Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/_oTRZpnhGTGvgjogRU5aytAUVdA.roa
File: _oTRZpnhGTGvgjogRU5aytAUVdA.roa (raw, json)
Hash identifier: p1WzU2Kq82w3rPwkLgx9MY1GrOFGnvGBq3qKHpU2wDg=
Subject key identifier: FE:84:D1:66:99:E1:19:31:AF:82:3A:20:45:4E:5A:CA:D0:14:55:D0
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 018894A176CA20CEAF4310E7F9AB999F54A0
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/_oTRZpnhGTGvgjogRU5aytAUVdA.roa
Signing time: Wed 07 Jun 2023 06:53:09 +0000
ROA not before: Wed 07 Jun 2023 06:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200410
IP address blocks: 91.187.224.0/24 maxlen: 24
91.187.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:a1:76:ca:20:ce:af:43:10:e7:f9:ab:99:9f:54:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Jun 7 06:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe84d16699e11931af823a20454e5acad01455d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:44:76:60:a6:50:61:88:e0:3f:53:b1:97:30:
b5:ab:5f:71:e8:0d:be:f8:fe:84:92:67:b9:49:1a:
15:08:84:22:5d:0a:ca:0e:67:c8:2c:f6:26:be:f8:
f7:e7:0b:62:54:74:dd:bf:6d:dd:6f:2d:19:0c:74:
06:95:88:85:9b:be:b2:06:41:71:4d:a2:36:8f:3c:
c1:fd:be:c5:29:bb:99:01:ed:4b:c0:b8:80:90:f3:
b4:03:0b:49:c7:c5:89:c7:69:af:8c:04:4e:04:51:
25:55:f4:65:0c:a4:f5:92:a9:da:4e:8f:df:64:86:
4d:01:3a:ae:77:9b:e8:ce:a0:b0:2b:f8:f5:af:aa:
76:48:7d:fc:ce:da:ba:4c:e9:db:af:29:ea:15:cd:
64:a3:28:27:65:9c:70:45:96:b2:23:62:0c:d9:76:
36:dc:62:86:ce:dc:37:0d:9f:a4:7d:08:b9:5d:43:
89:90:89:38:fd:71:d0:23:32:15:d9:26:74:d1:f9:
76:33:63:e3:01:30:a5:1a:51:fd:3a:7e:42:0c:52:
ae:94:4c:46:d7:40:a5:20:f6:db:65:1f:95:3d:39:
82:fb:50:82:cd:71:29:9f:46:2b:73:bb:ff:c0:4e:
3e:1c:e8:1b:76:2f:ab:47:0e:6b:cc:03:fb:91:bf:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:D1:66:99:E1:19:31:AF:82:3A:20:45:4E:5A:CA:D0:14:55:D0
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/_oTRZpnhGTGvgjogRU5aytAUVdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.224.0/23
Signature Algorithm: sha256WithRSAEncryption
22:71:f0:96:57:58:07:96:81:33:96:54:e6:81:a6:01:20:95:
27:e4:91:83:f2:05:d9:00:32:dc:19:7e:0d:41:a0:15:e5:d0:
21:74:a3:a4:28:5e:08:84:20:e4:66:00:28:1d:ea:13:3f:21:
08:c9:fb:f7:8a:3e:3e:e3:68:0d:b6:d2:ae:68:57:ad:bf:ba:
d3:21:76:98:58:ea:0e:a4:10:83:b2:f1:f2:35:3e:a7:89:ee:
c4:fd:09:46:fb:44:0d:79:50:5e:1c:c6:3c:49:99:cb:65:9c:
65:a7:fd:1b:ba:33:b8:a3:35:f4:04:99:dd:c6:0c:40:c3:7e:
5a:81:d1:f1:d1:fd:94:c0:74:9e:f8:a9:64:b2:97:5c:9d:1b:
f5:aa:13:f6:5c:85:eb:9f:84:cf:8e:73:e2:35:d7:0a:bc:78:
d0:39:ef:20:a1:cd:bb:f1:5f:6d:97:ba:40:29:55:c0:9d:c6:
d1:85:96:f2:7a:5b:6d:13:04:70:51:71:62:6b:87:9a:3b:7b:
0b:49:22:d6:56:7f:9c:36:5b:eb:44:92:61:39:8f:ff:c3:24:
a5:a1:c1:6b:dc:5f:18:ac:6a:ee:82:e4:43:71:48:36:bf:bb:
53:a6:35:ad:18:95:f2:74:dd:2c:4c:56:d2:3d:f7:48:26:3e:
cb:80:b3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:24 2024 by rpki-client on console-fra.rpki-client.org