Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Jqv9byLOwsn1sqo-wLflaSl5z_k.roa
File: Jqv9byLOwsn1sqo-wLflaSl5z_k.roa (raw, json)
Hash identifier: vZg/EhuuPPd1i1u5tiy2zmYR2YtiK5hUND9qtwrldX4=
Subject key identifier: 26:AB:FD:6F:22:CE:C2:C9:F5:B2:AA:3E:C0:B7:E5:69:29:79:CF:F9
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01882E9EBA955B1229864FBDC6F860C582D5
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Jqv9byLOwsn1sqo-wLflaSl5z_k.roa
Signing time: Thu 18 May 2023 11:28:54 +0000
ROA not before: Thu 18 May 2023 11:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.177.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:9e:ba:95:5b:12:29:86:4f:bd:c6:f8:60:c5:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: May 18 11:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26abfd6f22cec2c9f5b2aa3ec0b7e5692979cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:19:ef:dc:97:0a:12:4c:3e:e1:21:45:b4:
45:c5:70:65:50:ac:7e:4a:29:57:54:6c:e3:ee:f3:
77:50:25:49:dd:0d:b5:9e:48:3f:e3:73:e1:33:7b:
ee:89:24:8d:6a:36:42:66:c3:e8:4c:da:e3:fe:1f:
d5:f1:ea:9d:8c:74:61:e1:39:ba:02:62:0e:12:b4:
29:ce:c6:f0:1c:bb:2a:39:a9:73:e1:4b:da:b5:57:
4c:1b:35:08:51:51:36:bc:7d:a8:5d:ca:0a:64:df:
3d:a2:f9:44:2a:2b:76:e9:91:b9:c4:44:68:05:15:
a2:10:52:a0:90:05:bd:a2:94:b0:cf:c3:2b:c2:a6:
52:50:a3:cf:a0:bb:e3:54:dd:e2:67:41:43:a2:8a:
8a:73:e9:96:a8:8a:be:27:28:ef:9e:37:1b:65:f9:
d1:ee:1c:01:36:93:c0:79:d3:43:91:6f:93:2f:c0:
3b:15:e7:da:54:d0:fa:35:a7:c5:0e:dc:e3:58:92:
cb:2e:5a:10:f3:a4:2d:ad:5e:7d:c8:3f:46:23:55:
ee:02:10:02:7e:92:11:55:ff:6b:48:ac:de:74:ba:
e0:03:0a:97:9e:ee:c5:b2:ab:c4:cf:f3:1b:bb:53:
cd:be:e9:e4:ba:ca:e8:74:6f:98:38:50:d8:7f:c5:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:FD:6F:22:CE:C2:C9:F5:B2:AA:3E:C0:B7:E5:69:29:79:CF:F9
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/Jqv9byLOwsn1sqo-wLflaSl5z_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/23
93.114.60.0/23
Signature Algorithm: sha256WithRSAEncryption
75:b0:f6:99:5c:36:db:67:9a:23:13:9b:b8:fc:ba:8d:51:13:
ee:96:44:d2:7d:6f:1f:c3:8a:fa:eb:0b:55:87:ad:d4:d7:9e:
86:05:23:e9:1a:87:73:cd:36:eb:25:ba:00:d5:c7:e5:6e:bb:
85:ca:ad:fd:eb:c9:a3:e2:e2:b5:97:d2:85:af:3c:14:cc:db:
f4:12:7b:c2:68:5e:49:d6:68:a5:3b:ed:40:e6:30:ec:82:25:
ff:41:ba:3b:ea:17:39:7b:92:9b:3c:02:ac:06:1d:75:ea:b6:
d6:82:ef:6e:45:a2:8d:ed:04:f4:e1:21:59:10:14:6a:b6:b4:
74:72:56:bd:7e:2d:ff:81:7c:aa:17:a5:f0:e9:3b:10:08:70:
ab:f2:a8:36:fd:4e:95:ac:da:38:df:94:cc:49:d6:ea:4a:3e:
a6:18:2c:2f:07:02:eb:31:3d:f7:d4:69:4c:5b:e0:93:bc:e1:
b9:ea:c3:cf:62:95:69:d5:83:a6:18:89:83:58:0c:4a:6a:a6:
53:6e:54:a0:06:94:76:93:7e:0c:6f:1c:74:6b:48:ca:16:28:
ca:7a:83:4a:f3:d6:81:10:da:97:2b:cf:ec:b1:88:49:e9:fe:
2b:7d:ac:64:cc:ab:24:e0:70:08:1e:f7:49:fe:9c:b0:49:1e:
1a:00:a5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org