
81:02:f0:f3:55:f9:0e:59:48:e5:f8:4f:58:02:a3:
16:f0:fb:7d:80:8b:7e:3b:3f:ce:76:69:7d:a0:1a:
cc:41:d3:ee:07:ec:eb:52:39:2d:81:c8:bd:6f:71:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F3:03:66:AF:8F:A7:8A:F3:EA:EF:03:F1:4A:BD:B4:DF:0B:24:C8
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/jvMDZq-Pp4rz6u8D8Uq9tN8LJMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.140.0/23
91.217.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ba:53:46:17:35:78:62:30:eb:27:65:4d:19:8d:dc:ca:ab:
d4:7a:da:80:9b:dc:1a:a5:d9:29:70:c9:a7:3e:08:fe:f8:0d:
fa:a3:98:88:e0:8c:e7:c5:fe:f3:22:e9:2e:a9:02:89:b4:c9:
aa:71:34:cc:4c:b0:e1:6b:8e:12:4b:0b:63:08:d7:6c:12:95:
b5:34:f3:5a:e2:07:54:27:71:50:e6:7f:e6:30:2b:a6:12:58:
6c:17:20:7b:63:b9:5e:65:0c:9d:8a:f9:dc:16:34:05:79:4e:
bd:66:b4:a0:75:ab:b3:fa:e1:29:dc:d1:41:b3:3f:31:d5:74:
55:65:97:5b:e6:b5:e7:8c:06:72:41:3b:27:ca:87:32:31:89:
24:b4:a7:ad:6d:4b:29:18:19:30:f4:d5:f4:c8:81:2a:8c:ef:
54:b6:ac:2e:ef:b3:0d:68:c4:f0:64:55:d5:67:6c:de:0e:6e:
01:2c:5a:4a:ce:92:ce:98:13:85:91:7e:45:76:c0:ea:86:aa:
85:54:29:72:b6:c9:0f:39:f6:21:fb:99:ed:f9:e1:ca:20:9f:
ff:b1:d1:0b:f0:b9:96:fd:e2:2b:b7:72:9c:a5:ba:12:bc:cd:
6a:f3:7c:17:3a:e8:7c:ff:24:84:1a:3f:51:38:83:d7:68:07:
f5:03:8c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:53 2024 by rpki-client on console.sobornost.net