Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qybud0hDU2MjAA6SN4YBtf8t1p4.roa
File: qybud0hDU2MjAA6SN4YBtf8t1p4.roa (raw, json)
Hash identifier: O8xcwep27m1PpjNSI5zlSCPSJ07dArt7pitKq7pIRrM=
Subject key identifier: AB:26:EE:77:48:43:53:63:23:00:0E:92:37:86:01:B5:FF:2D:D6:9E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01860D11730681812CF89A46E893813C6F0F
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qybud0hDU2MjAA6SN4YBtf8t1p4.roa
Signing time: Wed 01 Feb 2023 13:01:32 +0000
ROA not before: Wed 01 Feb 2023 13:01:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31133
IP address blocks: 91.243.88.0/24 maxlen: 24
91.243.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:11:73:06:81:81:2c:f8:9a:46:e8:93:81:3c:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Feb 1 13:01:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab26ee774843536323000e92378601b5ff2dd69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:4e:b0:66:2e:32:d5:56:f3:65:e7:b0:71:
16:a1:c4:d4:3f:2e:09:a9:cb:b3:aa:42:ba:6e:76:
79:c8:fc:b2:71:9e:d4:60:65:85:c6:f2:f7:4b:4c:
b6:80:60:40:95:a2:e7:dc:fe:bd:aa:03:cf:e9:40:
54:a8:e3:71:f6:12:2a:56:3c:c7:74:f3:b2:ec:26:
e5:a3:16:e0:03:7a:b0:b9:40:00:8e:96:cf:6c:60:
12:66:fa:b5:d6:ca:a0:66:c2:6f:bb:43:88:8a:da:
ea:5f:a5:2e:f4:3a:5b:03:00:58:92:40:ed:a5:8c:
fd:1f:23:7b:ac:4f:03:ef:d2:b5:f7:db:7e:26:d9:
9d:4d:b6:ae:58:5f:9f:1e:3e:1c:24:69:a6:62:d7:
3c:1b:55:53:c4:42:60:be:d7:d4:55:b0:2b:18:b9:
b2:71:6b:5e:df:84:40:c3:15:3d:4b:b9:c4:ba:89:
97:d6:63:6e:de:6e:af:f6:0d:c7:68:32:fa:70:a1:
9a:fb:20:51:f3:0c:23:18:4a:8a:19:a1:74:60:83:
7b:80:65:2d:44:ba:c8:d2:79:26:a5:2b:87:7d:69:
c4:65:3b:27:a0:25:1d:03:cc:dd:db:73:f2:bf:93:
a5:78:41:f6:eb:93:06:bf:6d:0f:94:ee:07:0f:4a:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:26:EE:77:48:43:53:63:23:00:0E:92:37:86:01:B5:FF:2D:D6:9E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qybud0hDU2MjAA6SN4YBtf8t1p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.88.0/24
91.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:64:6d:18:08:64:0e:b0:1a:65:de:3e:af:fe:ca:e0:42:07:
ce:26:57:8c:8f:e8:87:78:9e:f4:c6:5f:09:48:7c:c3:39:1b:
f6:e9:76:75:9c:ee:96:44:25:ab:d3:d7:9c:21:f9:1d:b2:56:
7b:06:21:63:9a:bf:30:7d:e1:28:2a:54:f7:97:0b:f5:72:4c:
0c:87:9b:f8:80:f0:8b:e5:85:f1:79:64:78:ad:3f:a0:86:7d:
0e:f5:e7:cb:b5:eb:77:d5:4f:61:8e:ce:09:64:6b:8f:28:85:
79:15:2d:a5:79:ef:10:51:96:8e:ab:a3:59:77:02:5b:4d:5e:
56:d6:23:cc:8e:f9:87:3b:88:7b:f4:a0:58:8f:a6:d7:05:5a:
cf:56:73:1f:f7:ab:80:c6:18:ed:6f:f0:a9:a3:95:1d:61:e2:
e1:04:83:ac:9a:13:f3:b6:f1:56:3b:d3:fc:8c:aa:d9:0b:25:
ef:29:e7:3e:c0:5b:95:87:1c:54:2a:eb:12:3d:a2:5d:2a:dc:
5b:b8:07:2b:ca:96:0a:57:75:2c:8b:cd:61:c9:ef:0d:d0:ca:
5f:f3:fa:db:b5:1c:2d:a8:20:d6:ce:24:b1:cd:12:75:9b:a4:
19:62:5f:cb:3d:5c:f3:09:d2:20:c9:5f:bc:4f:68:66:74:84:
dc:ca:cb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org