Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/lywyMmgd8Hf1ia3KtogJKtHvtNk.roa
File: lywyMmgd8Hf1ia3KtogJKtHvtNk.roa (raw, json)
Hash identifier: SuRV5CqS2mle2A0jbpoosdpSLrrfsiVNrbmwxo/PcOs=
Subject key identifier: 97:2C:32:32:68:1D:F0:77:F5:89:AD:CA:B6:88:09:2A:D1:EF:B4:D9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0189DB2B59C3AD439320F1F55BDA6FC80CFA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/lywyMmgd8Hf1ia3KtogJKtHvtNk.roa
Signing time: Wed 09 Aug 2023 16:39:58 +0000
ROA not before: Wed 09 Aug 2023 16:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46918
IP address blocks: 91.242.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:db:2b:59:c3:ad:43:93:20:f1:f5:5b:da:6f:c8:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Aug 9 16:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=972c3232681df077f589adcab688092ad1efb4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:25:c0:4d:c9:d8:e4:21:25:52:71:8a:dd:
1d:5c:63:b7:ef:9d:08:8a:59:3c:7e:c5:68:55:e2:
f2:9e:f7:86:c5:78:ac:cd:18:8f:bf:5d:e4:4a:b7:
1e:fc:f0:8f:99:62:d2:ee:22:73:45:7f:f9:3a:fe:
5e:15:bb:5e:14:60:26:f0:19:c1:9d:0c:8a:87:31:
c7:2e:85:eb:38:7b:c9:6b:ff:19:bf:2d:f6:83:5a:
1c:df:21:68:5e:81:af:cb:34:f4:d0:4d:a6:50:d7:
e4:52:e0:45:4c:d2:34:80:77:5d:5d:ac:94:a3:25:
07:fe:63:65:45:31:fd:f6:cb:79:8a:9f:5a:19:19:
02:e6:87:32:75:b0:94:0a:1d:99:ad:8d:9a:4d:64:
66:a3:e6:36:e5:1a:e1:9a:81:df:09:72:a3:f5:e3:
3f:b6:2d:68:42:76:a0:2a:8d:80:41:f5:73:0f:5d:
a2:0b:fb:f5:a4:91:b7:3e:c1:0c:90:b6:3a:4a:3f:
44:0a:56:9e:04:8f:32:13:88:8a:31:fd:59:d5:e1:
bc:a0:4b:f2:b2:9c:b2:1c:20:d6:3e:e6:64:3e:e7:
27:66:39:15:59:cb:86:85:60:b2:bb:25:dc:88:e7:
ec:d5:87:d7:79:dd:2e:13:2e:9c:04:3e:e9:c6:63:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:32:32:68:1D:F0:77:F5:89:AD:CA:B6:88:09:2A:D1:EF:B4:D9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/lywyMmgd8Hf1ia3KtogJKtHvtNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
Signature Algorithm: sha256WithRSAEncryption
91:a2:7d:2e:fd:64:c2:59:64:4c:82:e0:a4:b9:14:81:01:1e:
d5:be:9a:d8:f8:a7:69:40:1e:fa:89:5a:7a:31:31:c0:b7:86:
8e:bd:d7:43:16:6e:ef:84:6d:1c:6d:51:86:68:bd:5c:83:87:
8e:f6:09:95:f2:63:85:ec:8b:24:bb:9d:ec:78:69:15:fd:3a:
e6:d8:8e:18:c2:76:8b:22:50:1b:5e:5a:9b:c5:c9:33:c1:f1:
6b:e1:7a:88:a3:00:35:17:de:15:9e:7b:94:3c:f0:97:a8:d7:
a0:1b:8c:cb:76:25:5f:4f:98:3c:ad:fd:59:1d:7c:f1:9f:f8:
88:63:af:8a:97:99:40:f4:33:f7:05:2f:2b:6e:b5:2a:7f:1a:
98:c7:a4:90:d4:bb:dd:64:b1:c6:fe:20:e9:07:ab:f7:5b:4f:
48:1f:9d:ef:32:4e:c0:b5:cd:7f:b1:f6:47:f2:cd:ee:e5:c8:
a8:1b:58:95:74:db:12:20:f7:fb:41:cf:7d:24:39:a2:42:e3:
a2:6d:04:9c:ad:f4:0d:bd:10:bb:7b:21:2c:b7:91:55:1a:0a:
75:bb:c1:b4:61:13:17:53:3d:07:1a:f8:74:48:3a:55:96:02:
6f:c8:c7:e2:80:ab:3d:7f:88:75:d9:1d:d3:d9:cb:36:7d:c6:
d6:35:7a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org