Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/H5Opgg9TY1wp3v8oZF5lhr5R93s.roa
File: H5Opgg9TY1wp3v8oZF5lhr5R93s.roa (raw, json)
Hash identifier: Biz5QeoQy/DVk/ZILXmPW1HbiFvnXpWvaBDIz+BSbdE=
Subject key identifier: 1F:93:A9:82:0F:53:63:5C:29:DE:FF:28:64:5E:65:86:BE:51:F7:7B
Certificate issuer: /CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Certificate serial: 01856F5DBC9E68F88ED6563F12192815AC1F
Authority key identifier: 2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/H5Opgg9TY1wp3v8oZF5lhr5R93s.roa
Signing time: Sun 01 Jan 2023 22:04:52 +0000
ROA not before: Sun 01 Jan 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197659
IP address blocks: 91.223.228.0/24 maxlen: 24
185.188.48.0/22 maxlen: 22
2a0b:c080::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bc:9e:68:f8:8e:d6:56:3f:12:19:28:15:ac:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc515b71f91c6e56a14afb4eefd95061dec49d4
Validity
Not Before: Jan 1 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f93a9820f53635c29deff28645e6586be51f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:32:3a:60:90:59:8e:f4:94:61:c1:22:90:
da:04:5e:3d:12:ad:f0:b6:d0:d3:8d:8a:90:32:8c:
4d:6e:6d:97:b0:b9:ce:01:5b:9e:a6:e1:e8:33:06:
4d:b1:f2:78:c7:ff:a1:59:57:e8:33:95:d1:10:0b:
e4:56:1b:75:be:36:b9:2c:f7:be:aa:2e:d5:f2:52:
33:e1:8c:51:fd:59:24:09:44:60:e7:c1:76:a1:d9:
b8:b8:24:83:6a:24:b9:78:7b:1c:db:0a:51:4d:48:
9b:bf:37:1b:c9:c3:fc:20:14:e8:99:44:33:7f:17:
22:be:ac:c3:54:57:32:b6:0d:4f:a4:f4:4e:38:b9:
ac:10:d7:3d:48:8a:34:95:43:1b:f4:c4:d4:0d:63:
39:18:92:87:90:98:f4:a6:05:b3:05:cd:b9:ae:17:
2c:99:01:2d:b4:1a:6c:22:38:39:bd:b2:50:c0:34:
02:30:4f:f6:9c:18:cd:3c:0c:da:6f:de:95:8f:c2:
f2:ef:57:11:1a:1c:b7:d4:8c:04:10:69:1c:59:e1:
cf:ca:90:71:bb:46:b3:0f:6d:e0:7d:97:dd:48:db:
eb:5a:b1:07:06:6b:a4:e9:35:7f:aa:b4:d0:8c:fc:
d3:76:bf:17:33:70:52:ac:23:da:7c:d0:42:75:26:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:93:A9:82:0F:53:63:5C:29:DE:FF:28:64:5E:65:86:BE:51:F7:7B
X509v3 Authority Key Identifier:
keyid:2F:C5:15:B7:1F:91:C6:E5:6A:14:AF:B4:EE:FD:95:06:1D:EC:49:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8UVtx-RxuVqFK-07v2VBh3sSdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/H5Opgg9TY1wp3v8oZF5lhr5R93s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38f016-f821-4c3e-b391-e2037352725a/1/L8UVtx-RxuVqFK-07v2VBh3sSdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.228.0/24
185.188.48.0/22
IPv6:
2a0b:c080::/29
Signature Algorithm: sha256WithRSAEncryption
4f:83:ba:88:47:48:0f:e3:3f:8e:55:78:92:b4:e9:e7:01:dd:
ab:4a:e6:e6:f5:de:29:0c:82:11:12:06:6b:86:86:ff:db:7d:
cc:10:b6:19:c4:44:14:a3:14:bf:14:05:97:37:72:e9:10:3a:
40:02:44:82:7a:b8:3f:6f:d4:41:e3:b4:54:16:73:0a:01:cb:
6c:9b:b2:b8:76:6a:d5:cd:cb:03:77:ba:a5:d7:ec:97:a0:93:
7d:7a:f2:e5:0f:26:17:15:14:83:9b:7b:38:8b:e7:9b:6d:4f:
b8:9c:c3:43:df:7a:a7:60:8e:e0:05:19:8f:d3:f4:b4:79:9b:
e3:e6:d2:93:fd:d7:fc:18:ac:ce:26:48:f1:c7:cd:90:fa:c0:
9d:30:99:73:eb:dd:c7:52:13:b9:b9:4a:61:dc:fa:4d:d8:35:
ad:8b:91:4b:10:68:68:86:56:5f:9a:b3:ea:4b:cd:52:b8:59:
98:c2:54:45:04:aa:17:2b:ec:67:66:98:62:ff:16:ef:68:82:
00:ff:3b:1e:49:5f:33:38:a2:e8:d5:17:ea:2a:71:3c:bd:a6:
47:ef:62:a8:e8:69:06:ca:60:62:b0:58:42:6f:36:6f:95:95:
ba:3a:30:f8:1f:07:0e:82:51:ce:45:98:d1:11:ee:96:ae:5c:
a4:7c:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:25 2024 by rpki-client on console.sobornost.net