Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/2sjLj4JVlZ2VSO9MPu9PKN7M6iU.roa
File: 2sjLj4JVlZ2VSO9MPu9PKN7M6iU.roa (raw, json)
Hash identifier: hls3xR9Z2C7qsHbzDZXxrtNoU30mMhAp8SQRLwGV6Uo=
Subject key identifier: DA:C8:CB:8F:82:55:95:9D:95:48:EF:4C:3E:EF:4F:28:DE:CC:EA:25
Certificate issuer: /CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Certificate serial: 01857039A38E7841DCDB24E515DE529884ED
Authority key identifier: 22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/2sjLj4JVlZ2VSO9MPu9PKN7M6iU.roa
Signing time: Mon 02 Jan 2023 02:05:03 +0000
ROA not before: Mon 02 Jan 2023 02:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.242.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a3:8e:78:41:dc:db:24:e5:15:de:52:98:84:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Validity
Not Before: Jan 2 02:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dac8cb8f8255959d9548ef4c3eef4f28deccea25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:74:15:59:14:fc:53:2e:7f:86:78:ec:37:
9b:ab:3e:c8:c2:70:ed:79:63:4a:8e:99:80:d1:34:
27:7d:99:17:ff:56:6a:4a:19:af:6b:9f:90:85:f6:
b1:ca:f4:11:7f:eb:1c:00:ff:96:99:df:e4:05:e5:
dd:67:a3:ca:96:20:fa:a3:4e:41:52:97:c8:4f:11:
93:b8:cf:19:27:cc:1c:e5:5d:41:0d:74:15:2e:16:
8f:24:01:2d:ee:e4:0d:f8:9d:f7:5b:76:2c:c0:6a:
9f:94:f2:17:7f:94:b3:fc:d5:5b:91:61:79:c0:57:
91:c2:a1:21:e4:b1:0e:8b:b9:43:24:83:a3:4e:0e:
15:15:fb:b6:4a:92:a3:7b:65:a3:2b:e1:a3:ae:b0:
4c:5a:bb:6e:0b:3e:85:46:ed:80:37:0a:4a:c0:9c:
2c:83:75:4c:04:9e:f6:45:44:bf:e9:04:24:c3:20:
13:37:9e:bb:3f:29:5a:47:77:b9:a0:09:d8:9b:f6:
81:50:9d:ca:d6:c8:08:39:cc:69:6b:a5:71:48:17:
18:00:1e:b7:d0:c0:b2:ee:aa:22:f1:bf:10:8b:4f:
11:be:5e:a7:98:23:93:56:51:dd:93:f6:ff:3a:62:
2d:cd:a9:72:44:a5:83:bf:b4:b1:fb:11:20:c8:34:
22:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C8:CB:8F:82:55:95:9D:95:48:EF:4C:3E:EF:4F:28:DE:CC:EA:25
X509v3 Authority Key Identifier:
keyid:22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/2sjLj4JVlZ2VSO9MPu9PKN7M6iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/ImvMD4ezL3S4ONwfJNKOWCP2D_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.246.0/24
Signature Algorithm: sha256WithRSAEncryption
41:85:85:5a:ad:b3:97:dc:fb:b5:6c:f0:b4:ea:d6:92:6b:28:
00:97:3c:c7:16:c4:77:db:cb:45:00:08:8c:8d:b9:29:33:73:
f1:82:90:a8:46:37:82:51:e2:70:c8:68:50:05:55:31:05:24:
ee:95:98:ba:88:a8:68:dd:78:51:26:8e:ad:97:0e:dc:c6:2f:
97:dd:74:fb:02:22:99:d1:57:5f:8a:b7:ec:e5:ae:71:5e:a5:
6e:a2:f8:4d:bf:15:36:9c:b5:7b:b7:ea:f0:a7:e6:53:05:4f:
1d:f1:e7:3e:37:de:c5:00:35:72:04:52:aa:3b:2d:a2:6e:47:
05:5b:8c:00:d9:3a:80:38:2f:c7:2c:b2:b6:c6:36:2a:c9:9f:
ec:9e:3c:f7:ec:b9:df:db:19:9b:d0:fd:b6:f5:62:3c:d8:b2:
88:fd:37:d6:18:a9:28:43:01:6f:07:93:e1:9a:37:59:48:8c:
aa:27:14:93:b7:1f:fd:e5:c2:21:54:ce:0f:f6:da:0a:f8:1b:
68:03:44:27:07:0b:fe:fd:0c:4f:1b:37:f8:44:20:81:b5:07:
e4:3a:77:8e:57:1d:7c:78:e4:3f:1c:09:6a:03:81:66:df:fa:
91:9c:4a:75:ed:27:9d:8d:5e:1f:40:53:16:72:c2:ba:00:55:
3a:0a:15:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org