Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/sxuF-ArrNffEPdxY-bnSs0ONav4.roa
File: sxuF-ArrNffEPdxY-bnSs0ONav4.roa (raw, json)
Hash identifier: NnCnfbYIRiwHOvzHr0VVF5m0+5agKVJWX0pRV39F6KM=
Subject key identifier: B3:1B:85:F8:0A:EB:35:F7:C4:3D:DC:58:F9:B9:D2:B3:43:8D:6A:FE
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 018BB98EAD82BA4C83EDD8D98D0835498FBE
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/sxuF-ArrNffEPdxY-bnSs0ONav4.roa
Signing time: Fri 10 Nov 2023 14:06:57 +0000
ROA not before: Fri 10 Nov 2023 14:06:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52215
IP address blocks: 91.225.16.0/22 maxlen: 22
194.11.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:8e:ad:82:ba:4c:83:ed:d8:d9:8d:08:35:49:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Nov 10 14:06:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b31b85f80aeb35f7c43ddc58f9b9d2b3438d6afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:e3:69:30:66:26:a6:cb:e7:e7:6c:c2:a7:
20:78:8f:9f:4d:4f:81:9f:b0:0b:70:62:58:2f:78:
8e:96:10:30:2d:4b:f9:12:69:d6:5a:0e:5b:eb:db:
79:99:24:58:cc:07:37:cc:fd:63:b0:84:eb:06:0b:
23:15:56:7f:3d:9c:c8:38:c9:37:9e:1e:34:94:34:
c0:fb:0e:6f:ab:b8:70:1b:4e:80:54:33:b9:68:b1:
74:eb:9b:a0:ac:ad:2f:61:5c:89:76:12:2a:ec:8a:
0e:90:ea:55:77:9f:4a:30:04:94:76:7a:43:98:89:
86:f9:02:7f:0a:e6:22:52:6b:c1:2b:f3:6f:da:32:
29:8a:10:d7:2b:b8:44:f5:11:62:e1:96:4f:78:d7:
91:ac:4f:c9:22:f6:ae:38:31:82:9f:57:ea:34:c2:
e9:77:2d:91:9e:fe:61:dc:ce:a5:03:cf:bd:30:66:
01:e2:e4:25:ff:01:79:c5:ef:e4:59:1b:24:09:84:
1e:20:cd:b0:c9:f9:99:ce:ad:33:0d:6c:a7:76:89:
a8:db:97:ff:3d:96:95:4e:79:af:f5:7b:22:1b:dd:
e1:bb:96:de:d8:f5:14:60:75:bb:f5:06:6c:ef:46:
6f:bb:ad:20:24:fd:b2:11:40:ae:a9:25:2b:74:22:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1B:85:F8:0A:EB:35:F7:C4:3D:DC:58:F9:B9:D2:B3:43:8D:6A:FE
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/sxuF-ArrNffEPdxY-bnSs0ONav4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.16.0/22
194.11.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a6:ce:05:90:0c:9d:b3:56:70:37:bf:6a:52:4b:24:78:8b:
e1:0a:1f:73:64:75:10:a8:9f:0f:e1:52:50:08:1e:94:05:23:
07:f5:79:d2:c0:91:94:26:4b:b4:22:c1:a8:2a:7c:8f:fe:c4:
fc:a6:d2:d7:a6:4f:60:c4:3b:a1:27:e6:34:5b:0d:4b:b0:ae:
a0:99:10:19:5a:6a:fd:b9:1d:28:a5:0c:53:b6:77:24:ee:69:
8f:ff:d1:0c:ad:66:ea:4c:d7:46:23:4e:d0:de:26:b2:40:9c:
4a:a6:de:41:df:6a:a6:67:93:5f:0d:91:6d:fa:af:6c:02:e8:
e2:97:3a:5b:35:71:ff:26:bf:42:4c:1a:85:67:1a:a2:b3:ab:
de:38:34:b8:51:c2:fd:23:4b:94:2e:2c:17:07:73:fd:cd:93:
9d:be:09:1e:94:bf:e7:15:78:76:cc:93:3b:48:8f:1e:3c:8b:
47:46:e1:ac:91:30:a1:f1:d8:c2:10:7f:02:19:d3:7c:1f:dd:
8b:83:75:a6:48:96:8d:65:cb:6a:c1:27:51:0d:e6:d2:d0:52:
ba:84:49:1e:82:e7:45:43:b2:b1:68:4d:b6:05:36:00:b8:27:
75:69:7e:5c:db:cf:c3:28:16:c7:5c:4f:64:31:fc:e0:2d:9c:
cd:88:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:05 2024 by rpki-client on console-fra.rpki-client.org