Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_vs8AKpAP2u-7sxUfHnf8FUBI-k.roa
File: _vs8AKpAP2u-7sxUfHnf8FUBI-k.roa (raw, json)
Hash identifier: ljt3uGFpR09yyediFsNhabyy/4R9q4QdywxxHt+QcsE=
Subject key identifier: FE:FB:3C:00:AA:40:3F:6B:BE:EE:CC:54:7C:79:DF:F0:55:01:23:E9
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018571309D713B5FF550BBC965E877977B20
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_vs8AKpAP2u-7sxUfHnf8FUBI-k.roa
Signing time: Mon 02 Jan 2023 06:34:49 +0000
ROA not before: Mon 02 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62041
IP address blocks: 91.108.4.0/22 maxlen: 22
91.108.8.0/22 maxlen: 22
95.161.64.0/20 maxlen: 20
91.108.56.0/22 maxlen: 22
149.154.164.0/22 maxlen: 22
149.154.160.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:9d:71:3b:5f:f5:50:bb:c9:65:e8:77:97:7b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fefb3c00aa403f6bbeeecc547c79dff0550123e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:d7:d6:52:df:a5:7b:c1:d1:07:7f:61:43:
35:c7:b4:27:79:02:75:44:61:87:c0:10:2a:eb:09:
e0:cd:8f:21:8c:84:62:bb:4b:9c:4e:88:15:38:a1:
03:bd:da:ba:45:7e:20:07:df:97:96:9f:e5:1e:52:
dd:27:66:7a:26:99:eb:f8:51:98:33:f2:a8:12:60:
33:24:ff:44:70:22:30:b3:79:77:de:73:4f:dd:56:
12:cc:6c:89:69:e4:94:1a:72:97:06:a4:6f:22:56:
aa:e6:45:de:3e:a0:dd:6e:25:67:c6:6f:99:9d:bb:
33:f6:47:7b:c4:11:cd:38:5c:d9:09:23:9e:08:87:
90:bf:4f:bc:4f:d1:43:be:2f:16:6c:31:7a:e4:08:
64:5b:71:cc:63:0b:88:18:91:b0:e3:0a:6c:34:46:
08:ca:38:c7:44:21:53:41:a7:44:fe:22:5d:de:9b:
41:28:2e:c8:43:66:12:cb:8a:5f:b7:a7:f5:40:a4:
99:bc:ed:4d:90:db:44:cf:66:c8:3e:a0:34:e2:82:
32:34:d4:3a:73:ef:f5:99:29:27:35:59:13:07:c6:
34:99:5d:4c:00:51:12:6c:93:bc:c8:db:70:f5:50:
94:94:5f:9e:c4:50:44:b5:58:25:64:00:01:c0:49:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FB:3C:00:AA:40:3F:6B:BE:EE:CC:54:7C:79:DF:F0:55:01:23:E9
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/_vs8AKpAP2u-7sxUfHnf8FUBI-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.4.0-91.108.11.255
91.108.56.0/22
95.161.64.0/20
149.154.160.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:0d:e1:f5:bb:ef:de:3c:c4:b8:f8:1f:b3:8a:f9:3f:e2:f2:
f9:37:b7:4e:41:cc:e5:35:82:a3:43:e7:b0:3a:f4:03:1a:7b:
66:38:ab:87:a7:19:7e:4d:4a:a1:0e:45:23:ad:2f:75:5a:94:
29:c3:2d:00:ed:14:b8:3c:a0:c4:24:ae:49:ab:23:68:76:de:
7e:2e:75:fe:7f:33:9c:36:4e:e7:66:9a:d9:f3:a9:6d:13:3d:
b0:38:ce:97:b0:6d:f5:d3:5d:be:97:29:3e:21:25:37:5a:54:
bd:50:03:39:5a:05:16:42:a2:76:77:a2:ec:f6:02:a7:ff:4f:
7b:18:ef:95:4b:d8:81:92:d6:46:35:a6:a1:33:ff:2b:e6:a5:
39:49:6f:17:0a:6f:99:68:98:00:82:ee:5c:99:ef:56:f8:78:
87:19:73:82:e4:80:83:1d:b1:fd:5d:9a:18:13:ce:c0:5f:86:
02:7f:c8:3e:a0:4b:50:aa:5e:82:3c:a8:f9:c4:83:f1:89:82:
11:0d:88:3c:23:7c:56:46:49:44:76:a0:8b:85:63:75:56:75:
27:d5:7b:f6:da:21:93:50:1f:fe:be:6e:17:4d:d5:d8:c9:08:
43:78:75:02:1f:7a:97:1b:0e:da:08:8a:c8:d6:c9:83:82:da:
14:a2:29:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 6 20:04:02 2023 by rpki-client on console-ams.rpki-client.org