Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/a1iJXJnqDeB5evv27MCfJX4OThI.roa
File: a1iJXJnqDeB5evv27MCfJX4OThI.roa (raw, json)
Hash identifier: 6atlfTBdyeV+QTk6ujUx5HGwyfEUAeQk+44/+ohHPtU=
Subject key identifier: 6B:58:89:5C:99:EA:0D:E0:79:7A:FB:F6:EC:C0:9F:25:7E:0E:4E:12
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A79ED393E76E3844BA2BBC2981D556
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/a1iJXJnqDeB5evv27MCfJX4OThI.roa
Signing time: Mon 02 Jan 2023 08:44:48 +0000
ROA not before: Mon 02 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 91.242.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:9e:d3:93:e7:6e:38:44:ba:2b:bc:29:81:d5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b58895c99ea0de0797afbf6ecc09f257e0e4e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:30:88:22:3d:70:97:ba:da:92:e9:b1:e1:b4:
36:fa:7d:8e:6f:e4:ee:4b:ec:f3:85:db:61:59:27:
a7:83:34:de:e5:65:7e:6b:58:5b:a6:58:71:00:a7:
24:96:8f:3b:5c:f6:66:e5:61:41:89:3a:c9:50:48:
e0:bb:1b:97:95:9d:95:0a:92:93:c8:ec:ef:64:9f:
23:52:7a:f9:41:c5:73:2b:7d:52:10:5d:e2:01:b4:
6b:9b:89:76:8c:27:70:92:ce:a6:e5:a5:f6:ca:32:
08:cf:f3:33:b5:5c:69:ab:a9:bf:c3:d7:21:b5:21:
df:e6:ac:2e:2c:d1:c1:1e:73:6a:66:26:05:5a:a1:
14:16:f2:7b:65:39:1a:a8:1a:3e:12:dc:84:ef:95:
3f:c2:d2:4a:ca:ae:c4:1f:9d:62:4e:9c:3b:00:ac:
3a:b4:01:ac:84:d3:ae:97:71:55:b3:07:43:07:f8:
ed:6d:78:7b:c4:6f:f7:3d:68:f5:6e:64:90:26:e3:
6a:df:19:8e:36:09:16:5a:23:fa:5a:f9:39:5f:64:
be:79:04:db:a8:6e:e8:d3:00:c3:ea:94:c4:a5:b9:
31:f6:d2:51:a5:41:bf:2f:df:bb:f7:ff:db:0e:02:
b7:26:94:e2:87:04:25:30:3b:4e:9c:6c:9d:72:92:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:89:5C:99:EA:0D:E0:79:7A:FB:F6:EC:C0:9F:25:7E:0E:4E:12
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/a1iJXJnqDeB5evv27MCfJX4OThI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.81.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:26:22:75:7b:68:e2:61:c8:40:92:eb:9c:b4:21:19:bd:a2:
77:15:23:20:02:a6:e8:28:28:d1:e7:3e:ec:7f:69:94:5b:a1:
d6:43:2d:11:72:4e:d2:bd:6b:51:80:df:22:e2:2a:e2:fb:fa:
5b:eb:f1:69:54:62:b0:ce:bc:e3:20:8e:3b:45:ec:86:45:0e:
19:75:56:93:7d:f1:c5:17:09:8f:1a:4a:6e:57:fb:0e:2f:3e:
31:ee:6e:4f:ec:cb:a3:1b:35:02:b2:a8:d4:73:dd:2e:86:82:
04:05:88:7a:d9:9d:38:1b:d8:23:79:4a:fe:cb:ca:ae:f0:5f:
11:90:b5:1e:b9:21:c7:6d:8a:f2:93:fc:2d:ef:06:ce:18:51:
9d:52:43:45:f7:39:4f:13:52:07:a0:1b:ee:b0:2b:ae:df:9d:
ee:a7:3a:02:5e:69:48:dc:af:2f:2d:e6:4b:3f:d9:d7:bf:4d:
97:45:b5:3b:23:25:ab:93:49:33:db:4d:a8:13:fe:0f:45:73:
4d:64:59:82:4c:d3:95:54:2d:b8:18:c4:1a:b6:2f:25:b3:87:
0a:3c:02:f2:28:04:57:46:a0:be:91:ec:9a:bd:26:35:ba:a3:
32:c1:9a:fc:28:2d:a1:cd:31:ee:60:24:74:68:15:84:d8:0c:
16:4a:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org