Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/iI8fT2kxNJfPc_dk7cC1OBRNzoA.roa
File: iI8fT2kxNJfPc_dk7cC1OBRNzoA.roa (raw, json)
Hash identifier: dgNTdfbdTjEJZh8OQyKXEVJ7eByPyWhYwjK4cnGGGCU=
Subject key identifier: 88:8F:1F:4F:69:31:34:97:CF:73:F7:64:ED:C0:B5:38:14:4D:CE:80
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0185C94F7396C2EF7830377BA3BB9BE94F84
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/iI8fT2kxNJfPc_dk7cC1OBRNzoA.roa
Signing time: Thu 19 Jan 2023 09:15:05 +0000
ROA not before: Thu 19 Jan 2023 09:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.243.179.0/24 maxlen: 24
91.243.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:4f:73:96:c2:ef:78:30:37:7b:a3:bb:9b:e9:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 19 09:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=888f1f4f69313497cf73f764edc0b538144dce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:80:73:7f:c4:c5:22:b4:38:2f:89:b4:13:
9a:7c:2c:ef:27:0e:72:b0:1c:a9:35:05:8d:19:1d:
27:2e:91:81:55:05:8b:b1:52:df:31:dd:85:74:7c:
09:83:fa:40:43:1c:a8:02:ed:dd:f8:8f:ac:03:f7:
4d:39:0d:31:3c:d8:8f:58:2e:3a:25:5f:87:2a:aa:
5e:8d:ff:36:9c:9a:3e:96:cb:54:be:30:c9:7c:f3:
d2:90:5d:3f:7a:d7:90:96:e3:96:ee:53:97:c3:bd:
7e:60:75:b3:90:2d:8a:bb:e4:a5:61:e3:8e:2b:24:
e0:23:8a:24:58:2c:7f:ab:3d:b5:27:8f:87:f9:7c:
02:c9:06:9c:8c:1d:78:f6:27:47:a2:9b:11:f5:9f:
ea:8b:9a:4d:a3:69:32:86:ef:16:d8:d9:5d:50:64:
d0:83:82:bd:86:4b:cf:96:7b:ea:9f:d6:6f:14:95:
81:55:05:c5:40:8e:e3:17:48:1b:1c:61:6e:fd:9f:
d7:9d:2a:23:6a:80:05:93:bb:d9:bb:32:6a:b1:7c:
68:1c:92:d9:47:18:d8:98:89:74:e1:c8:ea:c0:96:
13:27:4b:07:e4:d1:2b:74:b8:71:de:7b:6b:08:8c:
fd:20:14:bb:8a:28:72:75:78:ff:e7:df:6d:4f:a6:
34:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8F:1F:4F:69:31:34:97:CF:73:F7:64:ED:C0:B5:38:14:4D:CE:80
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/iI8fT2kxNJfPc_dk7cC1OBRNzoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
91.243.179.0/24
Signature Algorithm: sha256WithRSAEncryption
05:38:97:18:72:a4:0a:f4:8c:e9:b2:31:46:df:f3:74:6e:7a:
c8:9c:60:14:73:42:ea:ac:ad:82:f5:52:be:19:23:d3:d5:d5:
cf:4f:91:fa:3e:00:2e:52:de:a8:2e:22:48:f1:80:3d:6c:d0:
b7:ba:0f:8d:be:f0:f6:29:48:10:59:28:54:7d:72:9e:6e:f9:
0e:b7:bf:83:0f:47:6b:60:7d:9b:95:6c:a1:45:cb:b8:30:7e:
ae:e7:a0:bb:5e:ae:62:7b:e5:ce:9d:d2:58:f3:27:44:1f:68:
1b:8f:54:92:9d:80:a3:f7:35:da:6f:f0:3b:eb:70:ce:96:41:
f0:9e:ee:34:46:b4:2d:7d:f8:2e:c5:85:27:cd:2d:c0:47:34:
0f:cf:59:f2:25:ff:d5:f0:cf:4c:e0:b0:95:02:9c:90:1f:cf:
7a:b6:87:a1:81:c2:1e:93:b2:74:49:a5:06:de:ef:9c:aa:0f:
ca:fa:e0:81:f0:47:dd:dd:c5:a1:ea:66:8f:77:dd:60:d0:61:
63:b9:1b:4d:e2:05:c2:c9:f9:2a:40:59:b5:c1:42:2b:cf:4c:
a9:5e:83:b7:72:e7:53:e8:71:ad:fb:6e:32:c9:29:fc:e7:66:
e6:8d:57:f8:16:1f:be:ca:d1:46:a2:a2:ec:01:cf:02:e5:b8:
4a:e4:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org