Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/y9TW02Ie-M7wLGqanU7iFpRpQjs.roa
File: y9TW02Ie-M7wLGqanU7iFpRpQjs.roa (raw, json)
Hash identifier: 4oInlu24+bN6tStBFpDzj0ZLvkew8s22A9TaGeJlMfY=
Subject key identifier: CB:D4:D6:D3:62:1E:F8:CE:F0:2C:6A:9A:9D:4E:E2:16:94:69:42:3B
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 01856F5DBFD844B7519014A186D38DD8458F
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/y9TW02Ie-M7wLGqanU7iFpRpQjs.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48119
IP address blocks: 91.207.126.0/24 maxlen: 24
91.207.126.0/23 maxlen: 23
91.207.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bf:d8:44:b7:51:90:14:a1:86:d3:8d:d8:45:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbd4d6d3621ef8cef02c6a9a9d4ee2169469423b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9f:15:09:78:ca:52:af:11:96:54:da:5b:be:
e0:b6:38:71:16:78:6f:57:d0:24:53:86:43:77:38:
b6:d7:30:91:af:49:04:36:52:c1:65:bb:92:32:4c:
ff:ad:ef:23:32:79:6f:d4:55:5c:3b:80:0c:4b:40:
89:c3:fa:97:55:33:27:6b:6e:19:32:f3:54:ba:47:
0f:83:6d:1b:4d:af:b8:2c:e0:8b:65:0e:98:ab:66:
68:8c:51:62:b7:3d:59:ed:5b:f4:a9:9a:b9:83:a0:
4a:78:28:8b:6d:06:3c:c7:20:91:b9:0e:4c:dc:e9:
93:23:b4:67:d7:b5:aa:52:0b:dd:f4:6e:df:29:e4:
81:d4:4a:25:bc:a6:f7:2e:39:6c:8c:93:73:96:a8:
63:6b:40:9f:fd:22:b0:85:fc:d7:6c:a1:1f:0b:77:
75:fc:31:2d:3e:75:27:09:fb:13:e8:af:bb:38:8a:
ee:14:d5:6c:37:f6:b7:da:f1:29:53:92:ce:91:bc:
a4:a3:a2:7e:b2:e9:9d:26:19:d6:39:b2:c7:92:07:
7c:25:b8:25:02:4c:07:46:ae:aa:de:e8:60:62:32:
66:3f:40:65:41:13:58:ad:dc:da:09:1f:2e:c2:ac:
f4:de:2d:b2:6a:12:22:3f:a7:94:a4:49:c2:72:54:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D4:D6:D3:62:1E:F8:CE:F0:2C:6A:9A:9D:4E:E2:16:94:69:42:3B
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/y9TW02Ie-M7wLGqanU7iFpRpQjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:3f:4b:a4:e1:d3:06:f9:db:ee:29:26:dd:84:e1:e8:6a:58:
93:d7:2e:0e:ca:ec:52:aa:d5:64:57:4e:10:60:d7:62:39:76:
96:34:5f:40:7d:3d:d4:d9:09:5e:35:42:f6:59:c6:77:cc:c9:
f5:86:92:e3:e8:5f:e1:f8:6b:f8:71:b4:90:26:9e:d2:13:49:
c3:e6:57:69:97:5d:70:2b:ce:80:4b:53:c9:da:44:df:db:d3:
71:b0:b4:9b:fc:eb:87:7a:b1:b3:21:f3:bc:ae:d2:d0:b0:b4:
8d:c0:aa:61:b6:d1:84:56:e3:9c:19:8c:87:0d:20:b0:ea:02:
40:4b:39:8d:84:34:af:b3:fc:bd:7d:99:a4:0c:55:bf:79:64:
aa:38:35:8f:ad:83:24:d7:6a:46:ee:be:7e:18:f2:dc:8d:4b:
70:53:0d:2a:37:c2:59:cd:17:38:5e:02:ef:1d:fd:e9:13:cb:
e7:a0:4f:b7:ed:f4:05:1d:43:83:89:ec:e0:5c:f8:92:f7:e2:
09:33:df:c6:73:c2:4b:76:05:59:1e:27:77:fd:07:a6:8c:36:
2e:b7:b1:ef:43:10:96:af:24:34:ad:12:7c:a7:61:f9:fe:a1:
6b:9c:70:7f:98:82:f5:9e:26:30:7f:e6:6e:f9:66:d1:d9:cf:
78:02:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:32 2024 by rpki-client on console-ams.rpki-client.org