Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/6Qt1UqfO-iy4zUUTU_NSgMpPfsE.roa
File: 6Qt1UqfO-iy4zUUTU_NSgMpPfsE.roa (raw, json)
Hash identifier: enpvaCMklvv27kW1g4Eqwivqo1xTDwecdZFiOsgrXQE=
Subject key identifier: E9:0B:75:52:A7:CE:FA:2C:B8:CD:45:13:53:F3:52:80:CA:4F:7E:C1
Certificate issuer: /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial: 01856DD3E639F0E88BF3926257B3EB935DF8
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/6Qt1UqfO-iy4zUUTU_NSgMpPfsE.roa
Signing time: Sun 01 Jan 2023 14:54:41 +0000
ROA not before: Sun 01 Jan 2023 14:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21453
IP address blocks: 31.31.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:e6:39:f0:e8:8b:f3:92:62:57:b3:eb:93:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Validity
Not Before: Jan 1 14:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e90b7552a7cefa2cb8cd451353f35280ca4f7ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fc:c8:2f:e3:9c:41:8e:eb:17:16:e4:df:0b:
ff:23:68:88:fe:46:aa:74:99:9f:79:fd:fb:9a:b9:
02:c2:d6:8e:bf:a3:63:d8:5f:87:3e:6d:80:4f:4d:
5d:54:7e:1b:8c:a1:f9:ad:33:04:3c:6f:db:03:51:
4a:ad:54:8b:2c:8a:db:a3:6b:85:b0:89:08:3b:13:
87:17:fd:6e:01:d9:79:02:5f:1d:cb:d6:51:d2:0a:
89:e3:19:ba:5b:b1:9c:a9:36:17:98:2d:86:38:93:
24:41:58:04:d7:5d:f4:3f:4c:c7:6c:55:46:2f:47:
2a:5b:f0:7c:ec:fb:45:6a:dc:9f:61:d9:7b:cf:26:
f6:7e:ef:28:ad:11:ed:96:7e:f8:f0:70:fe:a5:67:
ea:4d:e0:a5:83:43:32:93:bd:20:c4:a2:49:07:67:
40:ab:f4:00:bc:a6:24:30:fe:3f:df:9e:90:53:20:
f2:ae:e1:6f:71:06:d1:58:bc:d7:01:b0:73:31:57:
99:d6:8a:fb:91:a6:6b:8f:ea:cd:5f:30:af:c2:01:
10:0c:f9:dd:43:f0:45:a4:8a:1b:34:11:cc:c7:c9:
da:f5:57:05:a9:b6:f5:c1:b1:5b:cc:8e:be:19:4d:
c6:01:09:17:98:d0:18:99:89:fc:60:ff:c6:6e:7e:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0B:75:52:A7:CE:FA:2C:B8:CD:45:13:53:F3:52:80:CA:4F:7E:C1
X509v3 Authority Key Identifier:
keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/6Qt1UqfO-iy4zUUTU_NSgMpPfsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.64.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:e6:36:94:91:87:46:06:91:92:fd:31:b4:18:c0:00:31:e8:
2a:7c:8e:b7:bf:f0:ed:b5:1c:cd:cd:d8:d7:62:84:c5:d4:03:
d4:1e:13:7e:42:56:04:eb:9b:cc:c8:6a:33:e4:34:2c:71:37:
09:1c:fa:70:76:00:52:61:e1:73:a2:cb:f8:8c:3c:6c:2d:f0:
fb:48:e0:65:a4:2f:a4:69:81:52:27:22:41:7f:22:62:6a:71:
6f:0e:0b:48:35:6a:b6:ad:fd:60:48:86:6f:6f:92:c6:57:29:
44:01:41:1b:ac:06:59:d2:80:87:88:c9:3f:9d:57:f9:8b:ce:
26:83:88:3b:4f:01:ef:91:4f:6a:cc:8d:3e:56:b1:74:10:ed:
20:e3:56:4b:24:4b:2e:f2:96:c7:c7:dd:95:a7:70:4b:8a:72:
d5:8f:50:08:e2:9d:42:7d:65:c1:6d:14:83:ff:c6:78:fc:bb:
d1:36:a2:b4:69:04:3d:1e:92:75:d2:64:f8:9c:af:07:7a:e5:
72:24:8d:f0:8e:2d:98:c9:ca:d3:a1:4b:bd:4e:27:5a:fa:12:
bb:ea:27:4e:91:0d:52:32:48:9d:99:48:4c:e7:e6:61:34:2e:
7e:e8:02:bd:ec:cc:12:a5:e4:51:4b:6b:84:5c:4e:57:4f:65:
14:9f:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net