Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/g77V7hlUpEx7jOjwMfQMe4jnlco.roa
File: g77V7hlUpEx7jOjwMfQMe4jnlco.roa (raw, json)
Hash identifier: wsweI8QT9SjioMYKjOjuhiZp+PuAmm2VhArHm8hbAIg=
Subject key identifier: 83:BE:D5:EE:19:54:A4:4C:7B:8C:E8:F0:31:F4:0C:7B:88:E7:95:CA
Certificate issuer: /CN=c88e938eb4ae59c218f4e6e801d735c1251b7e45
Certificate serial: 018964C062821EED6870DC75C0520B698072
Authority key identifier: C8:8E:93:8E:B4:AE:59:C2:18:F4:E6:E8:01:D7:35:C1:25:1B:7E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yI6TjrSuWcIY9OboAdc1wSUbfkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/g77V7hlUpEx7jOjwMfQMe4jnlco.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 91.199.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:62:82:1e:ed:68:70:dc:75:c0:52:0b:69:80:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88e938eb4ae59c218f4e6e801d735c1251b7e45
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83bed5ee1954a44c7b8ce8f031f40c7b88e795ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:36:85:72:5b:2f:aa:d1:22:df:1c:1b:37:
85:54:91:76:06:cb:c9:13:c8:bb:1b:c6:da:eb:08:
1f:d7:b8:95:f5:7e:86:dc:4c:91:f8:08:5d:ef:c3:
af:2e:4f:6e:1e:85:83:d5:f5:46:94:b5:b9:b9:ea:
17:8e:0b:33:ad:21:0d:ba:18:ce:79:e0:b1:87:28:
a7:0a:7c:78:c4:50:f3:ee:d7:db:65:15:41:5f:f4:
39:af:ae:b0:b0:72:93:e0:5a:2a:d0:58:d2:dc:19:
e7:87:d0:fe:68:f2:6a:4b:c8:5a:80:64:32:1b:ea:
a6:ca:ca:02:27:54:44:76:5e:96:3f:9c:46:de:a9:
ac:b3:94:1e:b6:22:70:dd:10:58:fc:15:44:b7:4d:
5c:7a:cc:d6:1e:d0:a7:f3:7a:f8:ed:cf:42:6f:26:
4d:23:db:35:9b:e2:be:7d:60:e7:47:f9:a4:ac:d9:
76:c9:05:9f:cb:d3:3e:c9:5a:30:7c:62:84:3a:b4:
6a:7d:b6:ec:39:87:16:fb:cf:88:8b:b7:0c:10:e2:
46:a3:7c:e8:1b:d8:65:e3:10:6a:70:a3:24:b9:e6:
f0:36:0f:2d:72:9a:10:cc:8e:7a:69:74:88:7c:0b:
a3:45:0d:74:a4:21:fa:a0:9b:df:1e:b1:1e:41:f3:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BE:D5:EE:19:54:A4:4C:7B:8C:E8:F0:31:F4:0C:7B:88:E7:95:CA
X509v3 Authority Key Identifier:
keyid:C8:8E:93:8E:B4:AE:59:C2:18:F4:E6:E8:01:D7:35:C1:25:1B:7E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yI6TjrSuWcIY9OboAdc1wSUbfkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/g77V7hlUpEx7jOjwMfQMe4jnlco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/yI6TjrSuWcIY9OboAdc1wSUbfkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cd:1b:3f:63:45:77:37:d5:15:8d:af:d6:b5:a8:1f:2a:6c:
ad:51:06:7c:1c:7f:4d:bf:07:e7:47:a9:3d:c5:92:0b:94:69:
d9:6e:1f:7a:1e:ef:4a:a8:99:8b:d5:6b:4e:93:5b:68:21:9b:
48:e2:f0:51:28:f3:3c:cf:b1:fa:96:14:58:fe:8b:ad:38:94:
e6:e3:93:ed:3e:ff:14:ad:08:2f:e5:a1:a3:ba:88:6f:59:ea:
78:e3:92:67:54:f9:a5:44:fd:69:9b:0c:a9:c7:02:7d:2f:1d:
6f:b9:fc:39:e2:d2:9f:b7:ea:0a:9d:ef:93:c5:4a:82:59:2d:
80:76:5e:e6:64:7f:fc:5c:15:92:c9:88:31:5b:79:a0:6f:5f:
2a:1d:e6:ee:e3:58:86:0e:a2:27:03:bb:65:32:37:a1:76:b2:
8c:68:93:75:59:df:dc:5c:87:e1:6e:64:40:58:c9:2c:ec:fe:
47:d1:2c:cb:06:5e:52:12:7a:90:e4:3d:ec:b6:ed:34:01:d8:
68:85:df:4f:74:19:71:34:f9:21:0a:d7:71:ee:4c:5c:b0:bc:
38:7d:46:4a:44:6a:d6:43:c4:b3:52:da:8c:ce:24:ab:f7:f4:
c7:13:b9:7f:0f:00:a9:af:b2:90:2a:d7:de:a8:e5:75:4e:4d:
8a:1b:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:45 2024 by rpki-client on console-fra.rpki-client.org