Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/7y-X4WZ2KceVG4MR2YSO2nIA0J0.roa
File: 7y-X4WZ2KceVG4MR2YSO2nIA0J0.roa (raw, json)
Hash identifier: NtTEuq1z6ggvai1bMzvOIC1YisVihVqoxeyXn80DyHk=
Subject key identifier: EF:2F:97:E1:66:76:29:C7:95:1B:83:11:D9:84:8E:DA:72:00:D0:9D
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 0186C1D1BB5A76BA7DBB80908B6429AA18EF
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/7y-X4WZ2KceVG4MR2YSO2nIA0J0.roa
Signing time: Wed 08 Mar 2023 15:23:12 +0000
ROA not before: Wed 08 Mar 2023 15:23:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210610
IP address blocks: 91.219.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:d1:bb:5a:76:ba:7d:bb:80:90:8b:64:29:aa:18:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Mar 8 15:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2f97e1667629c7951b8311d9848eda7200d09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:ef:fd:1d:8e:c9:e7:8c:f1:94:d4:49:9f:
ea:c1:30:3b:5b:98:e8:29:10:52:93:c2:4c:d0:48:
c3:a4:69:27:fe:74:fd:2b:8c:a6:39:98:95:4f:c5:
d2:84:1d:e0:2e:de:02:df:5a:e0:af:ff:c1:2c:e6:
c2:6f:69:58:c9:17:44:5e:93:be:e9:b8:ab:75:f9:
18:19:0e:a6:06:8b:ab:c3:10:36:0d:fa:ad:a6:3a:
b5:be:63:9a:2b:71:d0:ae:41:60:f9:d5:c0:f7:dd:
fa:28:b4:aa:a1:8e:1f:d4:25:ad:f0:00:ab:d6:73:
c8:52:5f:7a:18:e9:a2:f3:02:7a:31:3a:14:4a:74:
7e:6f:4c:f2:2f:03:a6:47:4e:44:5c:36:c5:43:df:
02:5f:12:7d:94:e8:b7:17:94:80:be:7b:93:c9:46:
1b:35:11:d5:2a:3a:a8:92:89:90:1b:f5:61:61:d6:
57:51:48:09:d3:5e:c6:d5:5e:d9:ee:18:18:33:58:
67:67:13:6a:e9:7c:d5:a0:bf:06:eb:eb:36:56:91:
19:a6:f4:f4:29:50:32:bf:11:99:26:07:0a:eb:8d:
dd:19:a2:13:7e:26:54:14:86:7b:3f:dd:03:8f:78:
18:e1:5f:23:e8:3f:fb:a2:52:f2:80:89:2b:96:f5:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2F:97:E1:66:76:29:C7:95:1B:83:11:D9:84:8E:DA:72:00:D0:9D
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/7y-X4WZ2KceVG4MR2YSO2nIA0J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f4:df:07:59:2e:85:43:fa:95:e9:58:89:6b:d7:6c:d0:91:
78:58:db:a5:34:c6:d7:6a:58:d0:8c:30:bf:9d:55:6a:cc:77:
32:66:00:50:c7:04:c8:60:ea:95:29:3a:e2:e6:08:1c:58:c4:
36:4d:7c:d4:ea:36:5b:f7:c7:dd:37:1e:c4:16:23:2b:61:f9:
5c:60:ad:13:86:13:5f:e1:57:15:65:f5:2e:fc:4a:49:e6:96:
ed:2c:f8:6c:ad:d9:96:29:f3:75:33:c6:09:15:9d:72:dd:3c:
5c:69:ec:1a:44:9d:14:72:97:c3:48:8f:cd:04:0a:8a:70:18:
0a:09:aa:ed:2f:0f:ca:de:96:9b:50:d9:64:e4:d2:e7:07:c3:
bc:3f:37:21:6a:ed:b3:b1:3e:46:34:0d:c8:bc:a5:00:ac:6d:
6b:0b:af:63:02:7b:ea:84:39:e3:dd:86:36:26:bf:81:07:e0:
8a:13:f4:f9:af:24:75:a3:09:58:cc:b5:67:7b:b0:3a:38:71:
79:ce:94:e9:f5:7c:22:9e:c4:ae:22:7f:00:9c:ec:12:83:02:
c8:67:dd:52:8e:23:9c:51:ec:3a:fc:95:10:c3:fc:6f:0a:a7:
c6:eb:9f:ac:50:a9:0c:d2:f7:51:92:2a:56:fd:63:68:47:10:
c8:d2:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:02 2024 by rpki-client on console-ams.rpki-client.org