Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/WToCFWM9bETfEGez1p3r9M60P0w.roa
File: WToCFWM9bETfEGez1p3r9M60P0w.roa (raw, json)
Hash identifier: 5CiCmLYMR3pXf9k8L47LMekuz00W1xik1A21UVf1T3M=
Subject key identifier: 59:3A:02:15:63:3D:6C:44:DF:10:67:B3:D6:9D:EB:F4:CE:B4:3F:4C
Certificate issuer: /CN=5134d1320645644e2eaf3685879d693f72522c76
Certificate serial: 018571D79AC95D37D5B80FECB1DD098548CD
Authority key identifier: 51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/WToCFWM9bETfEGez1p3r9M60P0w.roa
Signing time: Mon 02 Jan 2023 09:37:13 +0000
ROA not before: Mon 02 Jan 2023 09:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.194.104.0/23 maxlen: 24
91.194.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:9a:c9:5d:37:d5:b8:0f:ec:b1:dd:09:85:48:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5134d1320645644e2eaf3685879d693f72522c76
Validity
Not Before: Jan 2 09:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593a0215633d6c44df1067b3d69debf4ceb43f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:33:d6:8a:37:1c:6d:45:e1:7c:90:af:a9:
32:b4:4d:11:ce:aa:aa:23:8b:c2:54:fe:65:34:68:
ee:81:2c:19:93:d1:1a:16:c5:9c:e8:3a:8b:05:60:
9f:81:3f:e7:ff:e6:d2:5f:e7:87:dd:a1:e8:a1:08:
18:ea:55:e2:0a:5b:6b:ad:f3:27:84:b6:d4:ae:97:
dc:52:24:90:1b:8d:dc:f6:2f:0f:bc:25:a7:e9:ba:
74:e6:61:c9:cf:b0:db:0e:cb:c2:b7:40:c3:f5:21:
3d:69:cb:1d:e8:0d:cc:10:d0:d0:24:6c:76:32:66:
98:04:83:66:61:ff:da:b9:1d:56:cb:5f:a7:e3:4b:
fb:5a:f6:12:76:cb:d5:f7:a9:42:b5:8c:9f:85:2d:
f2:f8:c9:8e:20:85:a1:0b:3a:3b:7d:ff:e9:ac:f2:
66:cf:ac:b8:38:73:49:20:f3:93:05:65:d6:26:af:
73:90:ba:ea:d9:31:44:0f:dd:e8:31:15:d9:e4:bf:
1f:30:b5:63:4d:44:b4:b1:08:f6:47:0d:54:ad:e5:
d6:6a:ee:a3:64:55:fb:c5:52:ef:65:01:d9:93:01:
99:b6:8a:8c:39:67:61:b0:28:57:e6:18:c7:69:ef:
ea:d7:da:d3:0f:15:9f:c8:33:f1:c4:0c:d0:89:e0:
67:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:02:15:63:3D:6C:44:DF:10:67:B3:D6:9D:EB:F4:CE:B4:3F:4C
X509v3 Authority Key Identifier:
keyid:51:34:D1:32:06:45:64:4E:2E:AF:36:85:87:9D:69:3F:72:52:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTTRMgZFZE4urzaFh51pP3JSLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/WToCFWM9bETfEGez1p3r9M60P0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/9fb1d7-8424-4c84-b0cb-2f51ecd1aa0e/1/UTTRMgZFZE4urzaFh51pP3JSLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.25.0/24
91.194.104.0/23
Signature Algorithm: sha256WithRSAEncryption
55:fd:e2:32:fc:fc:ad:71:40:41:35:42:49:5f:ef:6a:ca:8d:
d2:56:5e:cc:12:79:51:48:43:4d:d9:24:1c:73:c0:6f:d3:4b:
5d:6f:20:9b:d6:f9:5b:74:40:92:d3:1e:23:59:09:29:60:44:
ef:fb:58:6b:fd:32:b0:52:5e:41:09:57:6b:9d:93:af:3e:4f:
cc:3f:28:f0:6e:22:ff:72:e6:cd:f7:10:d5:bc:53:0b:06:9e:
ea:dc:1b:93:e5:1d:80:5b:90:6d:a6:02:e1:2b:09:13:a7:ce:
ae:aa:0b:7f:2f:33:57:bb:91:61:5a:89:ff:ac:37:bd:f8:61:
02:0b:8e:93:a3:19:3c:c1:02:4a:8f:93:4d:9b:da:48:33:fa:
77:b4:73:a4:37:3f:bc:cc:d3:14:25:22:88:12:47:11:9f:a3:
cc:b8:95:c3:42:48:d5:fa:ac:1b:2a:90:5a:97:2a:69:fe:fe:
e3:03:37:b2:96:b9:2e:bf:5c:3f:7d:d7:8b:f7:e3:3e:41:e0:
34:c2:3d:aa:34:9f:6a:29:17:6b:71:5f:0c:14:58:b0:52:ad:
53:74:58:44:8c:31:fc:66:1c:15:7d:8e:ab:10:9b:59:1a:87:
07:af:2a:87:80:cd:37:b0:4d:23:43:2d:88:7c:e5:34:6f:3b:
d0:3a:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:47 2024 by rpki-client on console.sobornost.net