Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/sL8XwoiEnZQ8SOz9Takaj4x7WjM.roa
File: sL8XwoiEnZQ8SOz9Takaj4x7WjM.roa (raw, json)
Hash identifier: N3Wtwphu27hF2zQGdHj8IhMDCh96LAU+mg+DbJSiA20=
Subject key identifier: B0:BF:17:C2:88:84:9D:94:3C:48:EC:FD:4D:A9:1A:8F:8C:7B:5A:33
Certificate issuer: /CN=cb6b9c413711df48d006b9e16b5a30efe39ffaae
Certificate serial: 01856D6F50AD6F7BAE0580F00E9CEA0723F2
Authority key identifier: CB:6B:9C:41:37:11:DF:48:D0:06:B9:E1:6B:5A:30:EF:E3:9F:FA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2ucQTcR30jQBrnha1ow7-Of-q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/sL8XwoiEnZQ8SOz9Takaj4x7WjM.roa
Signing time: Sun 01 Jan 2023 13:04:49 +0000
ROA not before: Sun 01 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.207.13.0/24 maxlen: 24
91.207.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:50:ad:6f:7b:ae:05:80:f0:0e:9c:ea:07:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6b9c413711df48d006b9e16b5a30efe39ffaae
Validity
Not Before: Jan 1 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0bf17c288849d943c48ecfd4da91a8f8c7b5a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:92:13:fa:d5:8c:9e:b9:bf:6c:c7:90:77:
e9:3a:97:b3:a8:3a:3b:74:ba:3c:4e:b2:a2:99:46:
2e:9c:7d:d8:d4:c3:19:76:c7:d5:fa:aa:54:9b:d5:
66:ca:56:f7:e6:3e:41:2d:71:9e:4c:fd:76:28:75:
64:61:fa:db:38:e1:b1:1d:6a:e7:20:b1:ad:fb:d0:
25:46:8f:0b:10:cf:c7:aa:8b:a9:69:07:4b:9e:3a:
9d:c9:9d:18:f0:76:88:21:57:67:b2:fd:6f:13:b1:
2d:10:70:81:b7:e3:e5:c3:88:78:8a:fe:a7:50:18:
df:a2:ce:b7:10:05:75:b2:bb:eb:a5:fa:3c:01:20:
f2:24:9f:79:93:c5:1b:16:f3:83:2a:75:48:77:8a:
42:74:da:83:9a:30:95:49:98:f7:9d:76:a5:2c:bb:
53:d5:3e:57:29:76:28:f4:2c:72:70:50:d9:3d:70:
8f:6a:05:12:a9:9d:a3:a1:66:10:05:03:34:25:50:
e5:78:93:b0:4a:2f:99:18:bc:70:1e:3e:d9:44:ce:
90:17:5a:c3:8a:6f:8c:32:e6:55:62:80:74:6f:25:
09:9c:eb:24:d4:47:ec:96:bb:32:c6:27:a4:67:f4:
c9:75:ad:f1:3d:0e:39:f1:f7:d6:56:64:d0:d7:f4:
9e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BF:17:C2:88:84:9D:94:3C:48:EC:FD:4D:A9:1A:8F:8C:7B:5A:33
X509v3 Authority Key Identifier:
keyid:CB:6B:9C:41:37:11:DF:48:D0:06:B9:E1:6B:5A:30:EF:E3:9F:FA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2ucQTcR30jQBrnha1ow7-Of-q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/sL8XwoiEnZQ8SOz9Takaj4x7WjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d88fb2-a77b-4490-afc1-46c1aa098268/1/y2ucQTcR30jQBrnha1ow7-Of-q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.12.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:d8:2b:f1:d4:ec:70:83:cc:2e:e6:0c:80:b4:fe:a3:89:89:
6a:1e:7b:a8:3d:d5:6d:d1:73:6e:70:ee:b1:36:eb:9e:5f:48:
79:13:0f:38:a3:94:19:3f:1a:81:93:ae:f2:8b:5f:21:34:f7:
75:10:53:92:65:8e:f2:bb:00:c5:c9:32:c1:00:90:ec:9a:1d:
93:0f:40:a1:f5:eb:78:30:05:3d:04:25:c6:f2:2c:05:2c:2b:
f1:ff:4f:a3:af:d5:e6:9f:db:b0:75:05:3b:b2:ac:37:df:e7:
02:16:78:59:3e:be:f3:0c:e4:e1:41:0e:8b:a0:f1:c9:2d:60:
0a:a8:b8:a1:a3:8c:e5:4c:cc:47:57:29:93:a5:bd:29:8d:a2:
b1:b3:73:9a:d0:b6:33:31:63:d0:3e:14:1c:f3:3d:ce:e8:ce:
f1:d2:c7:72:1b:76:7e:4e:ad:be:91:4e:d1:0a:ca:a8:d8:5d:
6b:ed:e8:02:08:fc:26:59:fb:72:a8:2a:f0:cc:4e:26:ea:98:
02:4f:c9:23:f8:11:41:0f:6f:3f:43:7d:c0:70:75:ea:10:c8:
5e:48:8b:f4:56:6b:c0:af:50:4c:8f:d5:6c:15:cb:b0:c1:c2:
57:89:7b:5d:e2:16:96:c8:b1:84:df:b0:33:b4:9b:b3:62:ee:
88:fe:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:30 2024 by rpki-client on console.sobornost.net