Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M-bSEUg41ok0fEFoWQluEPdx2xs.roa
File: M-bSEUg41ok0fEFoWQluEPdx2xs.roa (raw, json)
Hash identifier: E/2cRQC/qIsdIRhn1OcxE5xF/wk3+iHwGeyzMl1caCk=
Subject key identifier: 33:E6:D2:11:48:38:D6:89:34:7C:41:68:59:09:6E:10:F7:71:DB:1B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B15417FC85B98D91000FA1788373EEEF5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M-bSEUg41ok0fEFoWQluEPdx2xs.roa
Signing time: Mon 09 Oct 2023 16:24:55 +0000
ROA not before: Mon 09 Oct 2023 16:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.223.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:41:7f:c8:5b:98:d9:10:00:fa:17:88:37:3e:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 9 16:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e6d2114838d689347c416859096e10f771db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:33:53:f7:75:d2:e1:8e:c3:a7:b7:7d:a8:
46:66:9a:91:d3:dc:33:86:a0:4a:19:b3:dc:59:1e:
4c:d4:75:16:ba:c4:79:b7:04:9a:73:74:10:f7:32:
c7:35:7b:6a:64:e9:37:7e:60:f4:e3:f2:24:d7:b5:
05:8b:dd:e5:fc:68:36:d6:1b:90:72:2a:b1:63:32:
66:99:f2:49:fe:a1:04:6e:c9:b5:26:3d:68:7d:83:
3e:d2:01:0f:9f:89:77:74:90:fe:bf:42:cf:66:07:
a3:c6:96:a7:98:74:a4:76:b0:5c:a8:1c:e4:77:8e:
ac:f2:cf:23:f5:2b:53:fd:0e:7b:c2:3e:c3:2f:d3:
c9:49:19:8f:02:1e:04:ed:bc:63:45:44:6e:c8:ec:
68:8c:71:08:d0:28:ea:69:7d:48:32:b4:35:d4:17:
81:65:b5:66:99:cc:d1:fb:36:45:0c:6f:82:74:67:
a5:27:e7:12:4b:ed:1d:e0:c5:90:c5:77:ba:08:9e:
42:86:94:68:3f:46:f4:ab:75:ce:db:40:dd:27:bf:
a6:5d:71:db:b2:9e:81:f7:93:12:1b:d5:db:7a:75:
96:d3:3f:df:73:bc:91:fa:e1:ee:b0:93:0c:55:b1:
1c:8a:01:21:d8:ce:c9:28:5d:82:a7:e5:c2:cb:4f:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:D2:11:48:38:D6:89:34:7C:41:68:59:09:6E:10:F7:71:DB:1B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M-bSEUg41ok0fEFoWQluEPdx2xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:48:c5:8f:25:81:1e:53:56:8e:8a:ea:cd:4c:ad:10:2b:0c:
6a:0a:9c:1d:9e:44:c9:28:44:9a:cf:2d:d2:59:ee:41:ed:46:
53:ea:e4:81:06:02:16:66:82:8c:6f:c7:9c:3d:5d:4a:9e:3e:
09:0e:f0:fa:f3:62:c8:8c:0a:c2:e4:e8:4a:f9:ad:59:ee:39:
ef:3b:39:bb:70:97:64:2a:f3:07:d3:11:82:5e:7f:9c:74:d6:
6f:f7:ce:94:d5:dd:45:53:7c:7e:a9:57:c8:05:d9:60:db:37:
5d:4e:e4:ac:53:4d:5c:78:46:80:4f:6d:6c:dd:47:98:e8:6b:
f6:cf:28:b1:2a:ff:a2:e4:97:2a:24:aa:72:f1:fc:aa:bd:19:
8b:60:c9:67:4e:07:e8:c8:33:c1:75:cd:7a:de:1b:72:71:21:
88:f4:1c:f4:7b:4a:c3:db:db:98:4d:56:ba:e4:36:22:c4:1f:
01:6c:4f:a8:d2:b4:2b:14:7e:bf:66:f2:39:ca:ba:8f:dc:7f:
fd:b1:75:29:b0:02:db:2b:b1:95:ac:f6:15:cd:3f:79:96:eb:
9c:fc:98:32:cc:26:8e:fe:ec:f5:80:1b:c5:e9:0e:17:23:9a:
e2:de:3d:2e:7a:b5:5a:ea:f8:5b:d1:45:4f:9b:8e:ff:91:98:
c4:55:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 00:01:28 2023 by rpki-client on console-ams.rpki-client.org