Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/N0tPszLkhQ63Jt1COfpoaeExako.roa
File: N0tPszLkhQ63Jt1COfpoaeExako.roa (raw, json)
Hash identifier: Peo8m0JAJKlhv3u09Stz9DW581a4MnSdxwSsv/wTun0=
Subject key identifier: 37:4B:4F:B3:32:E4:85:0E:B7:26:DD:42:39:FA:68:69:E1:31:6A:4A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 01857271152AE70DC226081064242457E9EE
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/N0tPszLkhQ63Jt1COfpoaeExako.roa
Signing time: Mon 02 Jan 2023 12:24:51 +0000
ROA not before: Mon 02 Jan 2023 12:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56702
IP address blocks: 91.226.223.0/24 maxlen: 24
91.226.222.0/23 maxlen: 23
91.226.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:15:2a:e7:0d:c2:26:08:10:64:24:24:57:e9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Jan 2 12:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=374b4fb332e4850eb726dd4239fa6869e1316a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:53:ed:c2:34:a4:ca:51:5e:91:ba:84:d8:
08:21:7f:bb:3c:e9:af:66:6c:65:f3:52:e7:38:8c:
96:46:9f:4d:58:b3:51:45:f6:8a:d1:e0:70:f0:33:
83:76:39:d8:ec:f5:24:2c:1d:0a:e0:f7:66:7f:07:
d3:49:a4:c5:3c:15:37:ac:9e:3a:8d:e5:34:2f:4f:
e2:9f:d5:b9:ec:f9:3d:cb:9b:20:8b:bb:39:51:02:
69:67:40:cf:2b:86:e9:f6:e6:2b:4a:d9:77:95:26:
66:6b:73:94:c9:56:d8:23:33:e5:ad:16:3c:68:76:
5f:fe:08:6f:34:68:67:b6:3f:6a:c9:fb:a2:19:c6:
2c:44:29:53:a1:ee:53:79:e6:8c:e1:c4:d0:cd:07:
89:3f:a1:0e:7e:9a:9d:16:da:62:a9:ab:01:47:64:
52:63:8e:da:19:43:1f:cb:9b:32:c1:7a:c5:f3:61:
77:06:4b:ed:bf:53:98:96:c2:a3:d5:be:e8:58:c6:
d0:cc:cb:79:03:74:ee:e2:b9:a5:a0:a3:4e:c9:08:
05:6d:47:90:f8:ad:90:ee:21:e5:89:a5:fb:66:cc:
2c:9a:55:35:ea:28:3c:2c:5f:1c:24:40:e1:01:0b:
f6:da:fc:6e:fe:51:12:98:bb:0a:fd:a2:4e:16:fc:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:4F:B3:32:E4:85:0E:B7:26:DD:42:39:FA:68:69:E1:31:6A:4A
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/N0tPszLkhQ63Jt1COfpoaeExako.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.222.0/23
Signature Algorithm: sha256WithRSAEncryption
61:25:ec:5e:08:26:ab:5e:b7:e4:97:4d:ea:42:77:c2:0d:13:
01:40:df:88:09:4d:6c:d6:4e:4c:b2:21:62:fb:57:91:76:f2:
63:bf:f3:25:5f:32:8f:2b:a0:0a:79:6d:a3:db:84:59:05:c5:
f7:1e:48:61:5c:7a:3f:ff:b4:20:fb:42:e5:2f:ed:f2:fc:49:
80:29:9e:41:73:98:7d:59:75:9d:2e:0c:dd:52:95:48:1f:cc:
22:a7:36:f7:ea:07:a5:f4:80:63:a6:22:61:e7:79:51:de:36:
40:3c:99:3a:4e:7b:88:41:06:c3:56:f6:b1:73:94:09:0b:3a:
3e:87:28:e5:79:3e:13:18:e0:39:fd:b0:6f:2a:cf:a6:cf:40:
ec:13:b0:35:ef:d7:15:f6:5c:e0:47:f8:07:57:90:9a:c3:f7:
59:67:fa:a3:5d:84:ed:ad:62:72:c7:da:e6:e5:c6:04:18:29:
18:9c:36:d4:e0:0f:20:c5:c8:d0:e5:43:06:89:c1:34:44:fb:
b5:1b:28:64:e3:85:1e:3e:02:69:23:db:18:ac:25:c8:c7:14:
82:b8:6b:4f:ea:10:fd:f2:a9:9e:76:57:c6:42:e1:1f:7c:dd:
16:b7:ae:bb:a9:98:fe:86:97:51:06:e0:80:29:84:26:cc:58:
86:b5:00:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:17:12 2024 by rpki-client on console.sobornost.net