Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/YXTqtuURiypv_aPoKn_FywnoyKY.roa
File: YXTqtuURiypv_aPoKn_FywnoyKY.roa (raw, json)
Hash identifier: 13oqZYxc+dU+DqqBB0SsJ7CClqJFW3DLhJ+fTRLx3EI=
Subject key identifier: 61:74:EA:B6:E5:11:8B:2A:6F:FD:A3:E8:2A:7F:C5:CB:09:E8:C8:A6
Certificate issuer: /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial: 018AFBF6EB200E62FC552729585A3612F5AD
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/YXTqtuURiypv_aPoKn_FywnoyKY.roa
Signing time: Wed 04 Oct 2023 18:32:57 +0000
ROA not before: Wed 04 Oct 2023 18:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 91.202.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:f6:eb:20:0e:62:fc:55:27:29:58:5a:36:12:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
Validity
Not Before: Oct 4 18:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6174eab6e5118b2a6ffda3e82a7fc5cb09e8c8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:bd:30:f7:d6:95:e8:fc:23:16:08:43:44:
f3:ca:51:1d:13:0d:89:9f:c5:9d:77:21:69:c5:7a:
49:bf:a7:09:2e:0d:6b:59:86:26:19:48:81:f4:77:
14:87:ca:d7:8d:f6:be:9f:62:35:bf:8e:d6:3f:0c:
6e:d5:27:00:89:89:97:79:a3:ba:7f:18:43:37:c4:
dc:30:f3:31:cc:a9:d3:a1:db:94:99:42:70:02:9a:
13:b9:c5:21:52:5d:9b:58:e8:f5:51:86:02:f3:e0:
bf:43:76:1e:87:e9:c7:07:a7:56:f6:2d:b0:10:cb:
ac:20:62:d5:5b:ad:94:7a:9f:7d:22:83:58:4b:95:
43:9b:42:39:f8:99:38:cf:aa:32:a8:f9:d4:83:d6:
c9:66:2c:55:fd:71:06:1d:a0:a7:f1:6e:f6:7f:5a:
69:9b:96:e5:d9:fc:28:db:66:f8:22:93:de:62:63:
aa:ef:42:ad:04:92:4f:17:24:82:01:42:fa:fc:aa:
66:8e:98:b8:25:62:b9:3e:52:7a:ea:2d:32:7c:14:
16:3a:f7:7b:5e:e1:66:a6:8d:8e:77:32:b4:9a:da:
ee:c3:19:a4:61:f1:c0:1a:1a:2f:f3:c3:c5:87:ee:
85:5b:fc:f5:79:f7:d9:ec:d2:99:36:92:c6:0c:bd:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:74:EA:B6:E5:11:8B:2A:6F:FD:A3:E8:2A:7F:C5:CB:09:E8:C8:A6
X509v3 Authority Key Identifier:
keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/YXTqtuURiypv_aPoKn_FywnoyKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:20:f5:61:91:5a:69:6b:e5:0b:be:1a:f0:c0:2b:8c:4a:a1:
19:9a:2c:f3:50:df:4b:03:d0:77:0c:49:dd:db:64:4a:db:3b:
8e:77:f8:35:0f:b3:0b:2e:68:41:7e:57:f9:0b:bb:42:83:55:
a2:d9:eb:0b:25:74:cc:3d:c1:fc:1e:ed:1b:e3:8d:22:57:2c:
be:6d:f2:b4:ae:07:55:da:e8:c4:c5:d5:e3:88:e5:5d:42:bf:
2f:e5:45:78:92:51:27:c7:d8:1c:b2:bf:6a:ea:00:74:55:8d:
e6:c6:09:c3:3f:44:de:e4:0b:9c:d2:23:ee:e9:3e:74:46:94:
9b:a8:5f:fd:e4:67:fc:ef:e6:46:1a:27:43:e8:83:78:d2:70:
e9:e9:fa:8a:d3:84:73:bb:e1:37:c1:bf:fb:a3:30:5a:e9:0c:
56:0b:55:11:c4:e1:53:c9:2f:60:57:5f:5e:4e:ee:9b:22:84:
d0:9d:e8:ba:64:41:81:0c:51:f6:c4:ad:da:8c:f9:94:ad:45:
57:fd:82:2b:48:90:12:22:c7:45:31:87:3c:c3:8c:56:3f:a3:
42:78:8b:e9:c6:18:21:c7:dc:f1:2e:29:6b:89:76:ba:f9:c8:
0d:0a:7a:76:b2:0f:d4:66:43:66:22:e5:c2:e0:53:4d:ce:af:
08:2d:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:25 2024 by rpki-client on console.sobornost.net