Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1-GRt_-pJRKNLq9enNB2qZ7aoVII.roa
File: 1-GRt_-pJRKNLq9enNB2qZ7aoVII.roa (raw, json)
Hash identifier: bb8K/Hs1y9G6FzwdHZsBGOM/zQVuebEFYxuo1NBpCQE=
Subject key identifier: F8:64:6D:FF:EA:49:44:A3:4B:AB:D7:A7:34:1D:AA:67:B6:A8:54:82
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018964CB4C7C3DF5E6B85C127FE405965F77
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1-GRt_-pJRKNLq9enNB2qZ7aoVII.roa
Signing time: Mon 17 Jul 2023 16:59:52 +0000
ROA not before: Mon 17 Jul 2023 16:59:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.147.117.0/24 maxlen: 24
91.147.122.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:cb:4c:7c:3d:f5:e6:b8:5c:12:7f:e4:05:96:5f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 17 16:59:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8646dffea4944a34babd7a7341daa67b6a85482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:79:3d:74:54:0a:30:42:37:e9:6a:0d:e2:
12:89:1a:4a:3c:10:69:38:9f:22:5d:8a:89:a4:f6:
be:00:bd:19:b5:9c:7c:69:9e:a9:46:a0:e8:92:26:
36:f9:6b:f3:ba:f4:0b:ee:70:69:19:50:46:06:0f:
7c:2a:5f:54:70:4c:88:27:2d:28:95:66:c3:c8:01:
66:08:1b:06:9d:b5:97:7c:a2:de:5f:88:e4:2c:e0:
f9:2a:93:dd:f9:8b:d4:26:20:77:00:97:a2:d3:f2:
c0:6e:52:76:51:24:6c:b0:0b:ff:be:32:89:a6:02:
09:ff:5c:b0:e1:9e:b0:9f:02:5f:a7:fb:41:94:19:
4f:b9:ab:07:de:f5:2e:45:90:82:9b:f1:be:16:9e:
e8:cc:5c:78:0a:d2:4d:12:ba:51:e6:16:77:b4:1b:
06:b6:f4:ac:1a:13:37:c2:05:cb:84:aa:b7:16:93:
0b:49:1e:64:40:a9:d3:b3:d9:dd:81:12:a9:4d:93:
f8:fc:1f:80:84:2a:c7:a8:5a:7d:e6:7a:d2:cf:a1:
08:64:23:e7:37:97:02:2a:92:50:55:13:b6:58:e7:
ae:31:d2:ab:8c:37:71:41:ad:e9:3f:df:b8:12:2a:
87:aa:e2:4b:f4:a5:87:40:46:80:16:49:79:db:4b:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:6D:FF:EA:49:44:A3:4B:AB:D7:A7:34:1D:AA:67:B6:A8:54:82
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/1-GRt_-pJRKNLq9enNB2qZ7aoVII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.117.0/24
91.147.121.0-91.147.122.255
Signature Algorithm: sha256WithRSAEncryption
04:33:a6:4a:9f:83:e5:c6:29:09:68:ce:60:6e:4b:85:5e:55:
c2:a1:1f:8c:0b:18:b9:ee:cc:89:dd:37:af:13:26:95:0e:4f:
65:b9:c8:09:c8:78:ee:10:5e:41:46:ff:05:b8:19:cb:12:fa:
9c:3f:80:53:33:a5:eb:cb:d2:7b:3c:de:a8:7f:66:a4:60:cf:
a5:a8:e6:9f:34:75:c8:cf:c2:0c:f3:43:d5:7e:1a:02:f9:c9:
f3:26:f6:0d:b4:aa:00:0e:79:d8:7d:57:6f:b8:79:d6:18:83:
fd:23:9a:d5:b0:e6:64:30:13:96:32:c7:01:fd:71:09:58:5d:
8a:22:11:d4:9f:cb:bb:49:e1:ab:3b:15:ad:0d:03:fb:c2:2b:
f8:47:5f:82:2a:19:07:8e:80:28:67:d1:12:b1:ce:3b:90:26:
0e:b6:68:a0:95:d9:dc:a8:d3:a2:0a:19:6b:f2:e3:47:53:8d:
fd:b2:aa:b5:8f:7c:7c:13:bc:8a:14:4e:2c:35:ed:0a:67:7d:
ab:07:d7:f8:16:97:b7:97:26:90:1e:f3:5a:35:2e:43:ad:d5:
50:19:94:b8:c1:c2:76:5d:60:18:2b:d1:bd:8b:90:8f:86:f1:
da:2e:75:fe:3f:bc:13:1a:e8:48:2b:76:13:60:86:34:9d:59:
63:6c:75:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net