Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/uzsmzyBE3jraWIXwLkoOB47ioRM.roa
File: uzsmzyBE3jraWIXwLkoOB47ioRM.roa (raw, json)
Hash identifier: 6SJPtCfhKgtFJ7Hg5xca6jUeq13o6E2/V8dOo7zhAzs=
Subject key identifier: BB:3B:26:CF:20:44:DE:3A:DA:58:85:F0:2E:4A:0E:07:8E:E2:A1:13
Certificate issuer: /CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Certificate serial: 01893ED235B1D90F50CA8D441D7FE0B97162
Authority key identifier: 47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/uzsmzyBE3jraWIXwLkoOB47ioRM.roa
Signing time: Mon 10 Jul 2023 08:01:50 +0000
ROA not before: Mon 10 Jul 2023 08:01:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199532
IP address blocks: 91.217.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:d2:35:b1:d9:0f:50:ca:8d:44:1d:7f:e0:b9:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47684a7ebf9de294831a2c03e1b5a012420acd97
Validity
Not Before: Jul 10 08:01:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb3b26cf2044de3ada5885f02e4a0e078ee2a113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:6a:d4:7f:a3:d5:fe:0c:ed:b3:6c:dd:d1:
6d:70:04:7f:ab:82:8f:57:22:4b:19:bf:49:4b:ee:
bf:40:d6:48:30:db:82:03:30:c3:fe:66:f4:7f:ee:
85:93:57:76:82:eb:67:d2:91:40:7e:dc:02:ab:69:
62:39:12:37:ef:95:08:a5:e7:52:76:dd:42:d2:67:
2e:22:77:73:7b:cc:28:d5:a5:eb:a1:89:ce:a8:3c:
7c:16:c6:62:94:e5:01:9e:3e:92:98:f7:a2:8d:f8:
c9:ef:fb:70:79:48:90:12:40:4c:83:e1:6a:cf:c5:
3c:0f:f9:5d:ef:bf:24:c9:f2:d0:9e:50:b8:c5:f6:
e9:91:fc:5e:cf:44:70:31:6a:79:6b:b6:0c:57:11:
0e:17:78:7e:95:22:99:0e:3e:55:39:07:7b:f5:fb:
cb:34:eb:03:d3:a7:f4:ee:20:9d:74:5a:e8:b8:64:
79:4a:7e:25:d7:2e:79:b5:fb:19:3f:18:cd:d5:8a:
46:a6:b5:4d:1f:f4:ee:20:4a:86:b0:aa:d3:69:46:
e3:ec:e3:c7:bc:7a:d4:33:9b:2e:17:ad:7a:c1:e0:
f6:f2:99:b3:ef:7b:ee:31:56:e6:1a:e6:21:c1:ea:
40:e8:6d:5b:2c:59:76:c5:3d:bd:8f:8e:0f:a5:74:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:26:CF:20:44:DE:3A:DA:58:85:F0:2E:4A:0E:07:8E:E2:A1:13
X509v3 Authority Key Identifier:
keyid:47:68:4A:7E:BF:9D:E2:94:83:1A:2C:03:E1:B5:A0:12:42:0A:CD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2hKfr-d4pSDGiwD4bWgEkIKzZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/uzsmzyBE3jraWIXwLkoOB47ioRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/098772-dbb6-4dbb-b595-b26f70e03d76/1/R2hKfr-d4pSDGiwD4bWgEkIKzZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.195.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2c:f6:2b:0c:6f:d6:34:f2:70:36:68:d3:ed:38:ab:8f:98:
bc:6f:79:af:8d:0c:25:5b:74:88:1e:c1:05:88:41:1e:98:36:
06:78:36:39:c6:55:19:7f:dc:08:d3:3e:d3:a1:e5:2b:3e:58:
b0:0b:be:e1:5f:18:0b:cf:8d:86:30:67:05:9e:32:b8:92:af:
1a:e1:46:28:17:61:77:04:e6:db:62:e9:bd:b5:a1:03:4e:7f:
49:cf:8b:d6:c6:e4:d4:be:73:73:a1:0a:d7:c0:b6:5f:85:76:
8a:25:68:68:07:3a:ba:2b:ec:07:4e:a1:8a:3b:a5:aa:b0:fa:
f6:fd:59:b0:14:ce:8f:a2:9c:dc:e2:e2:b4:60:3a:39:66:94:
4f:ac:9c:89:1d:46:7c:82:a7:4c:dc:a0:9a:33:bd:a4:5d:29:
07:d4:57:40:b6:06:8b:d0:db:31:54:b1:7e:4f:20:02:dc:25:
2f:b0:71:1e:c5:63:86:ad:3e:9a:65:96:b6:4e:f1:48:3b:4e:
8d:4a:62:cb:95:29:07:a7:bd:a3:f4:02:2d:b1:0b:37:6f:3d:
32:cc:87:fe:eb:6a:37:24:80:af:fa:b5:a2:86:e9:78:e3:fe:
96:8f:5b:36:59:19:5f:2f:1d:4e:27:43:a3:88:25:d9:4b:34:
8c:fb:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:27 2024 by rpki-client on console-fra.rpki-client.org