Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/y0TH7rrhY8SM3FVFzPWcHRMs8WI.roa
File: y0TH7rrhY8SM3FVFzPWcHRMs8WI.roa (raw, json)
Hash identifier: oEdoR/pyTpk9TKSMzwjnc5eWMjCo9PsjeBjLN4pcmp0=
Subject key identifier: CB:44:C7:EE:BA:E1:63:C4:8C:DC:55:45:CC:F5:9C:1D:13:2C:F1:62
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 01856F5DC32E9FC61BAACEB852CF4505A342
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/y0TH7rrhY8SM3FVFzPWcHRMs8WI.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197441
IP address blocks: 91.208.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c3:2e:9f:c6:1b:aa:ce:b8:52:cf:45:05:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb44c7eebae163c48cdc5545ccf59c1d132cf162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:34:c1:51:bb:37:9c:f8:15:13:ed:64:f8:
e1:1b:9f:b4:7a:e1:de:b3:e9:90:f1:e8:7c:8b:38:
f4:94:38:22:e2:4b:cd:21:21:23:c5:18:bd:8c:0b:
48:d5:f4:39:96:d0:1c:f2:ad:da:9d:2e:ef:fd:6f:
d9:d1:91:37:f6:08:b7:34:25:cb:48:f9:fd:da:82:
6c:db:4d:c5:6e:a5:c3:4a:12:b7:f7:5d:c3:cf:cb:
18:f5:1e:24:eb:d3:9b:74:6f:25:ef:13:08:fd:58:
bb:c7:cc:c3:25:e8:ea:3f:a1:30:80:0f:21:4a:87:
83:0c:7c:67:f3:32:3d:f6:c4:ab:a4:ba:55:9a:14:
d8:7f:e3:b9:65:86:12:e6:3b:72:e5:50:ed:62:c8:
03:6c:5e:22:96:e0:30:ee:94:ea:38:ee:d4:b6:a7:
30:24:76:26:39:46:64:9b:f4:ee:da:de:92:6e:0d:
a4:2c:c4:82:5f:d4:2c:12:96:f7:81:ca:e9:a2:34:
25:37:e1:e1:af:ef:83:3d:f8:b7:69:15:07:dd:89:
20:0a:7e:bc:2f:eb:79:d3:e1:ed:70:6a:de:0c:b5:
6f:2e:fe:35:e0:97:2a:5b:c8:6d:c0:2f:b0:58:de:
f3:d0:61:de:03:b5:ca:a7:81:5d:cc:b3:48:ca:3a:
e1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:C7:EE:BA:E1:63:C4:8C:DC:55:45:CC:F5:9C:1D:13:2C:F1:62
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/y0TH7rrhY8SM3FVFzPWcHRMs8WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c4:ab:d2:f9:22:63:31:0c:aa:f6:af:b3:1c:73:56:02:f9:
f5:d4:b2:13:91:f4:15:22:f9:04:7d:7f:b9:40:0e:e4:50:73:
5b:1f:78:98:88:be:31:32:54:e5:ea:72:8d:ab:c6:de:90:e0:
66:92:bd:4e:ad:29:4c:54:0c:ba:b9:a0:5f:7c:61:a7:16:2b:
2a:9f:f1:05:84:24:38:74:1c:4a:1e:2c:64:bb:05:9d:ef:89:
3f:4c:cb:db:a5:a8:7b:0b:f7:06:38:ab:e3:02:9d:e9:db:61:
7b:46:00:7f:f3:64:c2:6b:bf:32:d9:58:35:8a:2d:5a:c5:a6:
32:ed:4d:7d:e7:e0:37:a8:f1:2f:26:0d:dc:df:29:87:7a:fa:
88:70:e7:3e:cc:72:90:da:0f:cd:4a:2e:12:05:e0:9f:d4:4f:
cf:28:f7:6c:2d:f2:d4:cc:83:46:e8:b8:1e:d9:b4:4a:c3:ed:
42:11:6a:5c:fc:89:3b:2d:3b:06:f1:dd:67:b4:36:9d:e7:bb:
1b:1c:3c:4a:d8:f7:74:39:5d:9e:be:80:da:c9:1a:02:a0:6d:
ad:13:53:45:b9:be:be:1b:81:44:d8:89:c8:c1:30:3f:6a:f1:
bb:d2:c8:f5:10:82:c7:8e:2a:1b:bf:16:87:66:72:46:de:2b:
95:1a:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:31 2024 by rpki-client on console.sobornost.net