Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9P8hgM9V2xAQTZIos_1GhgBDJck.roa
File: 9P8hgM9V2xAQTZIos_1GhgBDJck.roa (raw, json)
Hash identifier: 1a5WRZu9ZLhUyryyvQpEJcCBs4dYa49ivlN7M8pfEKE=
Subject key identifier: F4:FF:21:80:CF:55:DB:10:10:4D:92:28:B3:FD:46:86:00:43:25:C9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81EB2C80884E6E2B31326D8451EFE6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9P8hgM9V2xAQTZIos_1GhgBDJck.roa
Signing time: Sun 01 Jan 2023 13:25:08 +0000
ROA not before: Sun 01 Jan 2023 13:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44017
IP address blocks: 91.92.233.0/24 maxlen: 24
91.92.234.0/24 maxlen: 24
91.92.235.0/24 maxlen: 24
87.120.91.0/24 maxlen: 24
94.156.147.0/24 maxlen: 24
94.156.146.0/24 maxlen: 24
2a00:1728:1c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:eb:2c:80:88:4e:6e:2b:31:32:6d:84:51:ef:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4ff2180cf55db10104d9228b3fd4686004325c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:eb:5f:3c:3a:a9:ab:7a:63:f5:91:e2:e5:
7f:a1:97:05:d7:e8:5b:95:25:f1:49:7a:db:28:64:
8e:58:3e:33:8d:7b:94:ed:44:4e:f1:27:47:13:46:
c9:36:4c:d4:91:1c:11:92:5d:78:f1:a7:8a:92:e8:
e8:d4:c1:36:17:fd:96:0e:f0:99:1c:e1:d2:c3:0f:
bc:f9:fb:4f:46:13:93:71:de:c2:21:31:c0:ae:08:
11:0a:f9:0c:60:94:1f:b3:84:8e:2c:c0:2a:f5:7d:
fc:f6:54:ea:c4:25:89:18:d0:8d:5a:61:17:6f:ec:
c6:10:18:83:36:6a:17:47:60:b6:7a:67:b7:16:d4:
b1:51:f1:bf:ce:bf:6d:a5:f4:17:7d:03:0f:cc:f4:
62:24:44:eb:91:db:6d:c1:72:db:09:61:46:35:2c:
5c:69:ae:49:2d:bf:76:6a:01:83:d0:4b:3b:b9:34:
b6:ab:2e:a1:ea:9e:32:e4:ae:c1:dc:40:01:de:75:
73:eb:fc:96:0e:e9:a4:8f:aa:5c:6b:fe:22:7c:e8:
d7:6f:52:8e:5c:c5:32:4d:5a:fc:84:40:00:a7:af:
6b:3d:91:5f:70:a6:35:65:00:d4:cd:84:6c:d8:0f:
77:6e:37:da:e8:6e:2d:41:be:a8:81:d5:be:61:ea:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:21:80:CF:55:DB:10:10:4D:92:28:B3:FD:46:86:00:43:25:C9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9P8hgM9V2xAQTZIos_1GhgBDJck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.91.0/24
91.92.233.0-91.92.235.255
94.156.146.0/23
IPv6:
2a00:1728:1c::/48
Signature Algorithm: sha256WithRSAEncryption
05:cc:bd:af:4f:69:e8:f1:58:c7:c6:1f:47:54:68:41:04:39:
ca:d9:42:da:b5:14:a0:dd:ce:df:7d:4d:6e:d8:ca:b7:48:f8:
b1:56:08:45:12:f1:7b:ec:89:e8:eb:fd:0b:1c:8b:06:56:67:
ea:0e:b3:66:31:f8:ec:c1:6e:8f:66:28:fe:1f:bf:6d:02:8e:
46:4d:ca:e5:83:9e:2f:2a:36:05:09:35:72:e0:c2:f9:e6:1d:
de:b2:7f:07:b5:c7:90:3a:5e:e0:9e:90:57:77:35:22:b5:d3:
e2:41:42:19:58:eb:3d:90:8b:36:d3:88:7c:2f:8d:1e:cb:48:
4b:c9:a3:b4:89:47:16:23:77:09:cb:48:7e:3f:09:59:1e:6a:
53:74:3b:fc:d8:55:f8:f5:75:b5:fd:fd:62:26:11:87:dd:c4:
7a:7f:8c:a1:45:72:95:77:8d:d1:96:4a:a7:8a:14:bc:60:fe:
d8:c6:f5:4d:22:30:41:d7:40:8d:08:af:79:4d:37:08:5f:cc:
9b:36:95:16:48:31:1c:73:ee:0d:61:94:2c:03:fd:0d:c5:f4:
25:4e:57:9e:7d:2f:69:76:67:d2:c7:ee:84:99:25:9f:79:5d:
99:09:94:01:4a:d2:f0:3d:44:5b:14:7e:16:b9:33:43:7f:0a:
4b:54:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:09 2024 by rpki-client on console-ams.rpki-client.org