Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/g6mw2uICLC6eNbBYMrWrWECm0SM.roa
File: g6mw2uICLC6eNbBYMrWrWECm0SM.roa (raw, json)
Hash identifier: AH+1a0IDXq36ShtHqf9djORakCgrxus5/P1MQsusrLA=
Subject key identifier: 83:A9:B0:DA:E2:02:2C:2E:9E:35:B0:58:32:B5:AB:58:40:A6:D1:23
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 018606E2BC7F9743766F9287F0B1CE9B927F
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/g6mw2uICLC6eNbBYMrWrWECm0SM.roa
Signing time: Tue 31 Jan 2023 08:12:48 +0000
ROA not before: Tue 31 Jan 2023 08:12:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207582
IP address blocks: 89.107.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:e2:bc:7f:97:43:76:6f:92:87:f0:b1:ce:9b:92:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jan 31 08:12:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83a9b0dae2022c2e9e35b05832b5ab5840a6d123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:11:45:23:7a:9d:6d:06:eb:a1:cc:a0:42:
0e:75:7e:ab:70:7e:9a:a9:47:4b:fa:e2:e7:ed:2e:
22:ae:64:ed:d4:62:94:3a:ce:a5:8b:96:b7:71:3a:
cd:41:1d:81:80:b7:15:4d:6a:a5:59:42:a6:c0:b8:
be:b0:29:58:f7:ef:67:f6:2a:a1:bb:20:fb:7d:86:
71:b1:82:0c:e9:6b:61:9f:f0:5f:42:88:b4:17:21:
74:e9:53:07:26:66:dd:71:fc:39:96:fe:f3:4b:43:
82:6c:6c:2d:66:f6:2d:bf:b1:41:a4:c0:e7:5c:9d:
4b:2d:cd:2f:3c:f7:94:c3:00:15:ed:b3:ce:62:2b:
1a:61:d0:10:44:26:71:08:19:27:44:9c:0f:6d:d3:
a6:fe:e8:46:c9:8c:eb:1a:39:04:91:58:a1:79:cb:
cc:2b:34:8e:0e:8f:51:74:1d:32:32:68:e6:26:4e:
32:fb:38:16:ce:52:a9:74:02:05:5f:07:11:d8:a4:
28:6e:8c:29:9f:ac:6d:70:f9:16:13:33:bf:32:95:
84:f7:9e:e8:06:ad:ff:52:99:a1:17:b7:48:a6:7b:
74:3d:20:c4:c4:b4:ea:26:c4:0b:f9:e0:60:a5:5e:
9d:fa:d3:89:c3:77:e8:9d:ca:cc:bb:69:19:8f:fa:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:B0:DA:E2:02:2C:2E:9E:35:B0:58:32:B5:AB:58:40:A6:D1:23
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/g6mw2uICLC6eNbBYMrWrWECm0SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.225.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c5:23:1a:90:e2:6a:09:d6:3d:97:d9:a6:29:78:93:46:66:
88:a3:a9:c6:27:bd:6d:58:db:ce:08:4d:82:e3:5a:dd:8d:77:
b6:c2:78:5a:90:87:9f:60:eb:ca:1a:85:b6:56:e9:e0:5c:00:
e6:bf:de:d0:e0:9a:16:41:8e:e7:e4:cd:2b:af:d5:1d:c0:e9:
2b:5d:d1:ac:ad:a9:8e:11:cb:62:2e:3d:12:a4:60:10:bf:d1:
10:81:36:0f:35:8f:04:12:78:36:20:93:7e:9f:58:ca:97:1c:
25:0d:0e:e4:fb:98:fe:c4:7d:10:a8:21:29:0c:5f:0e:c3:ed:
98:6b:82:cd:58:17:64:29:a9:0b:8c:15:0b:c2:37:8d:6f:4d:
73:44:43:8e:f7:2f:65:14:f7:a1:fb:c8:ab:29:7c:7e:b7:23:
12:35:9f:5b:64:f7:86:28:39:53:0b:a7:12:f6:1d:f8:de:0b:
6d:c9:9d:43:b1:7a:31:3e:f5:f3:7d:8b:c9:3f:86:1b:7a:f5:
8d:2b:82:1b:0d:88:b4:b3:42:ff:a4:f0:7d:49:37:71:31:99:
cf:9e:db:f2:d7:32:a0:3b:18:a5:89:16:ab:e1:d2:40:ef:b6:
52:35:b3:9c:45:b6:f0:54:c5:df:cd:78:5c:d6:55:52:57:b2:
04:4e:e9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net