Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/u7jsHz3cWhLL45o-Orhqo6pWOcs.roa
File: u7jsHz3cWhLL45o-Orhqo6pWOcs.roa (raw, json)
Hash identifier: ub7KqYjVWdfCKsdTgVFJtZqWz0o4yVm1p7jFdNG1CA8=
Subject key identifier: BB:B8:EC:1F:3D:DC:5A:12:CB:E3:9A:3E:3A:B8:6A:A3:AA:56:39:CB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A4DA70CE4040A3D78CF470EF532A
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/u7jsHz3cWhLL45o-Orhqo6pWOcs.roa
Signing time: Mon 02 Jan 2023 08:44:50 +0000
ROA not before: Mon 02 Jan 2023 08:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57916
IP address blocks: 91.242.97.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
91.242.100.0/23 maxlen: 23
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a4:da:70:ce:40:40:a3:d7:8c:f4:70:ef:53:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb8ec1f3ddc5a12cbe39a3e3ab86aa3aa5639cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:7f:01:b9:ab:f7:c1:70:64:5b:3a:ef:9f:
b3:5f:74:a4:56:fb:da:6a:96:69:f8:6c:c5:34:ec:
64:03:37:73:7e:c4:48:96:7d:86:c9:d2:12:0b:8b:
64:a5:69:79:f9:35:33:9f:29:ea:63:ce:a1:6d:c7:
67:c5:38:ad:7f:6a:e1:08:2d:b4:1b:b3:a7:32:eb:
f3:b3:7b:3b:0f:ee:89:73:f7:66:db:6f:c7:4d:5b:
3d:a7:5d:a7:7b:ab:48:33:fa:07:c9:82:b3:00:55:
85:ea:4b:b6:6e:68:97:1f:83:f0:57:bd:a8:57:e1:
4c:47:72:d9:b5:e3:97:ed:dc:57:0e:0f:21:98:c7:
74:91:40:33:4f:77:da:2a:ce:93:d5:73:cd:77:45:
69:a7:6f:7f:19:9b:c9:12:6f:a1:9d:7e:24:36:fb:
6c:a1:8c:ff:17:08:9e:4c:23:eb:36:de:27:24:68:
c3:95:be:cc:2d:a4:c9:6d:4c:75:e2:da:5c:bb:11:
e5:ba:32:68:c2:06:8e:f4:2d:85:59:a4:17:a6:5f:
52:3c:f8:0e:46:f9:b4:c1:f1:b3:5b:58:75:85:cd:
ae:65:26:a2:37:ed:ab:74:d5:4e:15:5f:77:1e:b0:
0f:c8:7b:6d:86:6d:92:77:31:a1:f1:0b:20:3f:11:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B8:EC:1F:3D:DC:5A:12:CB:E3:9A:3E:3A:B8:6A:A3:AA:56:39:CB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/u7jsHz3cWhLL45o-Orhqo6pWOcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.64.0/22
91.242.97.0/24
91.242.100.0/23
91.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c1:65:e4:c6:1b:fd:a2:0c:7c:ba:0e:bf:ce:fc:91:eb:61:
1e:2f:70:71:99:6a:1c:fb:4e:a0:52:17:22:02:d7:78:47:73:
f0:e1:69:90:50:79:fa:e2:22:b2:17:22:48:71:57:d8:c9:88:
dd:f4:52:33:53:e5:16:14:11:98:87:2c:a1:fd:9d:1e:95:38:
e8:25:16:46:b6:3c:b0:8b:e1:e5:c9:a5:e6:16:7a:7e:91:70:
14:2d:7c:9e:7b:73:0a:47:02:26:e8:ce:5b:e8:57:b8:13:cf:
ef:e0:1e:0f:94:22:e7:b0:3f:ca:a9:20:3c:a1:6f:96:e7:a2:
7f:db:7e:44:3e:32:10:00:26:07:ab:73:5c:4f:bf:ae:ac:8b:
32:16:62:bc:9f:d8:91:69:08:d3:51:d1:5a:eb:77:41:36:f9:
18:11:e8:b5:71:ca:c3:14:d5:d3:d9:22:ea:32:6c:43:b7:d9:
92:43:12:cf:e7:81:e4:41:69:5e:f9:fd:86:cb:5f:9d:64:c0:
00:7f:fb:fc:88:d3:60:66:9c:03:8e:d2:9c:2c:51:77:e4:70:
ff:c6:ff:be:e8:3d:8e:d4:c4:88:7c:0d:cb:5c:a2:dd:7b:e5:
c3:7a:7b:3a:c0:64:94:3c:68:2b:f8:e2:2a:06:67:c5:0f:f3:
a5:30:bf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org