Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/hv5FoY7liXcoJK1Ak_lu4NZLWMY.roa
File: hv5FoY7liXcoJK1Ak_lu4NZLWMY.roa (raw, json)
Hash identifier: +JLCs4F0t48U9Y7N/y73JCiK4aVyXg07Juzif4INqsc=
Subject key identifier: 86:FE:45:A1:8E:E5:89:77:28:24:AD:40:93:F9:6E:E0:D6:4B:58:C6
Certificate issuer: /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial: 0185711E39E8F81B8495A0421F18D22934DA
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/hv5FoY7liXcoJK1Ak_lu4NZLWMY.roa
Signing time: Mon 02 Jan 2023 06:14:44 +0000
ROA not before: Mon 02 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.246.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:39:e8:f8:1b:84:95:a0:42:1f:18:d2:29:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
Validity
Not Before: Jan 2 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86fe45a18ee589772824ad4093f96ee0d64b58c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:e1:95:2f:ba:1d:fd:a3:cb:d3:d3:1b:76:
91:e7:f5:f1:68:3c:78:ed:c5:63:97:79:94:47:58:
38:23:df:5c:1e:a9:a3:d2:1a:13:e3:97:25:61:ac:
26:06:14:e3:b6:87:a2:31:9e:76:20:30:48:6e:36:
4c:e8:e2:b1:74:31:f3:9a:74:b2:f0:03:04:80:82:
96:89:0b:34:e9:6d:73:10:9e:94:2f:92:3b:c7:90:
b5:b5:f4:4f:28:7b:59:58:0d:96:4a:0c:62:71:6f:
af:73:54:43:1d:76:83:e8:62:7a:52:38:e5:3e:74:
6a:88:44:4f:76:7e:93:00:58:02:de:af:5f:f9:e5:
4b:cd:cb:b7:50:b2:e6:b9:ce:5a:1e:f3:ea:0b:89:
5f:92:2c:68:34:35:8f:df:ba:e3:c0:3a:49:97:2f:
e2:d0:ea:d3:c7:53:60:b7:40:ad:ba:1b:12:63:c6:
35:46:63:ac:90:cc:10:f4:dd:79:fa:c0:01:d2:d8:
4c:54:f1:11:ec:ba:6b:73:e4:9c:73:68:8f:cf:1b:
73:00:95:48:0c:69:58:2a:67:fc:99:8c:4e:cc:10:
92:17:39:0b:2b:b4:5f:96:d6:3b:75:ae:ca:ee:0a:
d0:69:7c:cf:e4:a0:7e:68:3b:86:3e:df:6d:cb:f7:
df:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:45:A1:8E:E5:89:77:28:24:AD:40:93:F9:6E:E0:D6:4B:58:C6
X509v3 Authority Key Identifier:
keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/hv5FoY7liXcoJK1Ak_lu4NZLWMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ce:88:4c:af:9a:66:6b:b8:5e:f7:64:bc:b9:4b:fd:30:59:
f4:14:79:27:93:39:a8:98:8c:ed:f1:ff:62:2c:62:a8:83:fc:
e0:66:94:03:81:fd:10:99:56:d4:1d:50:87:a7:5c:6e:cc:dd:
64:60:02:8e:4a:91:13:58:fc:33:14:40:d1:e5:89:aa:58:1f:
4d:54:76:d3:6b:a3:cd:9a:e2:ca:23:93:a2:bf:7d:5b:36:ef:
29:17:c6:2c:55:6f:f0:46:39:84:49:9d:5e:6d:01:b2:6a:34:
ef:84:34:ce:11:89:23:6a:e1:1b:d3:c9:c8:b7:28:c6:18:9c:
83:49:cc:91:cb:4b:e7:0c:77:77:2c:10:2f:2e:32:67:a9:9f:
53:1e:f2:fa:cf:1c:bb:3e:e8:ab:f5:84:ce:34:45:94:f5:e6:
70:bf:7b:27:69:9d:f4:96:ab:07:21:81:c7:93:2e:0b:b7:b6:
ff:30:cd:b8:65:cc:f4:43:8d:f7:a9:0d:e6:ba:73:52:5f:b1:
7e:7e:a0:44:ce:7e:af:42:73:c7:eb:3c:b7:ed:53:ca:ae:c8:
30:d8:f6:c1:65:b3:27:cf:a7:9b:1b:d0:9e:5d:e4:ff:d6:a8:
ec:30:bb:3b:c2:d4:18:ff:56:a7:5d:d2:63:36:06:2f:70:df:
e8:52:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org