Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/Dg-N6R9_uBh1T7HRPGcCU0cpcUw.roa
File: Dg-N6R9_uBh1T7HRPGcCU0cpcUw.roa (raw, json)
Hash identifier: tJv1mnTSQ6Fp1pDrc1YtFeaXB2aMkHgUqGcIxTVOBfc=
Subject key identifier: 0E:0F:8D:E9:1F:7F:B8:18:75:4F:B1:D1:3C:67:02:53:47:29:71:4C
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 018572B43361BD6C6A34FC661EF325EA1CE1
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/Dg-N6R9_uBh1T7HRPGcCU0cpcUw.roa
Signing time: Mon 02 Jan 2023 13:38:10 +0000
ROA not before: Mon 02 Jan 2023 13:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207442
IP address blocks: 91.192.4.0/24 maxlen: 24
91.192.5.0/24 maxlen: 24
91.192.6.0/24 maxlen: 24
91.192.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:33:61:bd:6c:6a:34:fc:66:1e:f3:25:ea:1c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 2 13:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e0f8de91f7fb818754fb1d13c6702534729714c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:72:bd:20:dd:9c:11:ae:45:1c:f2:ca:4f:
dc:05:f9:90:80:93:c5:fd:b1:b2:79:87:d1:ff:b3:
77:24:7c:04:97:95:76:ee:56:6a:db:77:f5:cc:6b:
91:a4:4f:de:9f:60:b5:91:66:6b:c2:1c:1f:cd:fc:
e8:89:27:7f:83:b6:2b:ad:c0:5f:75:b2:11:04:af:
b9:f1:cd:d0:20:1e:50:82:ac:1a:7d:29:e6:3b:b6:
d4:1a:5c:f7:b5:c0:c4:2e:54:7e:ee:bb:59:da:2c:
26:07:d1:e9:70:36:3a:84:11:49:8d:4a:0e:71:b7:
85:51:e3:62:e0:ec:11:f1:95:6f:28:c2:9e:cf:67:
61:eb:44:1b:32:6a:d4:07:32:fc:de:fe:dc:c9:e2:
82:aa:18:c7:30:da:33:8f:96:3d:99:f0:2d:ff:c6:
66:2f:f7:a1:35:ed:7d:38:0b:41:c1:d3:ba:e3:1b:
7a:f5:6c:c2:93:0a:6d:6a:02:90:a3:8b:e3:11:87:
d9:b4:8d:c7:b4:62:e6:92:dd:55:9f:b0:82:c4:e1:
13:33:d0:52:31:ce:11:83:63:c6:3f:1d:f8:72:2e:
d1:1f:ac:80:61:15:f4:99:32:0f:63:10:f5:df:ed:
1f:f2:fe:f4:32:06:b9:5f:54:7a:f9:b3:40:ef:ca:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:8D:E9:1F:7F:B8:18:75:4F:B1:D1:3C:67:02:53:47:29:71:4C
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/Dg-N6R9_uBh1T7HRPGcCU0cpcUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.4.0/22
Signature Algorithm: sha256WithRSAEncryption
d6:42:85:3b:c2:fc:96:9a:55:d2:41:9c:0a:8c:a1:10:31:a5:
fe:88:cc:4e:4b:3a:f6:7c:09:08:16:bb:c6:cd:87:ff:ee:81:
72:c2:7e:b8:fe:c2:f5:99:ed:6c:84:f8:1e:cc:34:5b:f9:5d:
66:81:ff:32:d2:97:c5:48:4c:df:75:eb:4b:e3:ca:73:6d:49:
54:a8:5d:71:9e:b4:c6:a5:09:c8:4a:d6:df:76:88:f6:f2:b2:
35:cc:aa:67:ad:02:db:de:14:62:b1:4d:bf:39:71:31:6c:08:
24:d3:4d:24:fa:d4:eb:05:b9:79:5e:76:48:86:37:72:37:e5:
59:28:1f:25:3f:7e:5f:a6:d9:2a:25:81:2d:65:db:d8:b3:58:
20:0f:46:56:32:26:6c:25:c7:6e:4c:84:6d:ab:ac:9b:e7:db:
7e:9e:29:da:1e:52:fa:42:a3:a5:8a:9d:28:6d:ad:3d:83:b8:
c5:3c:76:57:d2:96:04:4a:93:27:92:7b:47:f6:1b:96:0b:2f:
46:00:ad:84:e6:4c:af:3d:90:8d:66:1e:6e:49:81:bb:5b:1f:
40:fd:26:ff:ac:48:ad:54:4b:87:23:e7:d1:67:27:de:8e:fa:
c0:74:bb:dd:96:09:5e:db:49:ab:19:1a:4b:d3:5f:ea:7e:c2:
c0:47:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 11:59:21 2023 by rpki-client on console-fra.rpki-client.org