Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/vyEvXDkiyZohbtjPsmr2wmf-Hwk.roa
File: vyEvXDkiyZohbtjPsmr2wmf-Hwk.roa (raw, json)
Hash identifier: JzoD+TzRdVJCKhEIPWRS9AMoDkH8vTpw58WyFFmlH0o=
Subject key identifier: BF:21:2F:5C:39:22:C9:9A:21:6E:D8:CF:B2:6A:F6:C2:67:FE:1F:09
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 0187044D9A1E8D3B9E8AA46F20CE04372C95
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/vyEvXDkiyZohbtjPsmr2wmf-Hwk.roa
Signing time: Tue 21 Mar 2023 13:13:27 +0000
ROA not before: Tue 21 Mar 2023 13:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62378
IP address blocks: 91.217.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:4d:9a:1e:8d:3b:9e:8a:a4:6f:20:ce:04:37:2c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Mar 21 13:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf212f5c3922c99a216ed8cfb26af6c267fe1f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:b6:11:eb:d2:0e:f8:26:95:9f:50:67:34:
3b:c0:fc:74:33:c5:d5:95:d0:b1:a3:05:0c:34:e3:
4e:21:19:63:4e:a3:41:39:2f:0b:4b:cf:5f:2f:0d:
ad:6b:42:72:42:77:e5:a7:5c:7f:bc:d1:2e:0e:de:
92:f9:34:67:85:9e:d1:78:da:1e:81:ca:e7:7f:16:
12:2d:d6:2a:e4:da:22:a0:77:8c:ac:6e:41:f9:2c:
cd:02:a0:29:79:01:c1:45:17:c0:be:2c:6b:98:4f:
19:41:db:df:2a:7e:cf:db:6f:a0:b4:66:12:88:fa:
08:eb:7b:50:eb:d7:3e:c2:f3:3f:c1:ac:b2:25:5a:
26:8d:ff:d3:a3:47:8b:bc:fb:a7:89:2f:0a:b5:12:
fe:96:74:f2:25:62:f5:29:10:0a:d5:a0:82:32:47:
72:76:58:5f:45:b4:a9:24:27:f2:65:a2:81:2a:9e:
fd:94:59:38:10:df:03:01:e8:be:ab:7f:9d:45:83:
2f:1f:72:a2:77:e7:bc:9a:3e:52:51:63:b7:7e:a5:
67:a0:df:16:79:5b:b5:55:00:7d:ef:07:ac:15:b5:
87:26:ab:dc:3c:02:f6:bf:ad:d2:83:c4:29:b4:38:
2c:33:8b:b0:e8:0d:b2:a6:88:2f:75:d8:a8:70:9f:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:2F:5C:39:22:C9:9A:21:6E:D8:CF:B2:6A:F6:C2:67:FE:1F:09
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/vyEvXDkiyZohbtjPsmr2wmf-Hwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.178.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ca:27:e7:85:ce:f6:2b:c5:33:0a:d7:15:a8:32:6d:3d:cb:
b2:21:6b:ae:12:f7:42:44:06:b4:e7:b7:01:5a:04:23:57:6c:
f7:80:47:a2:25:fd:48:33:45:e1:87:98:83:da:c7:69:cd:cd:
39:55:a0:b5:6f:a1:e2:c0:c9:e3:0b:d0:32:e1:77:cc:e6:de:
89:be:6a:ce:53:17:fc:9b:e8:fe:05:58:b3:22:c1:0a:30:b4:
70:3a:ba:1a:fb:e6:a7:94:ce:cb:23:dd:63:13:b5:f1:64:c6:
b9:4c:ce:6e:fd:cd:10:ab:1b:d5:37:98:e6:4b:d9:aa:71:03:
8d:20:f1:ea:93:77:2a:45:e5:54:da:3e:c8:a2:fb:0d:e5:27:
da:75:18:36:a3:85:4f:63:a8:5e:28:36:ae:a9:31:af:92:bc:
ac:e8:3b:8f:2a:c5:f2:18:98:ea:8e:32:49:e1:c4:24:63:d0:
15:2b:c1:40:75:3d:06:27:c3:ef:3e:21:5e:ef:96:0d:d2:d7:
f3:bf:b6:77:40:1c:61:8e:e9:4b:c0:dc:8d:99:51:eb:6a:85:
c2:a2:e1:56:eb:5f:86:af:d9:f4:2f:31:87:59:27:0c:2c:c8:
ee:c0:65:b1:d2:dd:48:b2:2a:0b:e6:fb:c7:11:fa:96:c4:96:
38:12:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:02 2024 by rpki-client on console-ams.rpki-client.org