Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/PQgT8sXlqbh6oGLQDydDyzOqp6Y.roa
File: PQgT8sXlqbh6oGLQDydDyzOqp6Y.roa (raw, json)
Hash identifier: owl2i/oCnFij05utoH/vYFnlbVWwFMq6wytWwiLcKfQ=
Subject key identifier: 3D:08:13:F2:C5:E5:A9:B8:7A:A0:62:D0:0F:27:43:CB:33:AA:A7:A6
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018755A86EBC61965F7EF86FECB70593CE0A
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/PQgT8sXlqbh6oGLQDydDyzOqp6Y.roa
Signing time: Thu 06 Apr 2023 08:21:54 +0000
ROA not before: Thu 06 Apr 2023 08:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39465
IP address blocks: 91.231.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:55:a8:6e:bc:61:96:5f:7e:f8:6f:ec:b7:05:93:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Apr 6 08:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d0813f2c5e5a9b87aa062d00f2743cb33aaa7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:da:9b:b9:87:bb:a3:27:b9:6f:9d:45:70:
c2:cd:96:4b:53:db:c6:1c:d6:9c:38:e0:dc:e5:ce:
a0:a0:dd:0f:a1:ad:a1:cc:e6:43:d6:a6:2c:11:56:
aa:97:16:5d:16:ff:13:59:b2:f1:8d:bd:71:ea:a6:
62:d3:cc:c2:82:bc:fb:18:4e:d7:74:10:66:ab:30:
d7:83:83:df:94:fe:fe:8a:bc:d7:00:5d:95:27:55:
22:62:40:a4:f1:62:43:b5:e9:88:58:43:0c:d4:9a:
51:a0:a5:e9:08:4d:76:83:5b:db:36:10:21:00:20:
e8:24:32:35:41:87:ef:15:af:ce:70:28:05:88:c5:
fb:1e:8d:c3:44:0e:da:3f:10:58:7f:01:66:76:b2:
f4:06:9e:20:16:e2:c8:05:6b:79:66:1c:bb:ed:01:
a9:e2:51:75:48:47:c0:c4:82:0a:16:38:92:41:7a:
57:3c:36:5b:67:30:5c:9b:f3:e8:e1:27:3e:dd:c2:
90:9e:c6:87:00:1a:67:91:14:3a:bb:37:f8:74:93:
f4:1b:66:29:d8:51:10:e5:c9:b2:38:f7:6c:f5:3c:
b6:77:2f:94:3b:a2:ff:40:b2:6a:56:d6:07:78:85:
49:0f:85:59:bf:e0:d4:96:ad:39:5d:68:76:9b:64:
00:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:13:F2:C5:E5:A9:B8:7A:A0:62:D0:0F:27:43:CB:33:AA:A7:A6
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/PQgT8sXlqbh6oGLQDydDyzOqp6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.136.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c2:d5:ef:95:e0:ee:78:23:76:9b:a9:25:b4:1d:f4:dc:4f:
a2:f5:b4:5f:f4:3c:96:66:a3:3f:c6:94:37:b7:dc:ab:0e:66:
7e:fc:f6:cd:be:b7:55:67:f7:e4:29:8c:da:dc:8c:5a:14:fa:
3e:2a:93:e6:f4:04:23:82:0f:76:0b:c7:48:9c:a1:ab:4b:ef:
51:1d:a1:8a:20:dd:2d:6d:be:95:a6:fa:7b:c6:e9:5c:d8:6c:
3f:5c:f9:8a:43:15:e2:88:b2:e4:1a:53:b2:22:f6:26:61:9f:
b8:98:41:0d:13:95:68:22:1e:53:ad:5e:2c:34:23:83:ae:e0:
44:2d:d4:69:ec:40:ce:e5:18:47:05:62:4c:b9:2f:a9:04:1a:
d4:14:33:cf:83:ab:de:a7:d7:02:e9:17:43:a4:f3:31:a9:f4:
ea:42:d3:d9:c7:e4:ed:81:a4:17:da:8b:f6:92:fa:82:a3:ba:
2b:60:c2:d7:ea:64:b3:cc:62:43:8b:1d:d2:b8:e9:e2:e0:ae:
11:7d:b4:8f:41:80:75:e7:0b:23:21:15:ce:22:60:f3:50:f7:
47:30:49:e0:b5:ba:56:e4:71:7a:b9:2e:11:e6:42:8f:ea:5f:
31:09:a6:67:50:ff:50:90:fd:79:42:3a:65:04:0d:97:25:94:
72:47:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:40 2024 by rpki-client on console-ams.rpki-client.org