Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/rxIGTJhp8FqQ3SEwCIqIXcZsAmg.roa
File: rxIGTJhp8FqQ3SEwCIqIXcZsAmg.roa (raw, json)
Hash identifier: l/k1JJKbBXwR+NOz/J7cq5oBCwLscBxIXEs08gIoJww=
Subject key identifier: AF:12:06:4C:98:69:F0:5A:90:DD:21:30:08:8A:88:5D:C6:6C:02:68
Certificate issuer: /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial: 01856F549C513FE4CC593AC2691511B09D9D
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/rxIGTJhp8FqQ3SEwCIqIXcZsAmg.roa
Signing time: Sun 01 Jan 2023 21:54:53 +0000
ROA not before: Sun 01 Jan 2023 21:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.199.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9c:51:3f:e4:cc:59:3a:c2:69:15:11:b0:9d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Validity
Not Before: Jan 1 21:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af12064c9869f05a90dd2130088a885dc66c0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:ee:00:95:ff:7b:ec:58:1e:13:2e:32:08:
90:e9:0f:c0:f1:df:8a:ef:2a:57:8e:be:56:c6:cd:
3f:9d:1b:d2:53:c3:52:7f:e1:8e:d0:a1:aa:20:7d:
4d:22:d9:a8:37:12:89:88:09:21:17:e2:07:8e:e3:
3c:81:86:1e:79:8b:a9:f1:69:88:76:b4:07:0b:ac:
6d:6e:98:f1:9e:25:d2:ec:fc:79:05:78:61:6a:ba:
64:49:22:af:d0:9e:9d:2a:bb:a1:3a:c2:c2:01:0c:
8b:32:8d:ca:ec:6d:22:87:fd:98:e1:d5:4a:27:42:
b7:f5:68:05:e0:a7:9c:8f:15:50:a9:e1:60:48:39:
e4:88:6c:f7:ee:9b:25:95:c4:15:77:53:df:46:1a:
68:8b:98:ac:ee:43:ab:4a:8a:73:28:dd:a5:55:3f:
37:50:2c:38:bf:18:96:08:9d:a4:1e:4a:3f:e4:7c:
f3:a5:00:55:91:8e:cc:6e:a5:a5:e8:7c:f2:60:2a:
e2:7b:f3:85:c6:af:af:3f:a4:e2:60:de:3b:4f:b7:
35:a6:18:65:ca:88:0f:cd:15:34:e1:a6:c1:64:99:
9a:23:5e:90:1a:58:3a:ab:d7:b8:75:ef:b9:37:1a:
16:93:2c:6e:9b:1f:fe:ae:90:ae:12:3e:cb:f7:9e:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:06:4C:98:69:F0:5A:90:DD:21:30:08:8A:88:5D:C6:6C:02:68
X509v3 Authority Key Identifier:
keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/rxIGTJhp8FqQ3SEwCIqIXcZsAmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.74.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d0:e5:da:d3:ce:f4:17:9f:0a:9d:ae:ff:05:c1:2a:ec:92:
1c:2b:67:81:b7:bd:a7:bf:42:a5:26:ce:a1:29:9e:ff:d5:6f:
ca:3f:b4:1b:0c:37:95:f6:af:c7:5d:b3:bf:b9:cd:57:0d:0d:
5d:ef:68:ba:2b:dd:94:1c:dd:63:99:6c:63:c4:ae:c4:6d:db:
fa:70:11:9b:c5:d3:a6:cf:16:15:e8:ae:1e:44:e7:57:a4:4f:
a1:4c:4c:f0:e6:70:fa:13:96:5e:99:d6:16:e1:71:bc:6c:89:
e4:a3:b8:92:06:a0:81:40:a1:c8:5f:93:83:05:17:fb:d2:2a:
54:96:0e:15:f2:07:64:0a:b7:cc:14:95:6d:d4:80:5b:82:a1:
20:70:17:54:39:a6:20:99:53:c9:e8:b9:fd:ed:7b:ab:df:79:
b8:72:66:1b:d9:84:5f:40:18:69:5a:ad:6b:a8:c9:60:a6:b9:
a1:1b:a0:8d:9c:89:94:77:09:55:54:24:8d:e8:2c:c2:9c:e0:
a5:20:8b:11:5e:ce:1b:74:5b:2f:81:60:ee:94:eb:01:53:be:
f9:42:d7:d7:49:6e:45:3f:6c:35:3c:7f:c3:03:40:f2:79:a9:
da:8b:fc:2b:8d:b0:8b:11:d7:00:2c:a8:2d:a1:b2:8b:f7:a7:
68:11:20:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:33 2024 by rpki-client on console-fra.rpki-client.org