Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/k9J9jhZdeNHa4bgZcCgiUHS70Os.roa
File: k9J9jhZdeNHa4bgZcCgiUHS70Os.roa (raw, json)
Hash identifier: YENSXW1iz3M+MZBaVvGoaa6Re3f46U1V0+Y8BXITXKE=
Subject key identifier: 93:D2:7D:8E:16:5D:78:D1:DA:E1:B8:19:70:28:22:50:74:BB:D0:EB
Certificate issuer: /CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Certificate serial: 0185723A5481AD11831C7ADC9915F9C22C0F
Authority key identifier: 13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/k9J9jhZdeNHa4bgZcCgiUHS70Os.roa
Signing time: Mon 02 Jan 2023 11:25:03 +0000
ROA not before: Mon 02 Jan 2023 11:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197522
IP address blocks: 91.221.218.0/24 maxlen: 24
91.221.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:54:81:ad:11:83:1c:7a:dc:99:15:f9:c2:2c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d8042a28015d27f35b1f1ab73611e8511b6923
Validity
Not Before: Jan 2 11:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93d27d8e165d78d1dae1b8197028225074bbd0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:a7:ff:5f:9d:91:1d:32:b8:75:d9:1c:11:
f9:09:75:81:cc:60:6a:b2:6f:ea:20:96:a4:7f:8f:
66:a1:ef:26:f3:f8:5b:15:b8:d1:e3:f0:c7:8a:f3:
cf:8e:1a:9b:f1:be:4c:c5:cb:fd:86:e0:87:d5:13:
7c:08:b3:e5:e8:0d:00:9e:7d:5d:d8:b7:33:fe:5d:
09:34:50:73:a3:e3:d7:38:13:2b:ab:3b:b5:d5:e2:
3c:7d:78:e3:c3:de:ad:ab:f6:1c:52:6a:91:d7:57:
c0:69:46:8c:97:13:bc:d6:de:e3:e1:45:32:8a:86:
a2:c8:8f:7f:c4:eb:35:2c:ea:6b:ac:e7:41:80:d3:
dd:23:89:c1:83:f3:64:a0:6d:60:ad:91:0d:b2:67:
29:3b:51:59:b7:41:94:90:43:e6:e1:3e:ef:e8:0f:
06:ef:bf:65:c1:9a:78:65:02:40:72:27:c8:d3:70:
75:0f:68:92:25:42:ad:5b:20:23:f8:9b:4b:16:8d:
0d:05:ea:91:2a:0f:99:f1:db:a6:a9:0d:95:48:0b:
df:2b:6f:64:0c:ab:3b:b0:00:17:b1:a8:d9:94:5e:
00:3f:2b:25:22:08:f8:83:41:83:ed:9c:51:ce:f4:
95:c1:4d:5a:b5:08:54:6d:b1:c9:a9:28:d2:74:c5:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:7D:8E:16:5D:78:D1:DA:E1:B8:19:70:28:22:50:74:BB:D0:EB
X509v3 Authority Key Identifier:
keyid:13:D8:04:2A:28:01:5D:27:F3:5B:1F:1A:B7:36:11:E8:51:1B:69:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9gEKigBXSfzWx8atzYR6FEbaSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/k9J9jhZdeNHa4bgZcCgiUHS70Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d7f2d8-46cd-41fd-8008-a4296ad98635/1/E9gEKigBXSfzWx8atzYR6FEbaSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.218.0/23
Signature Algorithm: sha256WithRSAEncryption
93:9f:a5:b1:1c:94:84:45:59:8a:06:62:a1:ec:f7:04:63:1f:
28:19:1b:90:6f:b7:3c:28:35:c2:75:a4:b3:87:7e:3b:38:db:
63:be:44:f0:f3:05:6f:05:78:d0:1d:d6:82:e8:b7:d3:0c:13:
f3:67:86:4f:ac:f0:a4:44:af:13:c3:ff:9d:6b:a4:9f:1b:d9:
1f:08:74:94:9f:b0:aa:68:9f:f8:59:81:19:27:e3:5a:4a:44:
ea:d4:c2:7c:19:9e:c3:b8:31:fc:40:21:53:d2:d6:5d:e0:2f:
87:6a:a4:e1:d6:af:9e:38:2e:7a:9d:cd:44:a2:9b:49:f7:80:
33:d0:51:50:a0:ed:87:6a:a2:d7:84:b0:97:ce:53:9c:42:cb:
af:b7:e3:8a:4b:86:9a:db:b5:bf:e5:be:ff:d8:d0:d6:d2:28:
47:bb:15:8c:be:54:c8:a6:5c:49:29:15:33:57:5c:b3:52:be:
ae:e3:07:83:0a:5a:0f:3f:f7:5e:d8:53:45:fc:9e:8c:1d:b1:
b2:f7:2e:40:ed:02:19:3f:b2:4c:b3:60:f2:dd:0a:f6:54:e1:
c6:1f:fa:60:80:b3:4d:39:aa:ce:5a:65:94:8d:0b:7d:b6:4b:
a3:27:59:ee:4a:90:38:e5:7c:44:83:1a:71:64:30:d5:7f:65:
f9:22:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net