Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/19SafLtxj3Kze9vOZrmkOJ81Rqo.roa
File: 19SafLtxj3Kze9vOZrmkOJ81Rqo.roa (raw, json)
Hash identifier: zRusTZQmewuhRDVf5DB6KwsKyDbP/MyZpQF6kc4wAtY=
Subject key identifier: D7:D4:9A:7C:BB:71:8F:72:B3:7B:DB:CE:66:B9:A4:38:9F:35:46:AA
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 01856D5CF2644C408E2EDFF3C9EB73F60FA3
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/19SafLtxj3Kze9vOZrmkOJ81Rqo.roa
Signing time: Sun 01 Jan 2023 12:44:45 +0000
ROA not before: Sun 01 Jan 2023 12:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203877
IP address blocks: 91.148.118.0/24 maxlen: 24
91.148.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f2:64:4c:40:8e:2e:df:f3:c9:eb:73:f6:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 12:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7d49a7cbb718f72b37bdbce66b9a4389f3546aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f8:5c:c2:61:5c:ba:dd:3c:b0:8c:0f:8c:43:
34:83:8b:b5:6e:9d:2e:9d:21:86:6e:08:4e:d4:c6:
23:64:31:96:3d:43:c0:34:19:f0:1a:84:12:c2:41:
17:7c:71:73:c1:38:3c:06:21:98:0a:30:b1:a6:5f:
dc:88:e3:ec:c9:b3:74:68:d8:c5:a2:7e:e2:7c:e8:
8f:d3:91:9c:55:df:32:9e:4c:dd:fc:45:9d:2c:3f:
b2:84:be:8b:2c:74:1f:01:ee:7f:9a:d1:5c:81:48:
d6:6f:59:71:7e:d1:84:a0:d2:32:b1:32:fe:4d:c7:
be:dd:ec:05:81:9e:c8:73:a8:b6:bc:ab:9f:79:ec:
58:00:d8:dc:92:b3:c5:da:7e:9c:2e:19:8f:e9:6f:
22:4a:1b:9d:48:79:a6:aa:e6:73:cf:e8:fd:86:c1:
41:57:12:26:17:6e:fd:da:80:62:5c:7e:a7:8b:17:
94:2b:6d:a6:00:05:24:77:69:1d:6c:d4:ec:4c:0d:
4a:27:b8:eb:d0:f1:3c:22:53:57:f9:81:42:68:aa:
fb:af:a7:5e:b8:0d:2c:e5:5c:4f:8c:25:f5:92:f2:
23:2c:fd:27:6f:ed:6a:7d:b6:49:5f:cf:5d:9f:b0:
06:4f:ab:31:8a:39:bb:9e:3a:4d:b8:7f:90:35:44:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D4:9A:7C:BB:71:8F:72:B3:7B:DB:CE:66:B9:A4:38:9F:35:46:AA
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/19SafLtxj3Kze9vOZrmkOJ81Rqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.148.118.0/24
91.148.125.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e3:e1:1c:6b:fc:2a:ba:98:72:26:d2:6d:6f:3b:5c:23:ef:
9a:c7:7c:f5:b6:f3:b5:26:30:91:02:9f:eb:cc:7f:cf:6c:6f:
fd:68:95:1e:8e:7c:28:95:78:2a:3f:39:2d:56:2e:cf:2a:d2:
7e:80:e3:21:98:f9:40:83:07:a5:4a:78:7d:91:f7:eb:19:8f:
d1:a0:bb:c0:c1:23:ea:15:72:9a:3d:1c:52:df:4d:0c:0e:4e:
1c:7a:1d:4a:81:14:e1:4b:06:5b:4d:22:0a:5e:d7:97:25:4e:
d5:22:33:61:ac:45:7c:25:e2:b7:17:3f:3b:46:7b:80:80:cf:
22:4a:d9:d7:a7:8d:29:0b:e1:c3:df:f3:4a:cd:f2:79:22:3e:
21:ed:5f:91:f8:f0:62:a3:36:a5:03:b3:47:b0:ca:f7:97:9f:
5b:2d:05:60:6f:17:3e:59:6c:8f:a1:bc:23:16:37:59:1e:9b:
0f:13:28:09:04:34:33:ee:89:d0:dc:9a:3a:80:3e:6a:64:bb:
68:d1:d7:a1:e0:58:dd:5d:9a:b8:e4:34:bb:7d:07:db:69:2c:
d8:00:84:da:1c:45:00:d9:9a:2f:e0:92:f4:70:27:aa:af:97:
c3:15:1e:71:1c:9d:1c:ca:f2:2e:58:27:c8:d2:68:93:e5:f9:
2f:a9:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:24 2023 by rpki-client on console-ams.rpki-client.org