Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/Ucb6siZFlQ_ZvhcYqF7L2p4Kiks.roa
File: Ucb6siZFlQ_ZvhcYqF7L2p4Kiks.roa (raw, json)
Hash identifier: YvB48c0s2I/ajuzLj9vL1m9DSTDj7AwK5APke0tmfG8=
Subject key identifier: 51:C6:FA:B2:26:45:95:0F:D9:BE:17:18:A8:5E:CB:DA:9E:0A:8A:4B
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 01856F2FDED42CE2C491ACF849E925A0453B
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/Ucb6siZFlQ_ZvhcYqF7L2p4Kiks.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42852
IP address blocks: 149.3.152.0/22 maxlen: 22
149.3.156.0/22 maxlen: 22
91.151.224.0/22 maxlen: 22
91.151.232.0/22 maxlen: 22
91.151.228.0/22 maxlen: 22
91.151.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:de:d4:2c:e2:c4:91:ac:f8:49:e9:25:a0:45:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51c6fab22645950fd9be1718a85ecbda9e0a8a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:88:fa:ff:cd:d9:0a:eb:0c:4d:0a:12:01:
cc:3d:05:ab:ab:6b:63:29:34:a7:bf:1e:8c:f6:d7:
b5:36:98:ba:f8:be:5b:fa:03:7b:b0:93:31:3f:7f:
21:7f:c9:93:6b:26:78:59:0c:2d:a0:9d:e6:bd:6e:
b9:20:87:1b:25:34:f1:30:85:74:aa:6d:94:73:9c:
bf:06:bb:ee:21:31:cc:67:8f:e5:8b:6d:d1:f6:ca:
fd:2e:dd:a0:23:8b:28:72:46:7e:23:39:e9:79:be:
b3:b9:33:2e:dd:12:99:16:fb:6e:9d:93:c5:3c:65:
6b:81:b9:cd:9f:fd:d0:34:22:e7:f8:56:ca:8d:04:
4c:00:9f:e8:6c:72:ae:b4:bb:89:b7:c0:d1:7f:58:
23:ee:20:68:26:1e:0a:1d:65:d8:4a:6f:14:82:66:
76:b0:95:6e:53:30:6d:28:c3:75:ed:34:78:34:bd:
b5:80:eb:cd:fc:fc:ac:c4:a7:78:98:d4:42:4e:5f:
d4:de:24:55:4c:8a:4f:58:ae:73:7f:08:07:0b:53:
80:7a:05:b1:d6:57:67:27:8f:3b:1f:2e:4b:16:87:
cc:80:39:4b:1e:75:20:78:b2:40:1f:82:65:1b:c2:
67:f5:65:f9:87:9b:95:5d:11:a0:e8:8a:ed:17:c2:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C6:FA:B2:26:45:95:0F:D9:BE:17:18:A8:5E:CB:DA:9E:0A:8A:4B
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/Ucb6siZFlQ_ZvhcYqF7L2p4Kiks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.224.0/20
149.3.152.0/21
Signature Algorithm: sha256WithRSAEncryption
31:ef:e2:d5:42:ed:b9:5e:a3:d8:9a:14:fe:ba:1b:51:6f:50:
48:93:c1:20:5d:09:9c:9b:75:ea:2c:49:e6:d4:6e:b8:d4:8f:
6f:13:f9:a5:c4:62:a5:28:f3:51:89:bd:ec:59:cd:dc:d3:fe:
39:3e:a3:8e:3e:37:f6:69:1d:9e:13:f3:77:58:52:13:40:62:
f3:b0:da:10:9f:27:38:16:a6:22:90:c0:ba:0c:98:e2:78:9b:
f8:cd:d1:be:ea:00:1f:53:88:99:b6:7e:19:4f:03:79:6d:48:
54:9d:c8:d1:d5:da:2d:b5:1b:84:0f:15:94:eb:55:8e:53:59:
d3:2c:f7:2c:82:4a:53:c8:f3:be:39:12:f8:a9:37:63:dd:5a:
ec:86:79:56:0c:6e:47:70:92:8a:1c:fa:61:fa:9a:0a:ab:37:
57:5c:bd:9c:43:37:48:92:8b:9a:30:30:0b:b4:5f:ae:d4:aa:
43:39:3e:a3:7c:7d:42:59:71:45:d0:b8:b3:27:1a:d6:b2:e9:
4c:d3:9b:3e:4b:94:c1:f6:6e:35:25:cf:b6:ec:60:ac:d3:98:
45:ab:0b:7c:d9:31:14:ed:10:3d:c8:3a:d8:f2:fa:ef:77:b7:
73:2d:2e:be:e0:0c:57:f1:22:3a:ca:32:58:6b:a3:fc:ff:2b:
8f:4e:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net