Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/g3hlmmb7hHVlxq9yc0-r8lDGPwA.roa
File: g3hlmmb7hHVlxq9yc0-r8lDGPwA.roa (raw, json)
Hash identifier: ShUVDoDVQdnuzEU7XQOweM1Wh7/IsVJou3eQXgCo5IE=
Subject key identifier: 83:78:65:9A:66:FB:84:75:65:C6:AF:72:73:4F:AB:F2:50:C6:3F:00
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 01856CEF2ED83A32767940C46228E0ADFB43
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/g3hlmmb7hHVlxq9yc0-r8lDGPwA.roa
Signing time: Sun 01 Jan 2023 10:44:52 +0000
ROA not before: Sun 01 Jan 2023 10:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 91.151.16.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:2e:d8:3a:32:76:79:40:c4:62:28:e0:ad:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: Jan 1 10:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8378659a66fb847565c6af72734fabf250c63f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:95:74:75:1c:6f:6d:d4:55:86:5a:ec:ae:
44:43:98:7b:ba:3e:d2:67:af:3f:e4:29:9a:c0:f8:
89:82:fc:9e:93:6e:b6:78:6d:35:fd:81:f1:7f:2b:
3d:43:75:3f:98:69:62:7f:27:23:29:32:8c:2f:be:
0e:52:bd:fe:c0:b5:60:1a:61:3a:fe:b2:6e:a9:f8:
a8:b7:77:41:3a:fe:7d:42:e2:9d:93:58:1d:fe:53:
3e:a5:7c:98:82:93:1d:82:e6:50:d8:43:2f:49:e5:
70:b9:21:a1:bf:fa:12:e6:32:11:fd:30:04:e6:4d:
93:fb:07:51:c4:52:95:18:e4:d0:95:97:1c:92:91:
bc:bb:f8:36:ca:8b:31:3f:62:2b:44:06:ce:cd:52:
c3:e6:24:b2:1d:5a:ef:6b:05:e1:8f:38:7e:05:9a:
53:05:4c:41:9f:1c:ec:1e:bc:a1:45:f6:5c:24:b5:
80:76:37:a7:37:ff:cd:d8:fb:05:41:de:78:7e:64:
d1:32:47:44:ee:41:0e:b5:a5:c3:28:94:01:0a:0a:
b9:b2:5b:7a:29:8b:e0:ac:50:5e:a9:dc:bb:26:0c:
26:e9:ba:5f:99:3e:ef:df:24:5c:f9:cb:47:95:00:
60:ec:b6:49:4e:e0:df:5e:db:50:f1:c7:71:f5:6b:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:78:65:9A:66:FB:84:75:65:C6:AF:72:73:4F:AB:F2:50:C6:3F:00
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/g3hlmmb7hHVlxq9yc0-r8lDGPwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.16.0/22
Signature Algorithm: sha256WithRSAEncryption
11:10:c1:5e:aa:8f:25:e7:84:0c:7b:b8:2a:c7:dc:c5:22:50:
02:45:79:d5:6c:c0:eb:e7:c4:c0:1a:b8:34:b7:b1:db:8a:f1:
cb:32:8e:26:7f:2c:66:b1:19:c9:0e:4b:df:ff:86:41:02:2a:
b8:e1:62:5f:a8:ee:ce:65:d4:56:6f:5a:e0:9e:5c:54:c0:4d:
7c:5d:b9:ec:1d:8a:e1:e2:e0:fb:25:7f:45:6f:f1:00:00:c5:
9e:3a:ec:78:bb:e8:10:10:54:4d:95:27:c3:8b:68:9e:dc:0e:
67:28:15:d5:61:76:3c:6f:7a:db:6e:9e:85:0a:2a:ed:ce:39:
c9:ee:1c:51:b4:4e:b1:60:f5:6d:70:1d:29:7d:22:5b:16:4d:
a6:24:cd:25:a4:2b:d4:33:7f:28:53:08:09:8e:6c:69:61:7c:
d0:79:9e:fd:9f:0c:39:77:c7:f5:a0:83:73:43:0c:66:0e:f5:
53:84:4f:ed:7c:76:2c:53:e3:92:6f:96:5f:be:91:73:ba:2d:
cd:04:7b:6f:4a:50:86:76:95:39:3c:47:2a:bc:63:f9:c7:61:
25:7b:ec:50:3c:10:58:5b:f4:6d:4e:94:e5:8a:5d:c5:d4:8b:
c7:3e:4f:f6:fd:75:5d:5c:9e:c0:f4:44:37:80:41:d5:e6:89:
0d:9c:a6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:51 2024 by rpki-client on console.sobornost.net