Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/P5JbBP95IkMhaHGbqGlaGnPLuJQ.roa
File: P5JbBP95IkMhaHGbqGlaGnPLuJQ.roa (raw, json)
Hash identifier: ZJF55SsoN008o5pygNry/leGlDtR8vSfGXQ8Djc3SW0=
Subject key identifier: 3F:92:5B:04:FF:79:22:43:21:68:71:9B:A8:69:5A:1A:73:CB:B8:94
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018972C03B9F50123F6E50A902C750585CB4
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/P5JbBP95IkMhaHGbqGlaGnPLuJQ.roa
Signing time: Thu 20 Jul 2023 10:02:28 +0000
ROA not before: Thu 20 Jul 2023 10:02:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207235
IP address blocks: 91.107.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:c0:3b:9f:50:12:3f:6e:50:a9:02:c7:50:58:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 20 10:02:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f925b04ff7922432168719ba8695a1a73cbb894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3e:9f:23:6b:9c:a9:79:2c:9b:85:1f:6b:a3:
2e:c8:a0:3f:57:c7:a4:c4:1b:ca:ca:66:bf:7f:96:
62:11:f1:e8:7e:f7:4e:df:8d:58:66:84:8f:6c:76:
3d:24:c6:d4:02:b8:d3:d9:23:e8:12:5c:bf:ee:cd:
b6:1e:11:93:6c:f5:0d:28:5a:00:ce:64:5b:35:a9:
41:7e:e0:a4:ae:eb:6d:49:e2:c2:c7:95:16:a8:e5:
63:da:59:7d:fc:40:a8:f9:72:c7:b1:89:c3:b4:b9:
46:53:f7:72:96:bb:69:17:8b:33:5d:cc:ac:e4:be:
02:ba:1c:22:8f:26:3b:90:1b:bd:c6:67:0a:6e:09:
8c:51:a1:c1:77:c0:b7:8d:d7:d2:e1:02:18:be:98:
d7:c5:16:0b:b5:df:cd:fe:79:1f:a5:69:04:76:5d:
1e:ac:d6:a6:db:e5:18:2f:4a:2b:96:f1:90:96:97:
a0:4f:63:a6:41:cd:f9:52:df:6f:0f:18:13:03:df:
a5:c1:2d:e9:d8:49:e6:41:76:fa:f2:67:62:a7:08:
ee:24:30:8a:e2:78:96:10:55:d9:6c:d4:38:b0:d7:
1e:2a:fd:5d:b9:16:24:58:5f:bc:81:cb:f9:18:26:
60:78:a4:66:cd:82:42:db:4b:81:44:1d:7f:d1:31:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:5B:04:FF:79:22:43:21:68:71:9B:A8:69:5A:1A:73:CB:B8:94
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/P5JbBP95IkMhaHGbqGlaGnPLuJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5e:c8:af:27:da:e9:2c:3a:51:2b:2c:4c:7f:f1:58:a8:b2:
1d:87:10:e4:11:92:5c:ed:2c:9f:64:75:df:2a:51:4b:da:f9:
f8:cb:7b:9c:03:76:8e:f0:6d:26:d7:fd:72:32:b6:c0:63:cc:
a2:aa:38:05:f2:d3:64:76:fb:07:1e:db:e1:de:3f:4a:d6:2d:
d3:96:0c:16:7c:fa:f8:24:12:2a:aa:d8:a3:53:8c:d2:74:5c:
2c:fd:24:1c:36:9d:ec:3b:92:94:d8:30:48:ee:07:17:4b:24:
6f:b3:a7:96:28:81:3a:44:af:8a:bb:bc:6f:1a:ca:a1:dc:ff:
ab:20:74:c8:f0:85:54:e8:19:b2:1a:7a:5b:34:7d:cc:7b:ca:
79:9c:96:27:09:66:ee:99:ea:3e:d3:5c:2c:50:50:90:e8:a7:
ca:32:fb:31:f3:11:ab:0a:cf:12:36:19:6c:95:cd:b7:dd:94:
e5:a8:59:fd:ed:b1:c9:7e:ca:da:d3:56:f5:b1:d6:2a:31:9b:
56:e7:6e:02:05:c6:10:32:96:b7:7c:32:41:36:11:dc:2b:35:
ff:ba:04:0d:75:87:a3:f2:aa:4a:32:54:aa:16:c4:57:a8:e8:
76:7d:23:9f:d0:15:f7:9c:28:27:69:1e:f3:c9:c0:46:fa:f2:
0d:2f:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:15 2024 by rpki-client on console-fra.rpki-client.org