Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/on1moSgXs6RcTISGN2V-lb1Wflw.roa
File: on1moSgXs6RcTISGN2V-lb1Wflw.roa (raw, json)
Hash identifier: DxCn8KS5FFDTohavSelZEjCup6+ZsjxsItbWdsMXAIA=
Subject key identifier: A2:7D:66:A1:28:17:B3:A4:5C:4C:84:86:37:65:7E:95:BD:56:7E:5C
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0187B259CC33FE87B1221A9185A567EF42BC
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/on1moSgXs6RcTISGN2V-lb1Wflw.roa
Signing time: Mon 24 Apr 2023 08:20:41 +0000
ROA not before: Mon 24 Apr 2023 08:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.243.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:59:cc:33:fe:87:b1:22:1a:91:85:a5:67:ef:42:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Apr 24 08:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a27d66a12817b3a45c4c848637657e95bd567e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:46:58:f3:26:db:b8:4d:9f:2a:9c:c6:87:
1d:71:c6:af:ce:dc:c3:98:51:e7:72:71:64:8f:f0:
52:6e:5f:6f:36:84:15:3c:26:54:81:e7:09:48:c9:
1a:e2:86:0c:28:db:92:65:fe:5a:aa:36:2b:16:f8:
45:12:3f:e7:92:a2:0c:06:ae:88:bb:e2:4d:d2:79:
dc:49:f7:f0:ad:fb:7a:9e:fd:7d:e3:4c:26:95:bc:
85:f1:9c:5c:77:20:9a:4c:f8:71:4a:32:ab:c7:82:
a3:44:4e:e7:b5:6b:8c:34:3c:d0:46:3c:3d:10:e0:
c1:23:97:5e:98:71:83:cb:c8:0b:e2:12:50:4f:0d:
6d:d9:ee:d9:46:e1:3e:cc:e1:f4:b9:93:db:46:07:
00:9a:7b:fd:4d:e6:32:77:b8:7b:ec:52:08:a6:c4:
45:f2:bc:6c:d0:e9:69:81:86:ac:76:d3:f7:e9:e3:
f1:46:03:69:a4:cc:f9:7e:d2:59:e0:96:50:df:05:
b2:78:b9:df:8d:df:88:16:7c:17:99:09:a5:91:19:
9e:a5:8d:40:e8:ad:3e:7b:13:23:4b:83:c1:0a:a3:
bf:be:30:61:f6:54:a3:b1:92:76:28:76:62:b5:a8:
db:e4:ee:cc:b0:5e:9e:ea:19:70:0b:6d:c3:1b:56:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7D:66:A1:28:17:B3:A4:5C:4C:84:86:37:65:7E:95:BD:56:7E:5C
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/on1moSgXs6RcTISGN2V-lb1Wflw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.179.0/24
Signature Algorithm: sha256WithRSAEncryption
24:65:46:68:71:5e:b6:62:de:16:92:e6:a5:2a:39:b4:20:af:
c9:6c:f9:05:3e:bd:e8:6b:16:61:3b:e5:ad:f6:23:8b:b3:90:
13:65:50:97:03:d0:95:92:59:3d:05:69:b8:1b:92:9e:5e:ef:
9c:c8:9c:3a:a6:7f:bd:f6:e0:c0:89:45:db:36:65:69:c7:b6:
bc:fa:43:45:59:74:c7:e9:19:3e:98:a9:32:51:12:ca:6d:b4:
0b:d1:5d:fc:57:a4:de:d3:57:73:1f:3b:0d:1d:6c:b6:c0:21:
21:d1:5e:f4:72:17:15:19:64:51:5f:b1:df:6b:5f:85:5f:af:
fd:ad:03:b9:31:88:f9:43:15:f0:b0:07:8d:87:57:a1:51:7b:
88:27:8b:a9:d2:d0:a3:cd:4a:ad:2b:52:3b:2e:1c:5c:f1:f9:
94:98:f8:36:38:58:04:2e:77:d3:cb:b6:56:37:0d:d0:f7:5c:
16:71:93:9c:fd:c6:bf:6d:29:d5:e1:06:92:1e:03:35:b3:e2:
29:43:08:52:58:16:60:65:c2:81:ec:16:6b:22:72:7d:f4:75:
bc:1a:93:70:2f:23:26:85:36:39:d3:38:48:92:2d:8e:8f:e6:
8e:88:ae:e4:95:29:47:b7:38:ee:26:3d:01:a8:06:5a:7a:75:
a8:8f:47:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org