Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/3Y2ZQYVsG5SrC90KzqtgjkcWaxk.roa
File: 3Y2ZQYVsG5SrC90KzqtgjkcWaxk.roa (raw, json)
Hash identifier: AOmi1Cii9k7J42fYZvSenxLfmS61NugrnnRad5GGyTQ=
Subject key identifier: DD:8D:99:41:85:6C:1B:94:AB:0B:DD:0A:CE:AB:60:8E:47:16:6B:19
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018AFAD59DC167C02FCAC4E05025C7931DE8
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/3Y2ZQYVsG5SrC90KzqtgjkcWaxk.roa
Signing time: Wed 04 Oct 2023 13:16:58 +0000
ROA not before: Wed 04 Oct 2023 13:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:d5:9d:c1:67:c0:2f:ca:c4:e0:50:25:c7:93:1d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Oct 4 13:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd8d9941856c1b94ab0bdd0aceab608e47166b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:9a:ae:99:c7:02:34:87:96:fb:07:33:3d:
57:2b:b7:09:16:80:0a:de:3b:c2:68:9a:4d:7e:0e:
22:c2:b1:9b:e8:d0:5b:16:a7:29:1f:54:52:d7:ea:
cf:0a:1b:9e:a1:3c:d6:83:39:e4:40:47:94:b6:25:
c0:f6:41:b3:8d:f6:84:d3:6a:51:a5:6f:56:d3:dd:
9c:08:f0:54:3b:04:2e:d2:9e:3f:d7:d0:10:a7:de:
f7:53:6f:92:2a:4b:17:2f:06:76:d2:53:a6:59:be:
42:10:4b:08:be:c6:c8:69:3f:f1:29:b1:53:a4:fa:
68:7f:5d:fa:42:ff:ed:8f:eb:25:28:29:c1:9b:35:
56:aa:f1:5c:35:52:53:96:08:31:03:4e:f2:69:5f:
3d:43:5b:c7:8d:6d:39:68:45:4a:4c:bd:8f:60:c0:
3b:33:4e:46:b2:17:02:1a:15:27:d7:31:6a:a3:ad:
07:eb:cf:4e:e6:61:6c:84:02:ae:07:d6:53:f4:75:
21:30:1c:e3:95:a6:8e:cc:d0:2c:88:27:c2:e7:ba:
20:cb:17:e1:bb:56:5a:41:50:69:db:75:36:0f:5b:
d4:de:20:76:6b:43:58:eb:f0:9f:a6:12:fa:0e:47:
be:f1:a6:82:e6:5e:ba:98:5a:67:a0:5f:ee:be:f3:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:99:41:85:6C:1B:94:AB:0B:DD:0A:CE:AB:60:8E:47:16:6B:19
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/3Y2ZQYVsG5SrC90KzqtgjkcWaxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:94:d9:cb:cf:bb:dd:b0:88:95:d9:ce:cc:8a:16:a7:88:e1:
49:8e:d8:7d:95:23:af:72:f3:fd:38:b4:d8:fb:0f:3e:6b:dd:
82:ac:52:b5:4b:47:34:a2:2d:e4:9e:38:28:18:e3:da:15:42:
16:de:ac:aa:03:b5:a7:8b:38:79:0b:47:1a:e6:52:0e:48:e0:
0e:92:a9:22:b3:92:36:e8:96:eb:17:dc:20:31:d2:d4:14:ba:
df:3c:50:65:75:21:71:af:45:d4:68:97:c7:39:a3:75:c3:05:
99:46:66:33:89:01:cf:ab:16:ce:29:eb:c1:2c:da:c3:f8:b2:
1e:ab:22:9d:65:8b:d0:ff:a4:c0:93:2a:71:85:2c:73:69:e6:
9b:38:fc:29:57:6b:62:84:c3:21:9e:84:30:db:26:4b:bf:df:
79:09:81:a5:90:08:97:36:14:81:fc:b9:5e:67:16:df:38:82:
49:0a:0f:e1:0e:34:4b:a7:36:20:74:5f:22:9d:12:ac:0f:91:
78:90:46:ff:ed:ad:96:8c:29:3f:35:a0:15:ad:2d:da:6e:a2:
6f:71:02:95:f9:4f:da:23:6b:4e:42:6d:75:b0:bc:ae:ce:9e:
c4:32:2d:02:61:38:96:c2:2c:24:73:4c:b1:2f:24:79:7b:ca:
11:ed:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net