Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/eb44oi3RqGYlIvmirM27FGyz6eQ.roa
File: eb44oi3RqGYlIvmirM27FGyz6eQ.roa (raw, json)
Hash identifier: zkBmQDwahSfjCj/wTPKaDMLprP7EcO0SNFeE00JKjtM=
Subject key identifier: 79:BE:38:A2:2D:D1:A8:66:25:22:F9:A2:AC:CD:BB:14:6C:B3:E9:E4
Certificate issuer: /CN=90516379a042df7445e42efb3646d1f25a67d504
Certificate serial: 01856C6F010745CFE2FEC58E13CD8C4CE235
Authority key identifier: 90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/eb44oi3RqGYlIvmirM27FGyz6eQ.roa
Signing time: Sun 01 Jan 2023 08:24:52 +0000
ROA not before: Sun 01 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198348
IP address blocks: 91.233.230.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:01:07:45:cf:e2:fe:c5:8e:13:cd:8c:4c:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90516379a042df7445e42efb3646d1f25a67d504
Validity
Not Before: Jan 1 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79be38a22dd1a8662522f9a2accdbb146cb3e9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:61:73:81:72:3f:40:13:be:8c:27:e4:b1:
a8:ab:c4:e2:69:f4:f7:77:7f:88:29:87:a8:0f:c5:
3f:14:c6:f9:e8:ad:ad:38:0d:9b:e6:df:9d:cf:89:
b6:eb:6f:1f:4f:e2:db:d3:44:36:06:a8:56:5f:c9:
0f:b1:3a:68:32:d4:34:75:28:e5:d8:70:72:6a:89:
c1:62:82:06:4a:79:f3:ff:84:fb:63:49:40:26:33:
7c:47:e5:7c:2a:56:a5:4d:d3:dc:89:ae:a9:04:c6:
73:91:8c:e5:6b:75:96:3a:a4:68:60:fe:cc:af:5d:
da:65:36:a1:59:c5:09:45:17:4f:a1:43:70:c3:ce:
28:47:dc:d3:0e:a4:33:cc:5a:e7:7f:73:63:21:b9:
af:18:1b:87:0c:2b:33:e9:7f:74:7b:2e:cb:c0:a0:
1e:5e:de:97:3c:e0:08:91:23:ed:77:53:c7:a0:6b:
6c:3d:4a:9a:32:98:b7:d4:92:1c:9d:9c:af:6f:de:
bd:ec:f1:3a:f1:ec:61:cd:7a:e1:f1:29:e5:58:2b:
4e:d2:f8:f4:9b:6b:29:83:bb:a8:44:8c:47:7c:58:
1d:fd:be:82:f2:a3:a3:18:d2:91:9b:d6:52:e7:14:
ba:86:1f:ea:a1:41:9a:b3:0a:f4:e3:23:d0:72:21:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BE:38:A2:2D:D1:A8:66:25:22:F9:A2:AC:CD:BB:14:6C:B3:E9:E4
X509v3 Authority Key Identifier:
keyid:90:51:63:79:A0:42:DF:74:45:E4:2E:FB:36:46:D1:F2:5A:67:D5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFFjeaBC33RF5C77NkbR8lpn1QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/eb44oi3RqGYlIvmirM27FGyz6eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a5d98f-fa7e-401f-808f-44a91ba17b08/1/kFFjeaBC33RF5C77NkbR8lpn1QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.230.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:60:26:c6:a0:d8:6b:78:e7:4b:25:17:c1:6c:75:fe:0b:4d:
99:af:3c:6d:f8:41:2d:2e:78:6a:2b:f2:b7:85:11:11:fa:a7:
a8:94:eb:c7:cf:e0:d7:59:02:8c:ee:1a:57:4c:a2:31:d3:73:
ff:c1:ac:db:32:20:bb:a4:14:2c:82:ad:ec:fd:a5:5c:84:4f:
94:bc:52:dc:f1:47:fe:27:65:b0:3a:7b:b5:d1:81:ec:91:63:
08:18:57:3f:50:1d:c1:d0:ba:5a:2c:d3:d4:04:a7:a7:e4:ab:
37:7b:94:d9:f5:42:36:2e:d9:60:7d:1f:7a:0e:65:d7:56:29:
d1:eb:a7:1a:97:01:b0:42:9d:b2:da:87:e6:63:89:93:b1:e7:
df:7f:f5:78:b4:46:d5:52:48:7c:6b:ad:e3:a9:93:ec:c7:6c:
62:4f:5a:c0:2f:c2:09:02:1e:58:19:06:42:5f:29:6a:f8:38:
71:9f:12:60:aa:6e:de:40:56:d9:f3:54:b7:73:87:0f:79:7b:
ae:e5:74:e5:63:c5:13:14:6a:d1:0c:93:14:4f:a0:4a:71:79:
c6:a7:9b:dc:2f:69:0e:39:73:14:3d:a7:c0:70:f9:d8:1e:6e:
e3:07:73:a4:56:97:bf:34:32:7c:e7:f5:8c:cb:31:6c:ec:9f:
e9:fb:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:54 2024 by rpki-client on console.sobornost.net