Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/QLPQor9vVD03tFGovBxmlPRq_6s.roa
File: QLPQor9vVD03tFGovBxmlPRq_6s.roa (raw, json)
Hash identifier: T09DYsdvN1FYeXE4BAtlaGgdwmfrhQ75aYUfwe34x28=
Subject key identifier: 40:B3:D0:A2:BF:6F:54:3D:37:B4:51:A8:BC:1C:66:94:F4:6A:FF:AB
Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial: 0189D56E17A98FAA3BD76908F66FF690DF50
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/QLPQor9vVD03tFGovBxmlPRq_6s.roa
Signing time: Tue 08 Aug 2023 13:55:09 +0000
ROA not before: Tue 08 Aug 2023 13:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203730
IP address blocks: 91.217.11.0/24 maxlen: 24
91.217.10.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:6e:17:a9:8f:aa:3b:d7:69:08:f6:6f:f6:90:df:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
Validity
Not Before: Aug 8 13:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40b3d0a2bf6f543d37b451a8bc1c6694f46affab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:ac:4b:b7:5d:e0:87:cb:a9:e2:32:78:35:
44:16:d5:7b:89:86:b2:25:47:90:c0:16:f0:4d:8b:
23:0b:9f:01:4d:72:f4:ba:cf:08:f0:dd:5d:83:21:
cc:c2:06:77:5d:65:01:87:6c:86:c7:32:9d:6c:e7:
61:03:4f:2a:38:fb:8a:77:53:4d:a4:bc:1f:21:30:
df:4b:35:d9:d8:89:22:3f:dc:3c:f3:5a:33:8c:f5:
64:5e:8f:74:ce:a1:2e:c3:b7:80:fe:e4:08:e4:57:
62:be:94:a8:de:a5:98:7a:02:b2:a4:0e:14:a0:db:
92:3a:aa:41:a6:42:b0:9b:91:7f:30:2d:d0:61:7f:
c7:4b:8e:17:a5:87:ea:09:c8:35:3e:82:f2:df:b4:
89:1f:de:ab:04:a6:bc:9f:93:78:54:b1:6b:5f:72:
b9:8c:48:ca:db:c7:4c:c8:84:47:e8:d2:5a:25:b3:
1b:4c:80:1a:8a:09:39:df:48:ba:05:10:b4:25:4c:
a1:0c:29:7c:fd:82:a5:a3:7b:c8:7b:35:fd:0d:0f:
97:98:de:c0:98:54:2c:60:bf:08:bb:5f:94:6b:3c:
c8:e0:52:e7:97:49:dc:74:34:73:dc:05:1c:e5:eb:
0c:2b:cd:79:79:6e:2b:05:bd:f5:8a:92:43:b4:c1:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B3:D0:A2:BF:6F:54:3D:37:B4:51:A8:BC:1C:66:94:F4:6A:FF:AB
X509v3 Authority Key Identifier:
keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/QLPQor9vVD03tFGovBxmlPRq_6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.10.0/23
Signature Algorithm: sha256WithRSAEncryption
57:01:02:24:1f:55:5f:6c:25:f0:21:c9:18:ba:cb:bd:2e:66:
f1:b1:a6:d1:a1:6c:56:42:6e:b0:1a:58:cf:71:94:9b:11:a6:
e8:a0:69:8d:4e:b3:32:b9:5d:12:42:69:4a:36:7d:e3:67:01:
45:56:01:3d:66:6b:34:c4:cf:39:fc:b9:9f:6d:6a:ec:c7:05:
ec:0a:13:76:7f:0f:d2:51:4d:b9:37:6f:41:71:9f:d4:14:0d:
62:87:64:85:36:a2:33:09:19:c2:71:1f:ea:8c:20:04:2d:a5:
f9:a6:12:f8:30:08:c2:43:a6:29:23:64:d2:d5:92:c8:69:b2:
8f:a9:0d:5c:12:4b:a5:18:b6:f0:55:fd:d1:9c:08:95:85:a5:
f0:87:9c:f0:3a:7f:77:5a:31:44:6d:3f:18:12:f4:fc:47:5d:
a3:bb:6f:d2:79:e5:6a:15:cc:8c:17:cb:16:0d:29:76:5c:5e:
22:67:10:10:b1:2b:c6:26:a0:ed:56:79:6c:f6:5c:cb:a7:ea:
49:5e:9e:2d:46:f3:1d:0f:70:ba:d4:d8:26:af:a0:f4:0c:7f:
d3:99:ca:57:ba:c3:c0:e9:4c:cc:94:f3:f8:65:ec:13:b8:66:
d4:59:df:e9:f7:c7:38:64:b5:25:fe:18:81:2c:64:2a:c3:79:
4d:71:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:53 2024 by rpki-client on console.sobornost.net