Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/LglE9pVenA-zQsld7dHcEIB-daY.roa
File: LglE9pVenA-zQsld7dHcEIB-daY.roa (raw, json)
Hash identifier: TBG5llBLYOTQ1G9NLEzDx9SznFjKsTdi6xvylVKI8co=
Subject key identifier: 2E:09:44:F6:95:5E:9C:0F:B3:42:C9:5D:ED:D1:DC:10:80:7E:75:A6
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 01856ED4C30A74376FF06AB74437E80D413E
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/LglE9pVenA-zQsld7dHcEIB-daY.roa
Signing time: Sun 01 Jan 2023 19:35:15 +0000
ROA not before: Sun 01 Jan 2023 19:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48756
IP address blocks: 91.212.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c3:0a:74:37:6f:f0:6a:b7:44:37:e8:0d:41:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: Jan 1 19:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0944f6955e9c0fb342c95dedd1dc10807e75a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:30:71:10:e3:12:e4:95:c2:05:bf:fe:56:
24:a4:0e:a7:4b:24:5a:f7:20:8d:94:7f:1f:c3:3c:
bf:43:33:3b:fd:ac:06:29:45:70:24:ff:0b:c7:cd:
a9:ed:db:6a:ec:d7:7c:35:82:9d:d3:2a:df:5a:cc:
7f:48:89:14:98:89:33:70:a9:06:82:72:d3:97:29:
02:23:f5:95:ec:58:80:35:43:41:84:f0:c8:2d:82:
7e:3d:76:d9:b0:97:35:a4:b0:27:fb:9f:eb:95:45:
7c:01:0b:44:54:85:84:36:24:9a:c5:c5:4a:2e:d1:
8b:27:7f:03:bc:03:a4:46:2b:78:56:7c:68:87:85:
8e:ec:d2:b6:f5:dc:4c:f2:31:7e:69:59:14:d5:b8:
46:8e:80:af:66:86:24:7e:ad:6f:ad:f2:cf:7c:c0:
26:f6:35:60:1d:11:f1:e5:bd:49:43:6b:89:30:32:
59:61:8a:b9:e0:d6:46:d3:08:6c:c5:66:24:00:2d:
cb:d7:80:d1:ae:d7:d5:00:ed:cf:9c:f1:d5:b1:1c:
ca:3c:86:27:c1:8e:58:01:1d:0e:56:85:29:90:1e:
57:72:1b:70:d7:da:86:27:40:f4:12:c3:0e:3c:8b:
1e:20:10:f1:af:29:4d:de:d5:70:3f:94:1d:55:67:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:09:44:F6:95:5E:9C:0F:B3:42:C9:5D:ED:D1:DC:10:80:7E:75:A6
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/LglE9pVenA-zQsld7dHcEIB-daY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.22.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fe:9f:21:2c:46:9a:fc:69:3e:52:2b:54:be:9b:04:5c:e1:
78:6f:d5:95:6d:95:0b:5c:86:1d:f2:e7:e0:4c:76:b3:6d:7c:
7e:b8:10:3d:5d:1f:5e:62:52:19:1f:04:c1:2a:06:63:f5:8d:
72:22:4e:be:9f:89:23:d8:ef:5b:27:75:3f:d3:95:3f:70:de:
d2:c3:38:2d:97:55:2d:80:8c:6e:8a:bd:7b:22:8b:ad:40:8b:
48:d6:91:91:45:0c:80:85:98:4a:f9:b7:52:5e:e5:af:6e:f3:
04:d9:3f:9d:13:fc:d2:9d:4e:7a:b5:1c:11:c2:49:96:c6:3a:
d2:cf:9b:9b:a0:b1:9e:58:82:e0:d5:38:8b:12:c3:44:0a:02:
50:2c:b0:a7:48:c5:b2:68:a3:cc:77:80:9a:46:6c:cc:04:f3:
12:95:58:fc:1e:dc:5b:b2:cb:e5:fe:fd:91:6a:95:a9:6b:34:
32:52:76:b0:d4:bd:f6:cb:44:78:9d:ab:9e:64:9e:70:8f:72:
f8:d5:1c:00:ad:dd:5a:10:46:45:2a:78:b7:e2:af:37:31:b1:
d2:37:eb:d2:f0:73:81:ea:75:fc:2e:45:d6:2f:0f:d3:20:b9:
ac:04:99:b8:a5:9e:c3:6d:57:c1:09:f3:c9:fd:55:33:c7:0e:
6b:20:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:01 2024 by rpki-client on console.sobornost.net