Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VcwoG0ZYKR9E-xdSMN3-Ss3aYi0.roa
File: VcwoG0ZYKR9E-xdSMN3-Ss3aYi0.roa (raw, json)
Hash identifier: cFzM4CAM92K3xebB6veWbWqsVxO6828x/FJIXUTgFOA=
Subject key identifier: 55:CC:28:1B:46:58:29:1F:44:FB:17:52:30:DD:FE:4A:CD:DA:62:2D
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018BDDCED4D9E14AE98A3501B4E4E72770A4
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VcwoG0ZYKR9E-xdSMN3-Ss3aYi0.roa
Signing time: Fri 17 Nov 2023 15:03:21 +0000
ROA not before: Fri 17 Nov 2023 15:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.217.162.0/24 maxlen: 24
91.217.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:ce:d4:d9:e1:4a:e9:8a:35:01:b4:e4:e7:27:70:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Nov 17 15:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55cc281b4658291f44fb175230ddfe4acdda622d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:41:f5:53:b4:ea:2f:13:9c:99:7b:23:81:
63:7d:10:e2:25:75:c4:db:99:27:10:58:ad:16:a4:
b0:fe:07:99:93:84:7d:22:ff:d3:4f:d5:cc:26:cb:
b8:a7:c0:50:4b:32:bd:3c:0e:8e:86:36:92:f0:78:
12:1e:ea:01:a0:b2:39:93:ff:19:27:fc:f3:e7:05:
28:c9:99:41:51:dc:ca:05:de:07:6b:60:bf:a9:6d:
9e:1e:56:fa:18:3b:b3:ac:b2:33:26:5c:6c:12:4c:
3b:51:b9:4e:7a:48:58:c3:47:58:cd:fa:40:c7:ff:
74:78:80:a4:99:1f:32:2b:1d:40:75:f5:19:3c:9d:
ae:d7:6b:3e:cd:23:1b:23:9d:2e:bb:11:bf:d1:16:
b9:ba:14:fb:14:0c:81:9d:e7:ab:e5:bb:29:61:79:
a3:41:7f:07:8f:dc:4b:2c:87:90:cb:64:eb:9b:42:
0a:a7:c0:c9:ca:cb:5c:51:6c:19:b3:4b:e9:0d:c9:
80:7d:5e:b1:fd:31:7f:80:65:97:19:b5:7a:aa:03:
8c:bc:9c:ef:94:c6:8f:e6:0f:7d:81:b7:4d:9d:de:
6f:7e:68:62:8b:65:e6:2d:5a:ba:29:08:82:d2:18:
91:05:30:8d:2a:de:94:23:51:b9:02:75:70:93:66:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CC:28:1B:46:58:29:1F:44:FB:17:52:30:DD:FE:4A:CD:DA:62:2D
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VcwoG0ZYKR9E-xdSMN3-Ss3aYi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f8:71:9a:ac:00:50:2e:7f:a4:f0:41:1d:44:99:e9:a3:28:
9f:2b:b1:54:61:31:66:fc:85:e1:c0:12:b3:d5:af:3f:a5:bc:
d8:d3:46:8d:50:b2:d4:a1:69:bd:54:30:5c:d3:c7:13:50:c2:
17:69:08:13:a9:31:55:15:33:46:75:69:fd:ea:12:4a:33:f9:
34:3b:30:50:3e:7c:10:97:ba:51:32:01:2b:d8:70:c5:a2:0d:
fc:49:16:53:35:32:f2:00:7c:3f:49:95:14:6e:47:dc:ef:ce:
8e:4e:bd:3a:e0:3a:63:7f:38:1b:35:62:d7:b6:36:e1:e9:dd:
4e:6a:86:5c:d0:06:7f:c6:f0:8c:db:68:a6:d9:bf:9e:e7:65:
fa:71:4d:69:bd:50:22:df:f4:87:be:55:62:a0:93:f7:3e:4e:
b8:10:2d:28:30:5b:be:6e:a1:62:34:90:43:00:05:a7:58:cb:
32:6e:c6:e2:cf:49:5a:f9:f1:a1:ac:06:aa:fc:63:16:51:48:
5e:84:2f:f6:6f:55:d2:f1:37:5c:ed:6f:3b:42:09:9a:e2:06:
c6:a9:fb:be:24:a1:f0:82:b9:19:b5:d2:70:69:ee:fd:ea:64:
2d:ef:37:79:88:f5:f4:39:43:e4:c2:6c:74:11:2b:52:59:16:
4c:5c:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 19:07:36 2023 by rpki-client on console-fra.rpki-client.org