Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BTaCL3pm53B-8rz5lbc0GkftCaQ.roa
File: BTaCL3pm53B-8rz5lbc0GkftCaQ.roa (raw, json)
Hash identifier: gCeZaFUSl5kAKI3HtLI4EolxSmr9JUgStwtFl9gm8qY=
Subject key identifier: 05:36:82:2F:7A:66:E7:70:7E:F2:BC:F9:95:B7:34:1A:47:ED:09:A4
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018572BA772E66220E478EF36701008E18EF
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BTaCL3pm53B-8rz5lbc0GkftCaQ.roa
Signing time: Mon 02 Jan 2023 13:45:00 +0000
ROA not before: Mon 02 Jan 2023 13:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212898
IP address blocks: 91.205.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:77:2e:66:22:0e:47:8e:f3:67:01:00:8e:18:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 13:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0536822f7a66e7707ef2bcf995b7341a47ed09a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:62:59:23:58:e9:f4:e7:24:be:6e:1c:ed:
cc:ea:b3:4d:a2:97:5a:69:7e:58:5a:c2:15:a4:01:
4d:72:fb:0a:a2:c5:68:70:b6:13:74:d9:ff:49:5a:
39:24:3a:44:d7:7a:e8:3d:54:9c:28:51:34:9b:b2:
ef:6f:3e:ef:b1:c0:83:23:11:ec:8b:3d:04:b2:e7:
6f:59:76:08:9b:6e:ce:b5:8e:6f:1f:3d:1e:45:bc:
3a:36:2d:5e:86:19:bd:c9:78:8d:0d:a1:13:32:91:
5a:95:ce:44:86:1f:3f:40:a9:3b:b4:2b:24:42:d7:
ca:98:7b:49:05:5b:0c:bc:44:fd:89:f2:20:5f:83:
14:62:7f:1c:5c:a8:02:58:3b:9d:41:1b:68:03:25:
4d:db:12:fe:e8:f0:3f:3d:35:6c:5a:9f:c0:4b:a6:
45:55:43:49:5d:98:a1:4e:f2:07:9d:10:8c:ad:b1:
59:33:0b:1f:b6:b7:d4:e0:32:ff:d2:5d:16:52:a6:
54:f9:3e:8f:5c:d5:af:dd:f0:1c:94:5b:f5:fd:3d:
5c:0e:09:a5:9e:b8:5a:6a:20:c9:1c:1a:44:e7:e5:
c5:f2:93:93:68:3d:2d:86:3f:1d:3b:1b:3d:69:a2:
3d:27:7c:78:a8:95:c1:f3:68:15:a3:12:ae:24:80:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:36:82:2F:7A:66:E7:70:7E:F2:BC:F9:95:B7:34:1A:47:ED:09:A4
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/BTaCL3pm53B-8rz5lbc0GkftCaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.199.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d5:11:f8:2f:97:16:d1:73:a5:ed:fb:d4:c6:a7:36:9c:81:
4b:0b:df:0c:09:37:c4:5f:22:6b:a2:7e:52:a6:e6:32:52:bf:
44:d8:96:4b:46:08:36:41:5b:16:9c:8f:5f:3c:76:4a:1f:7c:
e0:a1:08:24:e0:88:0e:5b:b5:0c:e4:28:d5:fc:89:ea:23:e6:
02:f1:ac:a5:d2:45:a1:19:f4:22:c2:eb:c5:64:ae:51:61:8f:
89:59:45:9d:93:e5:d2:e4:d7:58:ec:e3:54:63:14:c4:dd:f3:
9a:82:2d:b9:11:ee:9f:c5:f8:72:17:bc:25:d9:99:22:48:e6:
e1:28:6c:6e:ed:2b:71:83:36:cd:55:8e:27:92:1b:d6:4d:ea:
0e:8e:ec:15:56:49:96:1f:dd:a2:54:65:ab:16:18:49:39:4f:
c5:85:ed:6b:20:a9:b4:df:5d:15:a7:72:f2:b8:df:af:1e:4a:
06:87:43:3f:64:94:cc:d2:7a:ea:58:15:17:d0:82:f1:2b:97:
4d:e1:57:a5:c6:fd:26:c3:19:f1:66:70:9f:1c:c7:73:39:05:
ca:51:cf:48:c3:d5:c6:98:3f:6b:8e:e5:82:29:d8:85:0c:86:
71:de:66:19:18:49:79:d1:9f:77:c9:0a:4f:f2:6a:96:6f:17:
de:5a:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:36 2024 by rpki-client on console.sobornost.net