Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/kQ9FB_WffzYbrgajW-c8zhOxNeI.roa
File: kQ9FB_WffzYbrgajW-c8zhOxNeI.roa (raw, json)
Hash identifier: LB/B65fZgA9WeQZd8j7WpwtGFFVRFxcsreT0Cz5WWNg=
Subject key identifier: 91:0F:45:07:F5:9F:7F:36:1B:AE:06:A3:5B:E7:3C:CE:13:B1:35:E2
Certificate issuer: /CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Certificate serial: 0187E76A3DDC53A39EDEC8A66EDEE1F699CA
Authority key identifier: B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/kQ9FB_WffzYbrgajW-c8zhOxNeI.roa
Signing time: Thu 04 May 2023 15:38:32 +0000
ROA not before: Thu 04 May 2023 15:38:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42010
IP address blocks: 5.28.48.0/21 maxlen: 24
185.135.168.0/23 maxlen: 23
185.135.170.0/23 maxlen: 23
128.65.97.0/24 maxlen: 24
128.65.98.0/23 maxlen: 23
128.65.96.0/24 maxlen: 24
128.65.96.0/21 maxlen: 21
91.103.184.0/21 maxlen: 24
185.91.20.0/22 maxlen: 24
128.65.100.0/22 maxlen: 22
2a03:7f80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e7:6a:3d:dc:53:a3:9e:de:c8:a6:6e:de:e1:f6:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b220d91b4e9d70f034fa16a16a887d4255792ade
Validity
Not Before: May 4 15:38:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=910f4507f59f7f361bae06a35be73cce13b135e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:46:3b:9c:84:18:01:ba:31:5f:7f:5c:0f:
5b:4e:ea:65:bc:ad:7e:e6:c6:23:92:fd:a9:8c:93:
1d:75:ef:67:4c:3e:f6:98:58:32:b9:9a:e2:4b:3a:
18:f6:0f:24:32:f3:b3:1c:3d:41:8e:22:b7:c6:61:
59:d8:6e:09:f4:99:2d:1c:12:da:1b:58:80:0e:8a:
c7:9f:44:09:b8:3b:5b:e9:83:3f:cf:37:65:83:0e:
98:eb:f7:71:45:10:55:a2:9e:5c:10:24:e0:05:bc:
e0:fe:14:5d:7e:50:ba:7d:81:19:57:31:3c:c9:57:
ee:39:fb:c1:ee:69:28:4d:5e:b4:c9:86:79:61:61:
f9:69:89:4a:00:86:61:f0:dd:da:74:21:2b:6e:73:
07:53:51:77:8b:6a:84:e7:ed:62:dd:2f:2f:be:2c:
0f:77:88:55:31:db:c2:ba:64:83:8b:96:fe:9c:3d:
af:43:dd:c7:c0:5d:26:ce:f4:7e:01:a7:f6:4a:6c:
89:38:f0:12:97:1d:9b:c8:7e:b6:6a:8f:94:35:f0:
ee:98:1b:6a:c0:e3:07:06:c7:ad:76:a7:87:a8:6e:
13:b5:46:7d:9d:68:2f:4d:72:a8:ba:f6:d1:3c:27:
56:eb:53:84:88:dc:39:97:10:18:d8:ab:3c:9a:0c:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:45:07:F5:9F:7F:36:1B:AE:06:A3:5B:E7:3C:CE:13:B1:35:E2
X509v3 Authority Key Identifier:
keyid:B2:20:D9:1B:4E:9D:70:F0:34:FA:16:A1:6A:88:7D:42:55:79:2A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siDZG06dcPA0-hahaoh9QlV5Kt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/kQ9FB_WffzYbrgajW-c8zhOxNeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/543221-f267-4731-a7ad-987173b9e987/1/siDZG06dcPA0-hahaoh9QlV5Kt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.48.0/21
91.103.184.0/21
128.65.96.0/21
185.91.20.0/22
185.135.168.0/22
IPv6:
2a03:7f80::/32
Signature Algorithm: sha256WithRSAEncryption
41:75:05:83:c3:3e:29:4a:2a:bf:6c:63:9f:82:e2:5f:88:12:
7b:e0:81:49:35:48:92:ab:ce:6b:1d:aa:28:a4:28:01:f8:2f:
98:17:d5:24:04:69:69:a2:32:d1:88:83:88:09:61:85:5d:06:
55:d3:50:b6:44:e4:05:e0:7f:76:a5:97:8a:4d:50:ff:90:c4:
be:31:97:0e:c7:10:af:04:79:2f:b4:48:54:14:9f:90:d6:23:
d2:76:28:d0:47:05:ae:4c:c2:ec:34:a8:be:95:7b:94:4e:fe:
6b:3a:71:ec:58:f7:c9:7a:f2:1a:49:47:cb:5a:f9:49:00:be:
b4:1d:8e:58:ba:f5:ca:74:90:f9:c1:69:79:80:34:1b:cf:20:
44:88:27:d9:ca:2f:c7:37:94:9c:1a:f3:16:1c:21:4f:3b:06:
f2:80:8e:bb:39:4f:57:7c:02:de:4e:0d:c8:6b:e4:49:0d:e0:
dd:4f:00:c5:fd:9e:ef:45:10:36:bd:3b:54:6b:56:7b:49:8a:
d3:a7:83:52:c7:6f:61:c5:53:7c:8a:08:3e:98:1f:af:40:27:
ec:c9:fb:f6:e2:d4:2d:e0:15:12:b4:86:43:90:87:d6:a3:8a:
72:cb:d2:b2:dd:6e:a9:d8:fe:f9:92:a3:20:16:9e:4a:52:b2:
1f:40:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:37:18 2024 by rpki-client on console.sobornost.net