Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/wGDFVJzfA2uTiLYHlHcGFwNGOeI.roa
File: wGDFVJzfA2uTiLYHlHcGFwNGOeI.roa (raw, json)
Hash identifier: Wo1CY7KEettv3rbZRYleTSjEYmGF2+ugey6WpRN/OLE=
Subject key identifier: C0:60:C5:54:9C:DF:03:6B:93:88:B6:07:94:77:06:17:03:46:39:E2
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01885DF8C61E403B933359E2AB99CB01264F
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/wGDFVJzfA2uTiLYHlHcGFwNGOeI.roa
Signing time: Sat 27 May 2023 16:09:24 +0000
ROA not before: Sat 27 May 2023 16:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.217.162.0/24 maxlen: 24
91.217.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:f8:c6:1e:40:3b:93:33:59:e2:ab:99:cb:01:26:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: May 27 16:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c060c5549cdf036b9388b60794770617034639e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:a4:90:7b:94:6a:84:b7:90:f3:05:ab:e8:
b9:95:af:5a:5e:a0:4d:81:d6:39:eb:ef:a0:df:13:
57:68:1e:9c:57:0f:15:e1:57:8b:0d:ce:b8:d8:fa:
bd:66:83:87:82:a2:58:f5:9e:36:9b:b6:72:b7:f3:
c6:d3:d3:7e:eb:64:2f:7b:cb:b0:06:5e:88:ff:2f:
a4:d5:59:82:6b:f3:80:fe:77:ed:5f:0d:68:b7:3b:
b0:5b:c1:21:23:d8:05:b9:b4:3c:8b:48:ec:9a:e6:
06:f9:6f:d0:c6:11:8f:f3:9e:b5:a1:df:c0:48:6d:
75:09:67:58:f7:30:1e:7c:1a:0d:bf:ff:e9:25:a0:
78:b0:a1:a3:e2:f2:0d:7b:13:70:85:79:03:8c:fc:
45:b5:e4:80:b0:6a:13:a2:25:06:74:b8:24:91:2b:
5e:59:79:91:89:e5:77:62:0d:d0:21:96:4f:62:24:
51:ef:47:0b:83:9b:c8:06:3a:ab:8e:46:8f:0b:c1:
70:23:bc:24:fe:64:26:25:49:e6:f7:6c:8a:fa:4f:
36:d6:18:a8:ba:76:ab:d3:6b:b6:cb:7f:ca:8d:59:
34:28:35:af:32:a4:a6:bb:79:59:5b:a7:46:4a:16:
b3:8d:ba:77:f4:80:d3:43:40:38:ef:df:47:3a:3c:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:C5:54:9C:DF:03:6B:93:88:B6:07:94:77:06:17:03:46:39:E2
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/wGDFVJzfA2uTiLYHlHcGFwNGOeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
91.217.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:39:bd:c9:01:11:27:b6:80:6a:99:13:bb:5a:e4:c0:08:38:
a4:47:bf:e6:b8:a4:dd:03:fb:83:0e:f1:2a:68:11:7f:c2:36:
fc:fe:c8:86:b4:f1:bd:ec:f0:65:94:3d:7d:00:05:cd:b6:65:
de:e8:47:24:76:6f:e5:a8:2b:5b:c1:72:aa:4b:9f:29:5f:2e:
5e:b4:0e:e6:13:27:41:56:fa:56:bb:fa:be:6d:4c:8f:82:39:
dd:52:63:4c:c7:79:44:4b:b6:e4:9d:57:28:41:79:db:56:17:
30:31:50:31:03:be:99:16:4f:9f:85:2c:45:1c:87:34:4c:6f:
16:2f:9e:3c:6d:4b:16:f0:15:ec:cb:d6:17:fb:5a:c0:1b:3a:
08:92:ac:46:3e:23:ba:37:a3:29:80:4f:cd:fa:5d:7e:31:f6:
35:2a:dd:0b:2a:4a:c6:b7:15:ec:0f:07:d9:dd:52:c2:f1:78:
8f:b3:da:40:fc:b3:8c:81:0e:da:d8:40:c5:73:e3:d5:3d:26:
d9:13:7f:e3:1e:3d:69:54:0d:bb:89:3c:6a:0e:fe:a4:b3:9f:
47:98:9d:30:40:6f:26:4d:ee:71:52:0b:26:bb:26:bf:13:4c:
0f:db:be:b1:96:6c:17:cb:28:43:b7:e3:c1:65:56:4a:14:f7:
0d:5f:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 16:09:11 2023 by rpki-client on console-ams.rpki-client.org