Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/tX6Sju9xp2rqi46fE0IIzeQMTFU.roa
File: tX6Sju9xp2rqi46fE0IIzeQMTFU.roa (raw, json)
Hash identifier: F39MxHpHCNxvaVV3jmRjjZPSHKB6aunKby8uOKnk4gM=
Subject key identifier: B5:7E:92:8E:EF:71:A7:6A:EA:8B:8E:9F:13:42:08:CD:E4:0C:4C:55
Certificate issuer: /CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Certificate serial: 01856F26BEF80294D366CB35C10EBE2CD0A6
Authority key identifier: 12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/tX6Sju9xp2rqi46fE0IIzeQMTFU.roa
Signing time: Sun 01 Jan 2023 21:04:48 +0000
ROA not before: Sun 01 Jan 2023 21:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 91.217.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:be:f8:02:94:d3:66:cb:35:c1:0e:be:2c:d0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1265c9165fd336df6dfe849aebdce4685fb1993c
Validity
Not Before: Jan 1 21:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b57e928eef71a76aea8b8e9f134208cde40c4c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:21:b6:e7:91:b6:c0:9a:e2:b8:73:b3:70:
dd:d7:95:cd:af:4e:61:8e:97:e0:fa:5c:c8:89:2d:
7f:57:a1:0a:d5:00:c7:58:d5:93:fd:b2:77:00:dd:
09:78:c8:3a:76:0a:a2:79:40:ac:76:d8:14:e5:07:
92:aa:b5:68:a2:89:58:3d:ca:69:80:ad:7e:65:b9:
5f:36:8b:1c:af:1a:0f:ce:18:0c:53:93:6e:d1:bd:
25:68:32:da:08:72:65:2b:ed:6b:e1:9b:12:c7:20:
7f:18:89:82:36:92:9a:28:bd:81:6a:aa:05:ba:31:
80:a9:9f:78:12:5d:1e:b8:a8:e1:21:58:c5:7d:78:
83:e4:a9:bc:2f:0c:8d:63:08:ca:f0:93:a0:31:82:
78:cb:b0:27:af:f6:9a:ba:c3:3b:ff:c4:19:76:85:
8b:6b:a6:ea:7b:37:5e:33:59:f9:03:fd:c6:7b:08:
ed:d1:db:32:6e:5a:58:30:37:08:bf:59:99:9e:80:
e7:d9:ca:a1:bd:1c:64:b3:b4:93:c5:b3:2e:7b:35:
33:44:f2:e1:51:11:77:f8:a7:ae:bb:f6:73:d0:18:
83:c8:cd:7b:e7:a6:10:56:ef:b9:81:e1:4b:6f:9c:
8b:ba:5e:6e:4d:00:97:e0:29:dd:48:6c:78:01:9f:
02:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:92:8E:EF:71:A7:6A:EA:8B:8E:9F:13:42:08:CD:E4:0C:4C:55
X509v3 Authority Key Identifier:
keyid:12:65:C9:16:5F:D3:36:DF:6D:FE:84:9A:EB:DC:E4:68:5F:B1:99:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmXJFl_TNt9t_oSa69zkaF-xmTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/tX6Sju9xp2rqi46fE0IIzeQMTFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/247116-9690-4b20-9b0f-68e986fd6419/1/EmXJFl_TNt9t_oSa69zkaF-xmTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.182.0/24
Signature Algorithm: sha256WithRSAEncryption
80:80:02:d6:9f:2e:ff:2b:ec:74:c6:c7:24:7e:a0:95:e9:8d:
a0:93:5a:a8:11:b6:c0:df:f7:48:b0:de:28:de:0d:23:11:1d:
72:af:ef:a1:b9:ec:cb:ba:8d:74:ad:8b:c3:92:2b:f5:a0:7b:
6b:e8:3c:f7:d6:d2:74:7d:fb:65:e2:54:f8:bc:d1:38:dd:d2:
b4:e2:16:50:3e:63:f3:6f:bf:bf:e5:bf:2b:27:c5:f1:dc:91:
d5:1f:5a:6d:ce:9f:18:47:b4:c8:93:07:a5:42:2e:4e:43:ac:
8a:40:b2:dc:7f:88:fb:a7:d5:be:fd:8c:14:27:22:77:8d:66:
ca:fe:c4:55:cf:ec:84:ca:43:80:d6:dc:4b:54:9e:bb:ad:13:
bf:38:de:06:48:6a:72:c5:37:6c:d3:df:4e:c8:d0:2a:49:c4:
df:04:f2:b8:78:ab:b8:90:91:e1:43:13:29:e5:83:d6:91:7e:
d9:76:82:7f:06:c2:0f:16:c7:c3:7d:aa:98:bc:0d:6b:c8:f5:
1c:d1:67:88:8f:a8:1a:f4:48:e4:e3:2d:13:d4:78:72:e7:3e:
ab:5f:1e:d9:0b:b6:0c:ce:73:47:a2:3a:ba:8d:d7:da:28:f5:
9b:f6:68:5d:91:88:d2:d7:32:d3:20:52:a2:8c:c3:c9:ad:ec:
76:ee:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:12 2024 by rpki-client on console-ams.rpki-client.org