Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/iTiJHI68d__nnB_eeRza4jpNyO4.roa
File: iTiJHI68d__nnB_eeRza4jpNyO4.roa (raw, json)
Hash identifier: LuPxIKyd4/ITkUmyEAXUbMO9exR4VhbUq+4vIiZpEZ8=
Subject key identifier: 89:38:89:1C:8E:BC:77:FF:E7:9C:1F:DE:79:1C:DA:E2:3A:4D:C8:EE
Certificate issuer: /CN=d7da8118018d7cb0efde6793788104873f47f45d
Certificate serial: 01856D2F21BBF9E7458CDCFA66BA2FBE95E4
Authority key identifier: D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/iTiJHI68d__nnB_eeRza4jpNyO4.roa
Signing time: Sun 01 Jan 2023 11:54:43 +0000
ROA not before: Sun 01 Jan 2023 11:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31533
IP address blocks: 91.213.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:21:bb:f9:e7:45:8c:dc:fa:66:ba:2f:be:95:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7da8118018d7cb0efde6793788104873f47f45d
Validity
Not Before: Jan 1 11:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8938891c8ebc77ffe79c1fde791cdae23a4dc8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:b5:33:fd:c7:69:6b:09:bb:1f:4a:cf:3d:
2c:54:c4:a8:14:cb:b6:ed:53:5c:d3:89:c3:25:c3:
71:0e:30:0c:2d:41:1b:d3:d2:c6:19:70:9c:10:f0:
54:86:47:0e:00:e9:4b:9d:aa:46:3a:6b:98:90:ce:
10:e2:11:59:12:b2:5c:1f:46:fd:9f:73:06:61:40:
30:f1:7f:4a:e1:31:e6:7d:a2:28:5d:1d:4b:de:8f:
b3:10:ad:b5:3c:e2:0e:70:63:60:80:37:0a:08:7d:
7f:b8:85:23:ea:c1:bb:d5:19:83:11:8b:1f:14:ba:
3d:4f:9f:37:61:b5:65:14:38:00:19:03:ca:41:ad:
b0:99:42:be:0f:ce:c8:40:a3:6b:ad:7e:85:43:6a:
68:bd:48:66:58:14:5a:f0:2b:1a:2d:ad:09:1e:f1:
fa:2b:73:7d:ee:8e:f7:f1:da:da:ca:46:d8:92:71:
49:21:b9:74:0e:e4:97:0b:82:3e:7a:32:fb:b8:36:
b4:c1:fa:cb:5c:86:0b:3d:f0:b5:8b:c4:ee:1a:93:
05:e3:ea:82:0b:81:06:f4:8f:e6:b6:35:44:95:f9:
0f:36:6d:9b:a4:5d:0d:72:76:ad:bb:30:73:27:0f:
d0:da:38:a2:7c:c0:bc:80:ba:6b:55:0c:71:c6:17:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:89:1C:8E:BC:77:FF:E7:9C:1F:DE:79:1C:DA:E2:3A:4D:C8:EE
X509v3 Authority Key Identifier:
keyid:D7:DA:81:18:01:8D:7C:B0:EF:DE:67:93:78:81:04:87:3F:47:F4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19qBGAGNfLDv3meTeIEEhz9H9F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/iTiJHI68d__nnB_eeRza4jpNyO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/083b6b-f74a-4e6c-8098-67673636bb10/1/19qBGAGNfLDv3meTeIEEhz9H9F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.134.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9b:1a:13:6a:34:0f:a3:96:38:37:25:85:41:8b:77:52:54:
fe:f1:a7:92:36:59:1d:b3:d9:37:3f:6d:27:f5:e5:fa:da:8e:
b1:cd:10:0c:4d:bf:7c:17:2c:20:6d:a2:35:72:a9:22:55:99:
bc:84:69:5f:80:10:ce:32:81:71:5b:af:3e:0f:08:91:1f:4e:
92:37:4d:c5:74:f3:6c:10:d1:cc:19:9c:3a:f3:31:f2:21:34:
13:69:aa:8b:81:68:f9:75:81:a8:33:0c:bb:87:0d:35:05:21:
b5:42:5b:0f:64:3d:ea:aa:80:f8:4a:8e:bd:e7:7e:87:6d:b9:
f9:1e:97:3d:f5:b6:60:60:09:9a:e9:86:d8:8e:8a:7d:46:f8:
e8:a8:c5:63:5d:eb:c4:4b:9a:73:1e:15:bb:7d:c9:0f:1e:cc:
24:b1:34:b2:fc:38:05:db:06:21:df:2d:ae:67:22:f2:a5:dd:
1d:a1:20:92:77:0b:64:22:67:fa:db:de:5d:ad:72:3e:40:6a:
7d:df:58:de:f8:de:6d:68:90:70:f1:fc:5f:33:81:4b:c1:0a:
e9:8c:f6:3e:77:48:9e:1a:5e:e4:d7:7b:4f:52:ba:1f:dc:3a:
0b:07:67:49:ac:c0:18:bb:28:0e:28:6f:a6:77:75:bc:f1:86:
7b:10:ec:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:25 2024 by rpki-client on console.sobornost.net