Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/1-BcinBp8Py7nTKTz5m1EoIt_Kf8.roa
File: 1-BcinBp8Py7nTKTz5m1EoIt_Kf8.roa (raw, json)
Hash identifier: SKUnuVTjYnBjNJdLp/Vk3HzsvBGjStrrOHKoqXmkg28=
Subject key identifier: F8:17:22:9C:1A:7C:3F:2E:E7:4C:A4:F3:E6:6D:44:A0:8B:7F:29:FF
Certificate issuer: /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial: 0185BC0BB56A73B69ABB4EF3858CD534ACF1
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/1-BcinBp8Py7nTKTz5m1EoIt_Kf8.roa
Signing time: Mon 16 Jan 2023 19:26:01 +0000
ROA not before: Mon 16 Jan 2023 19:26:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201729
IP address blocks: 91.137.124.0/22 maxlen: 22
91.137.84.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:0b:b5:6a:73:b6:9a:bb:4e:f3:85:8c:d5:34:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
Validity
Not Before: Jan 16 19:26:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f817229c1a7c3f2ee74ca4f3e66d44a08b7f29ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:96:da:4d:66:e7:4d:88:5f:e1:d6:fb:3a:
3d:e8:82:f6:29:8d:69:2e:4d:2b:f9:ff:dc:38:87:
d7:4a:1f:3c:18:f3:64:f4:de:c0:db:33:9c:b5:b8:
a5:b8:e2:01:f4:d2:c0:df:55:eb:b2:ef:27:24:2e:
3b:fa:7d:46:6e:c6:43:3c:ff:4c:ca:34:fb:8f:fd:
cf:1d:d2:c9:9b:96:45:50:e9:05:86:93:ed:f5:de:
e7:59:bf:b8:90:4c:eb:35:bd:1f:8a:bd:7f:de:06:
f0:63:f3:2e:3b:d1:3c:03:e4:dd:e7:37:40:ae:47:
87:cc:0d:c5:03:07:af:c2:c8:83:f5:cd:c2:93:08:
e6:37:b0:01:aa:2b:35:77:b0:13:47:d6:b8:c9:04:
98:22:3d:9e:5f:40:79:c8:83:c6:68:d7:d9:75:48:
fd:f2:07:52:37:07:5e:b6:cc:d0:79:50:12:d6:b4:
b3:24:4c:e7:b7:e8:b5:62:64:ff:eb:db:08:0e:b2:
8b:58:a1:b3:68:73:7b:41:2c:33:66:73:00:55:69:
05:9f:81:54:49:ca:96:bc:0f:7c:03:cf:0c:eb:77:
75:69:73:2d:df:71:21:69:6d:ce:d9:7c:33:93:a3:
09:1f:82:56:98:be:f6:61:2f:80:86:35:a9:a2:13:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:22:9C:1A:7C:3F:2E:E7:4C:A4:F3:E6:6D:44:A0:8B:7F:29:FF
X509v3 Authority Key Identifier:
keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/1-BcinBp8Py7nTKTz5m1EoIt_Kf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.137.84.0/23
91.137.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:c9:56:b7:4b:90:04:ca:71:28:d5:1f:e9:2e:f3:54:a2:d0:
56:ee:22:2f:ff:5e:61:c5:5f:a4:c9:33:32:9e:34:66:00:36:
24:b7:f5:73:34:74:6e:c6:77:17:72:f8:bd:55:c0:6e:65:55:
1a:f3:18:37:81:67:f5:56:30:5a:30:63:06:ff:70:fe:ff:43:
39:7f:f5:bc:8a:a4:bf:82:8b:8d:1e:1d:26:47:b9:a5:e4:03:
29:17:2e:f2:41:40:fa:9c:e2:17:fd:79:38:07:9f:e4:c5:8c:
91:ca:9e:e1:87:2c:4f:2d:23:15:db:05:2f:0e:0d:15:a0:e8:
c1:19:25:ca:2a:c3:f3:d8:13:71:14:f6:9f:19:82:bb:c5:dd:
bd:c1:74:a6:0a:76:40:d2:e5:0c:01:38:b2:a7:04:f7:97:f5:
5c:b9:be:19:98:e9:ca:de:5a:c1:cc:ae:05:88:a6:9c:2b:77:
95:99:b9:bd:fe:64:38:cc:f0:ed:1b:8f:3f:6f:19:73:48:98:
13:a2:3b:44:17:f8:81:19:a3:a8:0b:5e:d2:f7:0f:5c:5b:53:
92:5d:2e:70:37:6e:57:32:07:eb:6b:3b:ab:b2:7f:81:e3:0b:
ad:96:ec:3d:9b:36:f2:d2:2f:44:c0:7f:08:c4:7a:68:43:86:
43:3d:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:40 2024 by rpki-client on console-ams.rpki-client.org