Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/8hPMbenSkQltaGP8utTokhR2CEc.roa
File: 8hPMbenSkQltaGP8utTokhR2CEc.roa (raw, json)
Hash identifier: oBb3Z+/1Qxbap7Oq1LGmVkReLIBMCMKsf5RFiDQU2i0=
Subject key identifier: F2:13:CC:6D:E9:D2:91:09:6D:68:63:FC:BA:D4:E8:92:14:76:08:47
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 01887A301790A552FB69E58FE810C38E14B7
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/8hPMbenSkQltaGP8utTokhR2CEc.roa
Signing time: Fri 02 Jun 2023 03:39:12 +0000
ROA not before: Fri 02 Jun 2023 03:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 194.53.192.0/24 maxlen: 24
194.53.193.0/24 maxlen: 24
91.211.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:30:17:90:a5:52:fb:69:e5:8f:e8:10:c3:8e:14:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Jun 2 03:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f213cc6de9d291096d6863fcbad4e89214760847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:2f:d2:5b:11:f2:52:63:18:4b:0f:67:7a:
30:d8:a9:04:ed:4d:4e:01:a4:c2:65:65:2f:3a:3d:
2f:04:d5:88:d1:d8:f3:b3:45:b6:9a:42:f5:be:97:
05:46:f2:c9:f2:71:57:84:02:10:7d:35:88:6a:1c:
96:57:7f:34:57:a4:d4:13:05:b3:6c:3d:f9:c5:dc:
91:44:07:b2:8a:35:e4:41:14:24:f6:c4:a2:21:5a:
88:a9:0f:c7:01:f9:6a:00:51:b1:86:20:de:c7:a0:
e5:1d:f0:43:b8:6c:e3:62:6c:78:ae:60:c4:e1:dc:
47:5e:6c:75:6d:80:5a:72:f3:f4:b8:5c:28:28:c0:
67:1a:f4:17:ca:87:b9:2b:8e:9a:ed:fb:ff:34:66:
f6:58:55:e8:07:ba:a5:07:bf:47:03:13:a3:3d:99:
c9:f8:e3:a7:00:6b:55:82:2b:c1:34:d5:e9:4d:00:
f9:b8:a5:69:0c:97:83:0a:c8:79:89:21:ec:23:08:
3f:93:de:c2:17:3d:ec:31:6a:04:a4:0a:38:27:6a:
c6:a7:97:1c:d1:a0:90:b2:74:7c:99:14:8a:02:ad:
55:81:cf:ee:56:40:be:15:98:d1:e0:9b:03:0f:cb:
6c:b2:15:98:a9:df:14:9a:6a:5d:8c:ba:ea:2c:a5:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:CC:6D:E9:D2:91:09:6D:68:63:FC:BA:D4:E8:92:14:76:08:47
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/8hPMbenSkQltaGP8utTokhR2CEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.224.0/22
194.53.192.0/23
Signature Algorithm: sha256WithRSAEncryption
45:84:79:22:2d:2d:5e:e1:57:1f:f2:de:74:7b:f2:87:fe:e0:
9a:55:00:e7:c9:d2:cb:fe:57:d4:b2:5c:bf:0f:b3:8c:7b:50:
3e:b7:34:d7:d4:4e:31:0a:ae:62:dc:f2:e0:94:96:4b:55:6b:
1f:12:80:53:d6:26:a6:ef:0a:47:65:98:89:d2:e5:9b:8f:51:
30:64:88:45:d4:65:b9:ec:f1:a8:70:12:12:8c:80:57:88:5b:
f0:92:77:6c:eb:04:18:dc:f4:10:18:8c:77:57:1c:10:59:ff:
36:0e:ee:06:41:ff:6f:8d:90:1c:2d:f3:08:41:62:cc:75:89:
3c:34:e6:01:c4:c6:46:72:7e:10:4a:34:c5:3e:6a:1c:a8:64:
3d:9f:ae:bf:0c:d6:98:f8:50:93:0d:58:c1:9a:37:e3:08:11:
a0:80:33:c2:1e:95:aa:4d:23:90:49:23:35:2e:e4:c2:53:2a:
34:91:1d:ad:5c:5d:a3:1a:21:52:31:5c:74:48:34:bd:d5:bc:
74:d8:16:e6:b2:9d:ef:3e:50:c6:ef:58:cb:74:5c:04:36:5d:
8f:00:8a:6e:20:c9:cc:4b:09:92:63:dd:56:1b:56:83:61:e3:
53:be:aa:34:3b:2b:63:e9:64:0a:ed:a5:da:01:d2:6b:29:d9:
44:99:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net