Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/SWRISjOyF4MMLa6__z_wDERKX1o.roa
File: SWRISjOyF4MMLa6__z_wDERKX1o.roa (raw, json)
Hash identifier: +9Qz7/rwZCNSkarKkVps5It8X5Zg4c3cC7xVSowrZtw=
Subject key identifier: 49:64:48:4A:33:B2:17:83:0C:2D:AE:BF:FF:3F:F0:0C:44:4A:5F:5A
Certificate issuer: /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial: 018BB997FC4BED28EE0DEA4C774B6FC3C7F7
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/SWRISjOyF4MMLa6__z_wDERKX1o.roa
Signing time: Fri 10 Nov 2023 14:17:07 +0000
ROA not before: Fri 10 Nov 2023 14:17:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57752
IP address blocks: 91.236.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:97:fc:4b:ed:28:ee:0d:ea:4c:77:4b:6f:c3:c7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Validity
Not Before: Nov 10 14:17:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4964484a33b217830c2daebfff3ff00c444a5f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:46:12:74:12:6a:6a:46:78:59:35:5d:b5:eb:
ba:b6:91:ec:76:19:c3:f4:95:7e:ea:80:82:95:20:
8a:9a:02:8d:5e:77:ea:44:90:df:50:e6:1e:c3:89:
8b:5c:10:55:ca:52:4d:a0:29:43:1c:87:9c:12:65:
a9:92:f8:86:b2:6c:65:35:63:31:e6:6c:a3:b4:21:
ab:c1:e1:c1:31:01:b1:92:e5:d6:29:bd:da:d5:df:
36:9d:21:27:a7:c8:9e:fc:cc:95:89:08:61:0b:e8:
0c:f1:29:72:2f:cd:b8:55:bd:a7:a4:32:1d:35:a8:
e6:59:78:77:31:46:6c:00:ea:55:18:5e:ed:78:d5:
bd:06:b1:cb:47:c1:ac:3d:68:64:1e:25:23:31:bb:
6c:67:56:59:92:fe:eb:90:ef:14:e2:48:5e:e5:f8:
ea:df:5b:0a:3f:04:aa:a0:b3:19:32:8e:b6:d4:36:
0d:34:ec:b9:b2:fc:47:c8:d0:e3:79:c8:57:3d:a3:
1c:25:0e:9d:7b:1a:eb:8f:3a:be:de:58:2e:94:a8:
6f:06:5e:ad:00:54:a4:0c:4b:c5:b0:2d:21:09:62:
d2:8a:d1:1f:0f:0e:ea:72:0e:71:25:de:af:bf:bc:
eb:a8:04:82:39:a6:af:0f:e0:da:78:ae:c5:de:3f:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:48:4A:33:B2:17:83:0C:2D:AE:BF:FF:3F:F0:0C:44:4A:5F:5A
X509v3 Authority Key Identifier:
keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/SWRISjOyF4MMLa6__z_wDERKX1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.161.0/24
Signature Algorithm: sha256WithRSAEncryption
48:88:b4:1d:50:d6:de:f2:8d:70:f3:ad:a0:8a:c0:51:a5:eb:
66:5f:93:01:73:88:29:c6:ae:0c:ac:fe:f6:3e:90:9d:1d:44:
f1:48:e1:77:3c:f3:23:33:e4:4e:f1:ba:77:bc:d7:3b:0d:0a:
7b:46:69:63:e2:85:b6:11:ce:49:11:3b:ad:7e:3b:b7:f5:73:
6f:26:3c:9d:b0:0e:39:3f:95:5d:67:1d:fd:99:0a:57:23:31:
eb:d5:f6:80:b2:a4:04:96:ac:2d:33:d0:34:eb:1b:9e:36:bb:
8f:33:0e:23:65:cc:10:d3:1f:0a:d6:a5:5f:a3:a6:bf:eb:1b:
ac:a5:c7:e2:50:85:c1:c6:50:be:2e:a1:81:5c:12:56:ac:d0:
80:ee:6d:e1:d1:6e:9b:02:30:66:e9:f9:a1:9c:82:b9:75:40:
a0:7a:78:05:e1:5d:b5:4f:f9:f7:dd:7c:3e:ba:a6:bd:22:43:
05:eb:38:4e:b5:12:cd:36:65:61:3b:df:e6:50:36:63:1e:6c:
86:fe:e6:24:20:fe:00:b6:c0:a6:9e:76:18:14:4c:9b:f7:19:
17:4e:d4:85:f6:b7:6f:0e:a2:09:99:39:d9:0d:43:d5:27:2b:
c5:5d:dc:b5:5f:0b:89:b0:e5:94:62:f9:e8:f5:f2:46:cf:a4:
d1:57:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:13 2024 by rpki-client on console.sobornost.net