Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/aQ-4wlKJnaNR6SxqqlNLXpUM2LU.roa
File: aQ-4wlKJnaNR6SxqqlNLXpUM2LU.roa (raw, json)
Hash identifier: 6hlo7ZJPdEfUdVqsYpc4wEU3PCeELXShOPnHL/LkkHk=
Subject key identifier: 69:0F:B8:C2:52:89:9D:A3:51:E9:2C:6A:AA:53:4B:5E:95:0C:D8:B5
Certificate issuer: /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial: 01899C318000A8D8F39C6B8BDC6218EEB99D
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/aQ-4wlKJnaNR6SxqqlNLXpUM2LU.roa
Signing time: Fri 28 Jul 2023 11:10:37 +0000
ROA not before: Fri 28 Jul 2023 11:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207620
IP address blocks: 84.38.241.0/24 maxlen: 24
91.224.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:31:80:00:a8:d8:f3:9c:6b:8b:dc:62:18:ee:b9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Validity
Not Before: Jul 28 11:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=690fb8c252899da351e92c6aaa534b5e950cd8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:3b:bb:3e:58:b9:d8:ff:06:52:be:5b:9b:
ba:4b:62:c8:b5:c8:15:c9:74:5c:4d:db:12:5b:f9:
a1:76:07:c4:45:22:24:d8:e8:1c:07:60:fe:fb:b6:
f7:5a:96:55:9b:df:5c:05:ad:c6:07:0a:0d:8c:11:
2d:1a:50:60:54:e8:47:4c:4b:37:17:e6:f1:2c:5c:
f4:46:8f:10:57:04:4b:7b:74:a3:0b:71:01:aa:20:
85:d0:d0:d4:c4:49:b5:74:55:51:ab:2d:2b:87:27:
b5:ec:a0:06:e4:70:eb:8c:7f:95:4f:6c:50:d6:52:
ce:49:55:e9:c4:10:9c:b0:cd:18:c0:3d:6b:6f:bc:
97:d4:37:8a:c8:0a:86:6e:f5:35:9e:74:10:56:6b:
dc:f3:d3:d3:41:f9:17:21:c5:f4:3e:6a:52:a5:40:
b2:20:35:e3:55:36:0c:12:71:17:ac:15:b3:27:6c:
15:c7:1e:90:80:20:96:9e:d1:61:ba:58:7e:40:2c:
ec:5d:8a:94:86:06:ac:40:c5:ca:93:3e:84:12:74:
84:d4:3d:06:12:b4:d0:51:b5:b8:2e:91:d9:71:9b:
c0:88:a4:ef:8e:ff:3a:28:6b:f1:2e:45:22:8c:be:
96:eb:ab:97:09:42:04:32:62:52:1b:85:a4:36:45:
7d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:B8:C2:52:89:9D:A3:51:E9:2C:6A:AA:53:4B:5E:95:0C:D8:B5
X509v3 Authority Key Identifier:
keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/aQ-4wlKJnaNR6SxqqlNLXpUM2LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.241.0/24
91.224.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b7:4d:ca:f9:ba:fc:c1:e3:f4:c0:94:4e:d2:76:6c:2d:07:
b5:13:b7:b0:4e:ba:61:f5:a3:e6:e8:27:3c:94:8b:f1:12:89:
f7:ad:55:11:5a:09:18:85:18:3b:93:9f:a1:bc:05:87:70:db:
ce:76:8a:2b:b4:8d:c7:35:ec:be:b8:18:5d:bf:3d:49:ee:96:
39:7d:55:d8:90:c0:8e:c1:fc:6b:f4:7b:89:e8:a8:ef:50:3c:
be:f7:6c:cb:e2:4d:f9:bf:64:a6:01:f5:66:e3:28:fe:64:95:
f6:42:0f:f3:16:b9:93:a0:d7:eb:b0:0a:75:dc:80:72:9a:37:
1f:7f:07:5f:4d:ea:48:32:3f:b0:f7:3f:57:a5:5e:4f:9f:46:
61:c0:58:53:f8:4c:0a:a0:5b:66:0c:00:6a:bd:d9:73:40:03:
dd:46:6c:c4:3e:94:b8:57:b9:d3:1b:c4:03:6f:ab:95:fa:74:
98:10:3f:5a:f8:af:7e:d7:d0:63:ee:33:59:e8:e0:a1:15:37:
00:cc:ef:7f:c7:21:3d:65:e2:32:d8:8e:b6:ac:7a:04:eb:02:
3f:af:66:29:19:71:58:0e:9b:a9:b5:38:1c:2f:03:0f:18:ac:
79:5d:d6:64:9e:3c:9d:e3:14:47:78:8d:6e:09:e4:9b:aa:d2:
63:8f:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:25 2024 by rpki-client on console-fra.rpki-client.org