Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/y3MAVYOucFehRpH4CkC6a-9Ik1Q.roa
File: y3MAVYOucFehRpH4CkC6a-9Ik1Q.roa (raw, json)
Hash identifier: cu0Wcw5X6Bimz5LJKO1LFS29gVtRxo2Cxiy6sK4D/zw=
Subject key identifier: CB:73:00:55:83:AE:70:57:A1:46:91:F8:0A:40:BA:6B:EF:48:93:54
Certificate issuer: /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial: 018572A80EA1EBBFE85357D8FDF5ABB9C8E3
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/y3MAVYOucFehRpH4CkC6a-9Ik1Q.roa
Signing time: Mon 02 Jan 2023 13:24:54 +0000
ROA not before: Mon 02 Jan 2023 13:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197391
IP address blocks: 91.220.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:0e:a1:eb:bf:e8:53:57:d8:fd:f5:ab:b9:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Validity
Not Before: Jan 2 13:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb73005583ae7057a14691f80a40ba6bef489354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:f8:c5:02:b2:e8:f2:a4:14:2e:2f:da:41:
f4:49:f2:ae:1a:bb:68:40:01:e5:b0:45:80:09:ee:
8a:71:4c:3a:92:54:07:7e:21:e3:ac:5f:85:2c:e1:
db:b3:e5:0d:f8:b3:56:a4:f5:f8:2e:14:e9:f9:73:
0d:89:ac:4b:ef:03:79:bf:7b:24:ae:47:fc:b6:a6:
f8:5c:59:9d:f0:4d:28:64:15:3e:34:e8:14:7f:ef:
41:63:13:84:15:2e:3c:91:1b:63:9d:5b:49:12:5d:
28:ca:87:a9:5e:59:25:04:ad:3d:bf:86:23:19:f4:
77:7d:6c:56:ec:fc:9d:81:97:74:f6:04:1c:0c:ee:
0b:f7:d8:15:ed:f3:b9:46:33:09:34:ff:ee:22:6c:
19:db:ce:6a:db:fa:7d:ca:88:43:f2:3c:46:4a:87:
7c:2e:d5:59:5e:45:54:14:06:ec:ad:57:40:6b:2e:
24:60:fa:73:98:ae:85:68:bb:e3:b6:01:09:a2:c2:
75:0e:0b:21:cb:06:3b:d7:3c:75:70:63:a3:11:73:
fe:ab:d6:9a:a9:18:8a:ea:fc:d5:38:e1:49:9e:3c:
ce:b9:8c:96:d3:fb:0b:e4:03:8b:e9:1d:c5:73:89:
66:e7:1d:aa:4b:a6:db:44:4e:36:97:29:4f:58:b3:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:00:55:83:AE:70:57:A1:46:91:F8:0A:40:BA:6B:EF:48:93:54
X509v3 Authority Key Identifier:
keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/y3MAVYOucFehRpH4CkC6a-9Ik1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.119.0/24
Signature Algorithm: sha256WithRSAEncryption
30:b2:f6:fa:b7:01:bd:60:f1:f2:6b:72:58:9d:df:c6:7f:22:
9f:8e:f7:2d:cc:14:38:a5:21:d9:91:d6:da:72:87:82:f1:fe:
c3:ab:d2:46:e9:4c:aa:95:1a:f5:0a:90:9c:f1:6b:c2:5e:f7:
ea:3e:62:f5:92:53:ac:17:ea:75:3c:32:32:0f:df:ac:e5:44:
9f:58:06:f3:ba:4a:fb:1d:d8:d2:11:62:71:7b:1c:21:e6:f5:
6b:e5:8f:63:05:ee:04:49:12:bd:5b:71:db:d1:00:7f:b4:84:
7c:9e:da:a9:16:e2:97:34:7d:a2:f8:be:c3:95:ff:6c:ea:d7:
e6:1b:cf:cc:c6:fa:db:bb:6e:2d:e0:8b:32:60:51:8f:13:50:
3f:33:21:7b:ba:ee:7a:ea:5a:d5:60:99:c6:01:b2:7b:47:6b:
9e:bc:1c:0e:e9:c5:80:9f:76:dd:39:09:f8:1b:f2:70:d3:6f:
5c:a4:ad:ef:47:2d:e3:77:0f:10:5e:2d:9f:97:70:6f:80:18:
05:cf:ec:b0:82:22:4f:6e:4a:d3:e1:01:39:ec:aa:34:7b:b2:
23:f9:c2:0e:fc:6d:1b:3a:14:73:61:48:16:9f:b5:25:01:24:
05:94:09:7a:c2:ef:0b:2f:95:23:c6:d5:dc:ff:ad:70:17:86:
94:1a:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:20 2024 by rpki-client on console.sobornost.net