Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/0Fp-_ASSQqNHCKs9TMtif8mmEo0.roa
File: 0Fp-_ASSQqNHCKs9TMtif8mmEo0.roa (raw, json)
Hash identifier: BtKaA58DXQQ9v4pXYk0DB3iktTN7TuhbV4e4Ex6J3mY=
Subject key identifier: D0:5A:7E:FC:04:92:42:A3:47:08:AB:3D:4C:CB:62:7F:C9:A6:12:8D
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 01856F14AB354A400BE18A20DF2583059484
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/0Fp-_ASSQqNHCKs9TMtif8mmEo0.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198472
IP address blocks: 91.235.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ab:35:4a:40:0b:e1:8a:20:df:25:83:05:94:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d05a7efc049242a34708ab3d4ccb627fc9a6128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:37:63:cc:be:15:8e:fd:e6:ca:d5:d8:e4:
ed:09:dc:a9:5f:a0:7b:cc:28:02:e6:38:e5:d0:10:
58:0a:62:ff:0d:7a:4e:d9:2b:e5:b8:c0:83:65:16:
d2:31:34:f3:ab:68:64:ea:10:ff:8e:71:f2:f1:75:
6f:28:cc:a9:e6:b1:10:f3:86:58:63:e0:25:aa:1e:
0e:85:4b:d3:60:86:f7:89:64:07:b7:49:a2:4f:bf:
a2:65:6e:e8:28:a1:da:19:66:57:54:f4:0a:66:ce:
3d:f4:68:75:ea:ee:5d:76:59:90:e3:70:6d:9f:ea:
6b:c5:31:59:e7:d0:e6:43:87:52:bc:27:f8:6a:2a:
e0:64:72:a1:35:ae:4d:81:72:00:a6:89:4b:e5:60:
d9:fb:4b:db:00:2b:3c:0f:d4:de:f3:df:da:4b:3d:
ce:51:68:5a:6e:e0:0d:1b:6b:1a:c2:2d:29:18:6c:
c6:69:51:51:97:06:26:7e:9e:3a:ab:7a:93:5b:e8:
ce:2c:22:df:b1:41:6d:cd:db:b5:ed:75:ff:98:9a:
7a:dc:b4:3b:47:49:4a:9b:c1:b9:98:b9:92:c3:c6:
80:3d:d5:c8:34:1a:9d:62:51:a2:6a:67:cb:eb:b5:
84:b7:97:d1:73:99:bb:8a:37:13:09:f0:7d:b1:a5:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:7E:FC:04:92:42:A3:47:08:AB:3D:4C:CB:62:7F:C9:A6:12:8D
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/0Fp-_ASSQqNHCKs9TMtif8mmEo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:bf:7c:de:df:17:8f:ae:ef:88:13:dc:90:c4:9c:30:4f:1b:
52:e2:24:db:1a:5e:85:f0:14:e1:0c:b7:2d:c7:93:84:ee:e5:
3a:98:ad:dc:d9:83:b7:8d:50:85:f1:6e:bd:ee:ce:a0:26:f5:
ed:22:f3:3b:cf:ed:cc:e5:b3:df:8d:41:36:95:0e:dc:f6:12:
2d:01:f9:f8:2c:7f:7a:67:b5:60:51:46:70:61:fd:53:2d:7f:
24:d5:41:ff:86:78:e7:9e:52:8d:e3:77:1b:82:36:94:1a:5f:
df:10:d2:eb:92:b3:ac:cb:7a:aa:9b:4c:58:07:19:b6:52:60:
6a:45:5e:5b:05:d5:7f:93:a3:93:39:c0:00:1f:fd:25:f5:f6:
38:cc:5e:15:4e:99:08:cf:a9:7b:39:fa:ec:b2:94:6a:3d:2e:
48:b6:90:95:0b:9b:80:ce:57:cd:6c:78:dc:22:ba:7c:27:2f:
85:1e:f7:0b:b5:93:0e:33:1d:7b:a2:18:34:67:c8:a3:0c:c9:
b7:ba:f4:99:d5:dc:48:04:46:54:09:4d:60:f5:f0:3d:c3:f5:
e1:c0:60:6d:17:7b:8b:97:df:98:2c:68:8e:95:72:d4:d1:af:
95:71:40:1c:95:6f:97:4c:e9:a5:3a:af:9f:01:72:ca:8f:44:
b3:63:04:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:56 2024 by rpki-client on console.sobornost.net