Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/x623jLE9MrLKHXq7LczFhLFtxEA.roa
File: x623jLE9MrLKHXq7LczFhLFtxEA.roa (raw, json)
Hash identifier: 4U43v4S7ispqY7W95UGZRBTaWiKONLjav8V2C52k2No=
Subject key identifier: C7:AD:B7:8C:B1:3D:32:B2:CA:1D:7A:BB:2D:CC:C5:84:B1:6D:C4:40
Certificate issuer: /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial: 018724F11F1ED76DA810D49A30D9F8939FC5
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/x623jLE9MrLKHXq7LczFhLFtxEA.roa
Signing time: Mon 27 Mar 2023 21:19:54 +0000
ROA not before: Mon 27 Mar 2023 21:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49722
IP address blocks: 91.215.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:f1:1f:1e:d7:6d:a8:10:d4:9a:30:d9:f8:93:9f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Validity
Not Before: Mar 27 21:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7adb78cb13d32b2ca1d7abb2dccc584b16dc440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b2:95:4a:15:45:9f:e4:52:c3:d9:fc:74:9b:
fc:46:ff:47:cd:a2:d7:85:33:67:7a:fb:96:7f:9e:
4b:80:fe:73:8f:2b:40:bc:60:47:6e:fe:63:ec:09:
74:65:3d:09:6e:a0:d6:71:37:8b:73:a9:57:4c:c2:
76:6e:38:d1:c2:db:cc:05:c5:65:2b:b7:d8:10:05:
80:70:b6:ac:fd:49:4e:1b:dd:40:4f:4c:f5:2c:4e:
4f:63:a8:f7:5d:67:e1:4d:f4:1e:51:e2:f3:23:b1:
9f:c9:4b:4a:fe:4a:01:f3:51:b2:5d:85:9d:72:54:
df:30:bb:13:f1:93:0e:85:ad:5b:d7:db:7b:ca:e7:
b3:7a:d0:0d:8b:22:f9:9b:b3:70:45:cb:22:ec:50:
f2:3b:48:72:ca:61:d2:2b:e9:ea:fd:c8:b0:cc:69:
da:f1:f2:d5:55:7c:71:3f:52:00:90:33:c7:a5:6a:
96:59:c4:61:ed:bf:02:2e:5e:b6:c7:c8:81:b7:b1:
d7:30:8b:de:3b:c3:17:25:0a:51:d2:a4:98:14:53:
a5:57:8a:62:86:1c:9c:16:71:db:6d:15:43:4c:1a:
84:5a:fe:84:e3:52:71:d4:73:00:9c:32:e8:8a:b7:
b1:ed:47:79:06:04:36:e1:e5:04:68:f2:48:1b:df:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AD:B7:8C:B1:3D:32:B2:CA:1D:7A:BB:2D:CC:C5:84:B1:6D:C4:40
X509v3 Authority Key Identifier:
keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/x623jLE9MrLKHXq7LczFhLFtxEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.224.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:36:61:1d:1c:c7:28:5c:21:d6:ef:89:d2:99:e1:a4:cd:1f:
72:e7:02:28:d8:df:6f:4e:11:78:48:82:5d:4d:91:2c:1d:a2:
d7:da:e3:bb:e9:a7:b8:44:35:e1:b9:c9:e4:c3:02:91:d3:61:
2d:0d:4f:59:0c:9c:a4:65:1c:ed:05:c0:c4:5a:99:bf:27:7d:
af:82:6a:e5:5a:8c:65:86:28:df:a2:60:58:6b:f1:9d:70:90:
b9:80:7e:83:f9:7a:fa:01:3b:64:23:a5:5c:36:f5:1f:63:ac:
f5:f6:2b:c6:02:38:98:38:a3:13:08:c4:89:39:1a:63:93:28:
34:f1:97:07:59:bd:ca:a3:1c:8a:08:58:f2:0d:89:1e:12:1a:
f6:f8:c7:4d:19:dd:1f:28:f9:f8:de:9d:7b:91:1a:bf:8a:b9:
9b:ff:31:94:b2:a6:56:e6:d8:48:b7:03:b8:83:61:22:8c:7e:
a7:ab:6b:01:64:61:df:a7:fe:35:f9:3c:e0:d0:3d:87:6a:13:
bb:ed:ec:bf:ab:d7:30:85:56:60:c8:76:c8:fc:03:45:84:c5:
1b:1a:a2:b1:53:55:63:1d:d6:04:1b:e6:05:fe:de:cf:32:6b:
da:22:9e:24:b5:a6:d1:0e:b5:05:22:31:5b:64:4b:9c:ac:01:
4d:73:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:41 2024 by rpki-client on console.sobornost.net