Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/m1xVB5RBhgh30CqRrhxq-uu-xJI.roa
File: m1xVB5RBhgh30CqRrhxq-uu-xJI.roa (raw, json)
Hash identifier: 4ABEjRKWOAoeBgnpakhprby+H4yW8vx3zLS2AMRRf2s=
Subject key identifier: 9B:5C:55:07:94:41:86:08:77:D0:2A:91:AE:1C:6A:FA:EB:BE:C4:92
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018977A2D2E68D6EE99F07B3A61C2DCCDB21
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/m1xVB5RBhgh30CqRrhxq-uu-xJI.roa
Signing time: Fri 21 Jul 2023 08:48:26 +0000
ROA not before: Fri 21 Jul 2023 08:48:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 91.200.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:a2:d2:e6:8d:6e:e9:9f:07:b3:a6:1c:2d:cc:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jul 21 08:48:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b5c55079441860877d02a91ae1c6afaebbec492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:8c:93:3b:c9:ee:f6:2b:3e:3d:b6:bc:f2:
e0:02:cb:a8:d4:31:27:ae:e2:93:f4:e3:e6:3d:db:
16:04:4f:8b:1b:f5:79:04:9e:59:52:bb:ea:8f:a0:
73:72:82:ea:5d:da:9f:e0:82:d4:88:c9:a6:3d:59:
23:45:3a:79:0e:f6:31:f7:e3:3e:a5:c4:34:8c:55:
99:3d:50:e6:35:c0:20:66:90:32:8b:6a:58:18:d1:
44:f3:db:3b:96:55:4f:11:55:85:10:e3:83:d5:d0:
76:5f:a6:9e:ec:62:d5:26:f1:3d:96:33:09:43:7c:
f1:f5:ce:96:7b:ef:7f:64:f8:d2:c4:49:79:aa:a6:
a6:c2:45:46:e2:e5:cd:2d:f2:81:40:71:7d:57:f4:
4c:9c:c7:f3:e4:06:17:80:ba:66:ef:66:e1:a1:3e:
90:cd:c1:30:ea:cf:8b:49:5e:32:8a:95:b0:84:ff:
8f:ed:9e:04:cc:a7:10:db:ec:cb:07:63:c7:c3:2e:
91:5f:18:27:91:ae:fb:d9:e7:4c:af:02:6d:a5:2f:
33:ce:7b:ca:83:00:ff:8d:db:1e:40:f0:da:6b:33:
d3:c8:43:7f:36:81:41:04:ca:d5:92:1e:ce:15:13:
31:10:0c:d9:ab:d2:30:94:db:6d:bb:c3:66:49:af:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:55:07:94:41:86:08:77:D0:2A:91:AE:1C:6A:FA:EB:BE:C4:92
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/m1xVB5RBhgh30CqRrhxq-uu-xJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.150.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:bd:82:af:fb:56:84:cd:38:72:8d:9c:a2:32:48:a8:e5:1d:
1f:54:31:48:a2:26:90:00:38:bb:3e:b5:9f:2a:8e:4a:a0:43:
05:2f:0a:59:8f:65:1e:62:23:7c:c4:93:cd:71:0e:ed:6c:e7:
54:e0:5a:90:62:38:40:e9:e9:ba:7c:19:bc:4b:1a:a8:ae:a8:
e2:49:5c:31:4f:c2:e8:88:9c:72:7f:ad:b3:42:35:a1:cd:71:
66:8a:d4:53:95:f5:84:17:f6:35:90:05:08:d3:72:c4:0a:7f:
0a:56:58:4e:78:26:58:25:25:c7:81:ab:82:f9:14:40:66:e0:
28:68:f8:65:81:ac:ab:c2:87:de:6e:86:9d:6c:1d:0a:63:b2:
19:05:74:32:66:17:c4:2b:53:30:e3:9f:de:60:89:6b:14:c5:
f0:bc:be:8a:d4:85:46:26:d1:dd:f0:42:d7:e2:f6:54:cd:b7:
9f:58:33:48:76:6b:e2:70:ee:7d:f0:69:9f:c4:2e:d2:48:d2:
7c:d5:1d:1e:14:ef:cf:d9:87:b2:ba:38:65:3e:09:da:cc:4a:
3a:b1:ae:2c:6f:08:96:f2:ed:fb:6b:50:90:79:1b:c7:64:10:
26:2c:fd:51:12:e1:9c:ea:1f:a0:67:c3:c4:c4:a2:1b:fe:ee:
92:27:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 15:19:23 2023 by rpki-client on console-fra.rpki-client.org