Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/n-U7klLh_yLNA2ZGcBnhJmWIb0I.roa
File: n-U7klLh_yLNA2ZGcBnhJmWIb0I.roa (raw, json)
Hash identifier: iC5wr/0fgiLLWTF+DXnNZv9rUeGV7YP+nJ1wxmHQEJU=
Subject key identifier: 9F:E5:3B:92:52:E1:FF:22:CD:03:66:46:70:19:E1:26:65:88:6F:42
Certificate issuer: /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial: 0185719E874D9AAFA0264EAF40D29755D742
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/n-U7klLh_yLNA2ZGcBnhJmWIb0I.roa
Signing time: Mon 02 Jan 2023 08:34:52 +0000
ROA not before: Mon 02 Jan 2023 08:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197138
IP address blocks: 91.206.50.0/23 maxlen: 24
2001:67c:354::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:87:4d:9a:af:a0:26:4e:af:40:d2:97:55:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Validity
Not Before: Jan 2 08:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe53b9252e1ff22cd0366467019e12665886f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:14:39:19:20:5e:5d:c6:05:4b:93:f0:de:ae:
d5:41:3e:2e:93:d2:55:c0:33:c4:2f:5d:00:cc:04:
ec:0f:8d:ef:a7:5f:41:70:90:db:df:e5:48:65:59:
ee:95:82:50:61:a7:0e:aa:d6:8a:e2:d0:b8:4c:88:
db:c1:8f:85:1f:2e:cc:95:f8:c2:7b:14:ac:06:0b:
26:a2:46:9d:18:2f:27:7e:93:86:d7:c3:2f:48:c5:
d1:91:fd:6e:23:4f:3d:c5:55:0d:68:4d:c1:3d:e9:
b7:3f:8f:11:54:be:52:d4:3e:5b:b5:57:a3:26:6c:
db:01:4e:97:05:63:11:d4:48:3e:2c:8a:b2:cb:9c:
5b:04:ea:3c:f7:aa:d8:7f:55:99:13:28:2d:23:9e:
1c:ab:a5:a9:91:a9:c7:06:e6:86:2f:d0:26:4f:b9:
ed:08:95:41:60:81:1f:b9:7b:a5:d5:7f:73:da:09:
27:30:e2:68:d7:fb:ab:da:6c:df:e3:da:b3:eb:c6:
7e:84:71:55:ae:80:70:3c:8d:59:0d:62:64:f7:1e:
1d:2f:38:3e:b2:8a:5c:d1:bd:e3:24:76:fb:98:68:
89:a1:0c:bb:48:a0:a5:c7:20:4d:1e:70:1c:5e:58:
9d:04:a5:ab:9d:ca:14:97:44:bf:4d:b7:ba:61:67:
ed:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:3B:92:52:E1:FF:22:CD:03:66:46:70:19:E1:26:65:88:6F:42
X509v3 Authority Key Identifier:
keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/n-U7klLh_yLNA2ZGcBnhJmWIb0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.50.0/23
IPv6:
2001:67c:354::/48
Signature Algorithm: sha256WithRSAEncryption
63:f6:f9:10:6d:39:29:48:af:d2:ba:5d:78:3f:ad:5f:7f:e1:
08:e3:ef:37:ea:95:11:05:45:ff:8d:50:15:33:88:13:75:80:
d4:98:1e:dc:74:43:4f:a3:f9:fd:00:37:c9:1a:1a:9f:4b:f6:
0c:4b:63:91:15:99:62:0a:4f:c6:cc:fb:55:a7:66:a7:7d:91:
a4:a6:eb:4e:79:56:ad:60:53:35:9b:c3:86:92:9a:f4:ab:34:
6b:c1:e2:14:fc:09:18:87:59:75:14:4e:ab:bc:c6:6c:1a:5d:
fb:1c:4b:ac:d1:19:5b:6a:87:7c:a5:21:a9:64:42:80:cb:e3:
2c:d4:9a:d5:b2:2d:ca:65:5e:aa:17:83:2e:3d:88:aa:2a:b3:
a4:d1:6f:99:c8:50:3e:9d:bc:78:d0:e4:aa:15:e7:89:95:43:
96:ef:63:f6:95:be:97:e3:9f:8c:5f:c3:96:e0:8c:4a:b5:c7:
26:04:21:d3:d1:2d:14:e6:c0:9a:05:33:d9:86:01:a5:5b:6e:
d5:27:d5:42:3f:3f:68:9f:e4:b0:a2:03:0e:51:39:7d:a6:7e:
f2:40:d2:ee:b0:21:f2:61:ec:e5:f0:15:61:22:45:00:a2:43:
dd:62:92:5c:56:fe:e2:d9:18:c3:ba:f6:ed:12:51:d2:c3:8d:
26:a9:e8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org