Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/t404WWC4hEFCj0TKm_qBONigX48.roa
File: t404WWC4hEFCj0TKm_qBONigX48.roa (raw, json)
Hash identifier: 8R3GHDQUiHdn1MaMlWqTaYGYSBkN8cdssG9mwwPOSvQ=
Subject key identifier: B7:8D:38:59:60:B8:84:41:42:8F:44:CA:9B:FA:81:38:D8:A0:5F:8F
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 0185734382DF8337D1BCA975EEC6FB52808E
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/t404WWC4hEFCj0TKm_qBONigX48.roa
Signing time: Mon 02 Jan 2023 16:14:42 +0000
ROA not before: Mon 02 Jan 2023 16:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197368
IP address blocks: 91.220.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:43:82:df:83:37:d1:bc:a9:75:ee:c6:fb:52:80:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jan 2 16:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b78d385960b88441428f44ca9bfa8138d8a05f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:67:6d:77:08:76:81:a2:9a:17:c7:0b:e0:
39:cd:e4:6b:38:7f:62:1b:7a:8e:a7:69:75:00:6a:
32:10:5c:b8:4a:34:8f:0e:cf:ae:76:2d:76:15:8e:
02:df:fd:7f:d1:41:f6:07:99:d0:b9:ae:b5:64:a2:
7d:ac:15:3d:c3:2e:8f:4c:91:0d:a4:5e:e7:02:fe:
47:bc:1f:9f:f2:56:4d:fb:51:6a:3a:63:3e:b8:1c:
71:a4:4c:67:0e:76:65:c8:7c:c6:d6:e5:40:ce:b6:
4b:be:2e:ae:87:b0:1f:9c:68:dd:48:7e:c1:34:81:
d1:a9:ab:95:55:0e:a2:f2:dc:f2:32:c0:6d:81:ae:
83:0c:cd:d5:86:32:34:82:74:95:f5:20:3b:8d:cd:
69:6f:1b:5a:77:f2:86:49:bd:67:5b:65:7b:82:77:
c2:7c:34:d9:d5:ae:57:f8:5b:79:dc:6a:fc:bf:91:
60:8c:37:4e:0b:ff:ef:ab:61:67:61:33:83:83:44:
b4:e2:d0:44:8b:1c:4a:0c:b5:3a:7f:b9:94:df:f1:
8b:21:38:0b:a7:86:e7:87:b1:7f:6f:da:5d:2e:a7:
b0:aa:82:7a:57:ea:e2:b1:7f:73:ec:a3:e7:51:8f:
a0:2a:6e:5b:13:0a:23:ed:72:56:a3:c0:44:e9:a3:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:38:59:60:B8:84:41:42:8F:44:CA:9B:FA:81:38:D8:A0:5F:8F
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/t404WWC4hEFCj0TKm_qBONigX48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.44.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d6:c2:0f:f2:14:74:be:7e:fe:6f:2b:fa:a7:97:96:fa:87:
5b:35:33:d9:a0:f7:1b:0d:02:97:47:81:2f:fb:2e:08:21:f1:
d3:90:09:29:bf:05:26:d7:8b:0c:9f:dd:2a:68:c6:ea:a0:a4:
8f:0b:14:7f:0f:69:e4:e5:e3:a0:1b:f7:5d:1e:54:de:84:69:
42:0d:b7:88:db:e6:e0:70:df:d2:da:81:00:17:5b:fa:03:e1:
5c:f8:34:34:98:5e:c4:62:dd:02:35:e6:95:ed:15:b8:01:f9:
81:0c:0b:52:6a:5d:94:f1:b2:42:4a:33:8c:4f:49:01:23:1f:
9e:c1:57:51:6c:ce:46:49:a2:b4:c9:f7:95:83:f2:d9:46:0c:
aa:7a:b9:b4:34:80:3b:dc:e0:c6:5d:da:22:2c:b5:4b:ce:bf:
49:33:7e:f0:ee:32:e6:ae:f0:cb:08:7f:08:df:50:6b:d2:16:
85:e9:c8:d8:00:99:75:eb:e7:4d:29:99:5a:8f:fd:03:8c:44:
3c:48:da:d6:a1:5c:aa:34:8d:9c:c1:d3:6d:76:b7:e5:c4:15:
1f:3b:53:31:71:b6:17:e3:d1:87:75:da:81:87:0e:25:86:8f:
a3:61:f6:fc:e4:b4:c2:6b:69:12:bf:a1:60:71:c5:4f:3a:85:
ee:c7:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:34 2024 by rpki-client on console.sobornost.net