Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/Crd3pz4J7umjjE2Dt2z76uYX4nc.roa
File: Crd3pz4J7umjjE2Dt2z76uYX4nc.roa (raw, json)
Hash identifier: UAyJV60J0uq9sGYd8ce4TXoo8BH5n2Fi/H/BsV63ZdA=
Subject key identifier: 0A:B7:77:A7:3E:09:EE:E9:A3:8C:4D:83:B7:6C:FB:EA:E6:17:E2:77
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 01856D6F4F05032DF2CBA20E45D3F8D2DEDC
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/Crd3pz4J7umjjE2Dt2z76uYX4nc.roa
Signing time: Sun 01 Jan 2023 13:04:49 +0000
ROA not before: Sun 01 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 91.198.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:4f:05:03:2d:f2:cb:a2:0e:45:d3:f8:d2:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jan 1 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ab777a73e09eee9a38c4d83b76cfbeae617e277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:06:58:1d:56:14:51:ca:12:37:17:c3:49:
97:9d:70:dd:43:a2:40:c1:53:32:04:4a:b4:06:1e:
cc:e2:f5:e6:70:42:97:ed:ad:3e:93:b2:9b:35:44:
b3:aa:5a:15:a4:07:ae:30:30:cb:0a:f1:80:67:35:
40:a9:23:37:a9:b3:71:63:16:f2:e1:ae:4a:cf:d1:
36:2d:6e:35:40:fa:c2:c7:bf:68:61:4e:e6:dc:ef:
10:62:ad:5b:64:e5:ce:a1:78:78:6e:92:66:dc:12:
25:81:45:fe:a6:db:ad:fa:7d:72:22:c6:ac:06:39:
7e:81:70:69:e4:4a:c0:c9:46:70:d9:c6:70:c5:b3:
e3:ad:8a:74:79:ca:39:30:00:cf:25:b7:5c:d0:43:
17:60:36:bb:81:d5:32:20:e8:bc:cc:d0:c2:a0:4a:
13:fd:b1:de:cf:31:29:ab:91:65:d5:f1:51:5a:8e:
27:ff:59:89:2d:9d:72:92:d1:35:48:3d:5f:bc:00:
7b:cf:8a:0a:bb:65:03:c1:eb:a6:30:a9:da:e1:21:
c8:84:b0:d8:7c:07:9d:ea:85:9e:43:33:e9:42:82:
4d:9f:8c:c0:f7:8a:cc:18:e8:55:03:ed:3d:a8:ab:
63:74:a4:ee:ee:ae:63:48:4b:d5:04:1e:2e:54:98:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B7:77:A7:3E:09:EE:E9:A3:8C:4D:83:B7:6C:FB:EA:E6:17:E2:77
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/Crd3pz4J7umjjE2Dt2z76uYX4nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.124.0/24
Signature Algorithm: sha256WithRSAEncryption
53:cb:c5:51:83:2a:e5:84:e5:d7:24:dc:10:5e:00:e1:b7:73:
71:77:70:7d:aa:5b:4e:9c:55:e7:2b:ca:6f:71:b9:39:ba:fa:
8e:0a:4b:17:a6:ea:db:4a:1c:90:dc:69:27:a2:b6:a9:2f:57:
03:72:a9:3c:92:ad:93:f7:76:ff:5e:64:66:59:f7:ea:aa:1d:
21:08:fc:c6:1b:eb:d4:b0:65:9e:7a:a3:52:1d:44:db:6f:74:
04:93:ea:e0:f9:8f:91:c7:34:aa:bb:90:35:53:fc:2b:2a:7a:
5d:f8:4f:dd:14:37:82:1b:ec:82:26:d9:17:b9:cc:5d:8d:ca:
27:fb:5b:bc:61:98:9f:a8:c7:c2:b0:63:45:15:b2:18:f5:10:
19:92:e1:58:ff:70:3e:9a:39:3a:cc:45:a6:8c:44:e1:fb:83:
fc:01:65:fc:11:b9:45:85:64:c1:79:83:5f:53:69:8e:b3:0d:
bb:86:58:59:1c:2a:6b:be:2b:f9:19:76:6f:6c:bd:dd:b9:12:
cb:e2:86:26:0a:8f:de:78:96:73:ec:8a:78:b4:f3:e8:a3:39:
a8:fa:73:b9:2e:36:6e:87:0e:83:ba:d5:d4:8a:ba:a2:fd:e9:
30:da:c1:b3:94:91:eb:7b:3e:ea:d1:d7:9f:fd:f6:6a:23:fc:
d4:3a:ac:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net