Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/swyt2vIvksjs2vJhs_G8vVPFdAo.roa
File: swyt2vIvksjs2vJhs_G8vVPFdAo.roa (raw, json)
Hash identifier: FnNTAWyj/2xf06cksadoNC6yEOZ1sIOIguj2mJHbboo=
Subject key identifier: B3:0C:AD:DA:F2:2F:92:C8:EC:DA:F2:61:B3:F1:BC:BD:53:C5:74:0A
Certificate issuer: /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial: 018C2481E4EE9CC911E71AB98F1670776762
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/swyt2vIvksjs2vJhs_G8vVPFdAo.roa
Signing time: Fri 01 Dec 2023 08:32:21 +0000
ROA not before: Fri 01 Dec 2023 08:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47689
IP address blocks: 64.187.208.0/23 maxlen: 24
91.193.114.0/24 maxlen: 24
2a06:a340::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:81:e4:ee:9c:c9:11:e7:1a:b9:8f:16:70:77:67:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Validity
Not Before: Dec 1 08:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30caddaf22f92c8ecdaf261b3f1bcbd53c5740a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:22:b4:73:9c:0a:28:c3:28:c0:86:1d:eb:
38:92:2f:5b:9f:f9:c4:c8:dc:90:a6:83:cb:fa:ed:
86:40:89:0f:0e:aa:80:b3:33:b8:cb:87:39:c9:22:
1e:ce:d6:52:1f:e8:19:f6:08:2b:45:26:9c:b2:74:
1c:3c:58:da:b4:89:6d:04:42:f7:ee:c9:e8:52:de:
59:ef:3a:e5:72:dc:0e:92:e0:40:1d:32:b7:2a:ff:
6b:27:bb:99:e3:cd:99:c7:4d:71:81:2c:21:7b:7c:
4a:17:74:df:df:be:2b:ad:89:53:15:de:bd:73:95:
52:91:7b:78:93:ee:0a:aa:5b:75:c4:d7:a0:4f:0d:
ec:fd:22:c8:fb:e0:3f:9a:e6:62:33:75:1c:64:a0:
f7:32:b1:89:34:ac:47:95:ca:92:51:ef:16:ad:cf:
f1:8f:f5:b2:fc:42:95:9b:6a:2f:b2:d1:03:61:6c:
0d:00:8a:e1:c3:1c:3f:a6:b8:ee:1c:f0:81:50:14:
33:cc:0a:6f:8f:50:ca:9a:2f:42:73:9e:5f:0e:5b:
8d:db:18:2c:9f:57:2d:16:10:09:d1:01:df:74:d8:
a1:c8:fe:75:ec:50:2c:a4:74:15:de:d2:02:af:2f:
fe:b6:23:42:5e:c8:6e:79:05:c9:ac:3a:fc:e8:3a:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:AD:DA:F2:2F:92:C8:EC:DA:F2:61:B3:F1:BC:BD:53:C5:74:0A
X509v3 Authority Key Identifier:
keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/swyt2vIvksjs2vJhs_G8vVPFdAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/32
Signature Algorithm: sha256WithRSAEncryption
7c:ba:c6:b2:ab:e1:7f:75:76:ec:68:65:16:df:0c:16:5b:40:
a0:be:8e:e7:ae:2b:bd:3f:47:19:ef:b5:dc:40:da:6b:92:e2:
23:95:58:c7:44:ed:1a:ec:5b:bf:1f:50:0b:8a:02:e4:46:ce:
5d:e0:97:e1:60:9d:39:b4:ea:8e:10:7d:ce:7d:38:e7:7c:48:
92:c7:d0:12:12:3d:9b:22:bb:f4:09:65:04:59:bc:9c:16:87:
c6:0f:08:1e:d5:e5:3f:af:85:04:35:7d:3d:e9:fe:b4:28:ae:
c4:1e:12:da:88:dc:5d:b8:47:08:93:47:c3:9f:7d:b1:74:49:
48:43:7b:a0:fc:f4:05:b6:1d:cd:7d:04:f1:4d:d9:a7:ff:48:
8c:14:88:c4:cc:24:f1:27:4f:e0:db:90:97:24:9d:83:5f:e8:
42:8f:aa:fe:ab:60:b2:b0:d2:dd:77:83:e7:1b:15:46:1a:0c:
5f:95:0e:15:0d:bb:f8:ad:dd:41:8d:11:ab:14:58:a6:e1:bb:
58:18:a4:99:bc:de:c7:a0:02:01:de:b6:ba:f0:fb:f0:72:81:
5f:85:4e:b4:4b:a2:2e:60:44:2b:a1:f2:0f:91:ef:b3:1d:de:
32:2a:16:23:4a:b8:e0:2e:56:52:78:ec:3d:5d:18:b8:6a:4f:
3d:2a:d2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:03 2023 by rpki-client on console.sobornost.net