Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/hub5gxuBAQrrmWYRo55iOXRci58.roa
File: hub5gxuBAQrrmWYRo55iOXRci58.roa (raw, json)
Hash identifier: hoqGQr+YCGDfBNuosl4PtwRapmgy9Y+I9xoeOtEukh0=
Subject key identifier: 86:E6:F9:83:1B:81:01:0A:EB:99:66:11:A3:9E:62:39:74:5C:8B:9F
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 018B33CB2F399469952BCDDEFCE03CA474AA
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/hub5gxuBAQrrmWYRo55iOXRci58.roa
Signing time: Sun 15 Oct 2023 14:43:55 +0000
ROA not before: Sun 15 Oct 2023 14:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206907
IP address blocks: 91.224.68.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:cb:2f:39:94:69:95:2b:cd:de:fc:e0:3c:a4:74:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Oct 15 14:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e6f9831b81010aeb996611a39e6239745c8b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:b5:ea:fe:5d:aa:2f:be:4a:bd:ce:33:59:
a0:a1:7d:f9:c9:20:dd:52:b2:47:df:dc:d9:8e:19:
e9:5d:9d:37:19:50:c5:64:73:50:de:13:43:bc:43:
81:be:b4:b2:bd:a1:07:9b:35:8c:0a:39:66:fc:2f:
7a:1d:dd:16:10:82:30:4d:79:13:9f:8b:fe:79:20:
56:8f:db:de:49:05:28:dc:d5:75:07:a0:d5:ea:5f:
99:df:09:e5:dc:b2:63:b7:f8:fc:d8:07:ca:d0:e4:
5c:d4:69:e2:c6:cd:e9:b3:fc:9f:7d:38:5c:6e:af:
25:48:fa:5f:6e:03:15:7e:16:a1:74:27:47:e6:c5:
af:82:77:9e:11:b0:cd:26:c8:37:f6:e5:17:47:fb:
40:39:5e:35:4c:71:79:1f:01:33:a7:ef:4b:9b:69:
32:42:71:12:8e:3c:df:81:f4:60:91:0d:1e:dd:54:
a2:37:be:43:5f:0b:84:18:68:89:c4:38:79:a1:d5:
b1:80:60:ce:14:c0:aa:9a:89:2f:a2:58:46:93:7b:
b0:f2:fd:41:dd:32:59:10:cd:55:f8:7e:30:cf:7e:
14:07:84:7b:6c:03:13:b8:77:99:e7:ec:94:e4:0f:
a9:f9:0b:60:2b:bf:8c:3b:3c:20:ec:aa:8f:be:a9:
14:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E6:F9:83:1B:81:01:0A:EB:99:66:11:A3:9E:62:39:74:5C:8B:9F
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/hub5gxuBAQrrmWYRo55iOXRci58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.68.0/23
Signature Algorithm: sha256WithRSAEncryption
15:cf:81:74:19:b9:f6:46:bf:8b:d9:59:a4:70:8b:7e:e3:33:
1c:83:e8:07:5d:8b:64:9e:c5:d5:ba:86:e2:5e:33:c8:93:17:
94:dd:e5:72:e0:9a:99:04:11:40:60:37:a3:2b:e8:5b:9b:36:
ee:d3:94:ba:e8:76:a5:f8:fc:0f:ba:c1:fa:a9:6c:b0:15:56:
f6:ef:cf:63:cc:24:4a:f9:3a:5a:90:7a:fe:f2:bd:15:8a:0a:
80:92:dd:80:97:fd:97:2e:51:30:aa:bd:21:6d:2f:b3:58:97:
83:6c:3e:31:0f:ed:a2:0a:3d:b9:79:1f:a3:55:61:7e:a3:ff:
d6:4e:9b:cc:05:a7:fb:38:bc:23:7a:07:91:bd:fd:34:40:4b:
d6:7a:89:08:4e:e9:69:19:37:ba:94:08:b5:3f:62:2a:ae:16:
fc:f9:66:88:d9:5f:27:cd:e2:55:4c:d5:e3:07:b7:b5:d6:ba:
02:82:f3:31:e4:6d:5e:14:79:22:a8:d6:a9:47:5f:49:75:f5:
9e:53:1e:f5:6a:b2:51:0b:df:da:22:aa:39:fa:12:2b:97:b9:
94:c0:8a:cf:5a:f4:92:40:20:24:44:2e:82:3f:69:2d:0d:ad:
f5:d0:3f:48:30:56:30:f6:5e:38:99:a5:c6:48:fb:64:a1:95:
ce:23:f8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:28 2024 by rpki-client on console-fra.rpki-client.org