Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/kEcx2okMgml__zo2uaPNSZfbEg4.roa
File: kEcx2okMgml__zo2uaPNSZfbEg4.roa (raw, json)
Hash identifier: HtXnGTwK/G+hGuQscmmCYp6rKN96/H51sltr3yR5yz8=
Subject key identifier: 90:47:31:DA:89:0C:82:69:7F:FF:3A:36:B9:A3:CD:49:97:DB:12:0E
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 018C35038F7CC523916C38C218BEDAC269C9
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/kEcx2okMgml__zo2uaPNSZfbEg4.roa
Signing time: Mon 04 Dec 2023 13:27:54 +0000
ROA not before: Mon 04 Dec 2023 13:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 91.211.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:03:8f:7c:c5:23:91:6c:38:c2:18:be:da:c2:69:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Dec 4 13:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=904731da890c82697fff3a36b9a3cd4997db120e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:08:84:77:fc:ca:a3:d3:68:7d:24:d0:72:
ca:5f:57:05:7c:d4:c4:b9:ad:fd:8a:ad:fe:12:b7:
ea:97:b3:81:03:cd:b5:10:28:52:90:3f:4f:8b:ed:
d0:c3:1c:34:c7:48:a9:49:32:2d:9f:e6:90:a7:df:
f3:c3:c7:70:5a:dd:73:da:af:10:1a:f4:6b:e0:0f:
c9:18:6a:7c:d7:75:a9:bc:be:03:b8:a1:e5:06:21:
d3:7d:1d:84:1c:7c:39:9d:05:85:07:45:f8:67:71:
09:4b:19:7a:b5:b4:04:3b:fb:b3:a3:2f:8a:23:4b:
d2:4c:27:3b:1a:09:0e:8b:46:bd:ae:18:4f:c6:28:
7d:3b:cd:98:0f:5e:d1:ec:95:83:14:0e:0f:9d:83:
e1:70:11:73:98:83:ad:9c:e2:04:e3:bd:e8:33:85:
df:d4:cf:cc:26:2d:34:91:97:9d:af:86:fd:a9:86:
77:f9:e6:45:69:d4:c2:ab:1a:27:f6:e3:5e:39:0d:
58:0f:91:3d:f5:bb:eb:ff:dd:46:bc:da:0e:5a:59:
24:04:ec:d6:06:fc:f4:55:a8:b4:99:c0:aa:45:25:
47:f4:bc:6b:18:96:5a:31:09:79:76:1f:c7:8c:a8:
ff:23:fd:8f:8e:66:35:04:c3:40:c3:1f:b8:99:e8:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:47:31:DA:89:0C:82:69:7F:FF:3A:36:B9:A3:CD:49:97:DB:12:0E
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/kEcx2okMgml__zo2uaPNSZfbEg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.224.0/22
Signature Algorithm: sha256WithRSAEncryption
89:0b:cb:c0:0c:71:d2:70:73:9e:32:bf:fb:75:11:08:fe:8d:
eb:e2:dc:54:9d:81:05:80:7f:4a:89:3a:62:8d:b2:9d:a5:f4:
c2:f6:90:63:6f:8b:49:d3:16:12:62:01:b0:27:8d:28:3f:ff:
37:f3:dd:25:d4:88:69:33:43:46:70:cd:97:54:96:ea:46:83:
b9:86:d1:f4:5a:8f:86:2b:8b:b8:79:b4:8e:c9:d1:08:5d:8e:
4b:15:38:fe:98:e0:c0:97:4b:0b:dc:07:7a:19:ee:56:6e:2a:
8b:9d:ea:df:7a:1c:ea:2a:d3:02:31:50:12:fd:6a:95:16:36:
95:53:06:bc:91:64:e2:50:53:c9:11:3a:37:c6:7a:1e:34:7c:
13:c8:ea:fe:9d:7e:28:4d:ac:4b:2a:ee:29:8d:df:b0:2f:f3:
b6:b2:26:22:81:63:f8:8b:1d:46:01:db:1b:ea:e5:c0:73:c3:
37:8d:97:63:d6:45:90:55:73:84:1b:b6:55:56:69:2c:93:cd:
2f:0d:22:41:1b:c4:a9:50:d6:00:c6:91:4b:88:b9:cd:a8:a2:
61:a5:8b:6f:e5:16:6d:8f:f6:15:ea:3e:38:72:38:1d:dc:d2:
e4:51:b1:ca:2f:dc:93:02:e5:bf:f0:5d:4c:f2:f7:e1:e6:ec:
e4:cc:99:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:52 2024 by rpki-client on console.sobornost.net