Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/eQpw_jCo14QMV7cPTnjTqNBqsDM.roa
File: eQpw_jCo14QMV7cPTnjTqNBqsDM.roa (raw, json)
Hash identifier: vPsWf+E5uUDPm7+oDUjRNlpvOsJcPvcOXoGPtiTvX1g=
Subject key identifier: 79:0A:70:FE:30:A8:D7:84:0C:57:B7:0F:4E:78:D3:A8:D0:6A:B0:33
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 018987D36B6769177E6B8ED38E5FCD7913B1
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/eQpw_jCo14QMV7cPTnjTqNBqsDM.roa
Signing time: Mon 24 Jul 2023 12:15:27 +0000
ROA not before: Mon 24 Jul 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200736
IP address blocks: 91.211.212.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:d3:6b:67:69:17:7e:6b:8e:d3:8e:5f:cd:79:13:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Jul 24 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=790a70fe30a8d7840c57b70f4e78d3a8d06ab033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a1:4f:10:12:b5:50:f5:b4:90:43:c2:4a:7a:
75:da:57:99:d1:47:76:1c:c9:61:2d:03:37:d2:ba:
21:db:7a:78:76:9a:ad:1a:ad:c0:1b:04:19:3a:d2:
16:33:86:a5:c2:b0:d3:f8:60:ef:c0:58:9e:e0:71:
ea:ef:24:b4:7e:8b:54:56:ab:7a:14:0e:c9:22:94:
b8:a7:02:c7:d7:d2:b4:a1:67:bd:13:da:ad:d6:87:
b5:55:b7:bd:70:ff:45:a2:27:cd:89:63:7c:de:38:
c4:50:e2:cd:b2:c2:65:d0:c2:b0:5a:cd:8a:03:d2:
35:3a:03:71:f9:d2:27:88:e3:9a:97:97:77:b5:53:
8f:8d:d6:b8:3a:27:90:2c:23:93:09:54:38:85:6f:
ba:b6:db:61:9f:f0:eb:77:17:97:bd:c9:8a:9e:b5:
8e:61:d9:78:f2:5d:a0:35:f5:8a:aa:5a:36:40:24:
1f:e6:18:f1:48:3a:6c:f8:5d:f6:81:43:33:c8:67:
ef:eb:58:13:d5:1e:e2:b4:f9:80:f8:f3:b6:eb:29:
94:e1:a6:ed:68:1e:d4:53:f5:77:a8:d2:41:e9:54:
08:32:23:58:66:34:f9:dc:82:c7:8a:d0:3e:97:ef:
34:de:2b:58:04:2d:31:70:1f:ed:24:7c:f5:67:41:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0A:70:FE:30:A8:D7:84:0C:57:B7:0F:4E:78:D3:A8:D0:6A:B0:33
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/eQpw_jCo14QMV7cPTnjTqNBqsDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.212.0/22
Signature Algorithm: sha256WithRSAEncryption
42:bf:52:f6:14:52:ee:4b:a4:01:83:31:e9:17:84:15:a5:fa:
04:f1:fa:c7:47:5c:67:17:9f:f3:5e:62:d1:85:40:c8:af:78:
bd:27:72:ea:7e:07:14:f1:5d:fc:27:f0:57:95:8c:c0:de:24:
a8:3b:fb:31:d9:d0:5b:dc:4b:5b:21:2b:3c:90:9b:9e:46:9a:
a8:4f:47:3b:98:a3:3b:61:1c:51:af:b3:45:92:3b:5d:d1:38:
1d:3a:52:46:e3:bb:a6:d3:6f:12:03:b6:82:d4:9e:0e:1f:d3:
0d:2c:39:c1:8d:58:8a:78:c5:9c:3e:b3:b7:07:53:91:10:88:
2d:03:cc:f6:9f:8f:05:9d:d6:50:a7:a8:80:35:79:25:1e:b0:
33:8b:36:06:db:7a:77:13:36:73:f6:8e:1e:04:84:18:bc:a2:
02:0a:6e:d3:81:26:d4:db:cf:1d:d4:89:76:c2:14:b3:50:e0:
4a:1e:b3:13:3f:c0:db:ae:4b:1b:52:fe:28:d3:50:9f:3a:40:
c9:d1:64:69:17:1a:d7:d3:bb:cd:f9:f0:74:2a:97:93:00:f3:
07:42:cb:a6:b4:a6:16:52:2b:d9:58:90:9d:67:b1:69:c1:a0:
ab:7d:b5:4d:4e:e2:16:61:5c:da:b5:35:6e:8a:94:6a:22:5e:
76:51:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:27 2024 by rpki-client on console-fra.rpki-client.org