Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/_ZFPSmlou1gmtnemKD08GDhGVyw.roa
File: _ZFPSmlou1gmtnemKD08GDhGVyw.roa (raw, json)
Hash identifier: uqoByDqpvzwWooXbl18IxLXEnF7iEhaHN8lM0P/gv1g=
Subject key identifier: FD:91:4F:4A:69:68:BB:58:26:B6:77:A6:28:3D:3C:18:38:46:57:2C
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 01894089ABDACDB70BCB6456CAEA6FE5FF9E
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/_ZFPSmlou1gmtnemKD08GDhGVyw.roa
Signing time: Mon 10 Jul 2023 16:01:51 +0000
ROA not before: Mon 10 Jul 2023 16:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200845
IP address blocks: 91.209.234.0/24 maxlen: 24
185.193.68.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:89:ab:da:cd:b7:0b:cb:64:56:ca:ea:6f:e5:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jul 10 16:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd914f4a6968bb5826b677a6283d3c183846572c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:3f:d1:de:ee:3b:c7:30:ad:0c:71:cc:b5:
a5:6e:ae:f6:3b:db:5b:0e:2a:7a:2c:cb:ef:fc:06:
a9:b5:c7:c4:83:99:6b:d1:3c:96:79:bb:ab:68:f6:
62:31:10:47:0d:0b:c4:da:17:e5:06:62:62:a5:1e:
df:1b:e1:45:2c:10:53:9f:82:72:99:3b:30:e0:0a:
ce:c5:62:f8:1a:02:bf:46:03:10:8d:eb:1b:44:87:
94:0d:d5:4c:65:9d:cf:41:0c:68:c5:9b:20:52:b4:
27:20:fb:d9:0f:3f:21:dc:e1:c8:f4:e4:d1:a6:dd:
bf:93:e2:19:64:05:47:64:b1:cc:8c:a4:23:46:e1:
0d:f6:74:1b:4b:49:c4:c8:05:ba:ec:e3:c1:64:03:
93:59:49:de:39:02:b5:73:99:45:76:30:0b:32:88:
4e:bb:94:ea:be:d8:7e:c1:0c:9f:06:32:2b:48:dc:
e4:89:e6:00:a6:f4:c2:87:9e:9b:8e:0b:89:ac:42:
46:c1:f4:ce:4a:29:79:5e:93:fc:d2:49:43:32:2d:
16:3f:c1:ea:70:0d:3d:4b:8b:88:0b:ef:22:77:51:
04:b6:3a:68:bd:15:3c:ec:6e:5e:04:69:8f:fb:f3:
26:1a:20:e2:b9:f9:20:62:5e:6e:f7:69:24:8b:1b:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:4F:4A:69:68:BB:58:26:B6:77:A6:28:3D:3C:18:38:46:57:2C
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/_ZFPSmlou1gmtnemKD08GDhGVyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.234.0/24
185.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
67:61:96:3e:da:17:df:67:2d:79:ab:f6:12:a2:ee:52:fe:a0:
3b:59:69:d4:69:6e:b1:07:76:6c:d7:83:88:c2:1a:c9:d9:60:
4f:ad:d1:6a:af:43:70:c7:02:0b:71:61:17:e1:42:00:23:b3:
e0:54:f5:52:ae:df:dd:a3:9b:0e:ea:da:6b:63:cf:05:e1:f7:
f7:0a:1b:95:5f:71:0d:b3:de:b6:b3:7e:cd:1a:13:11:ed:65:
e1:0b:43:cb:ce:1a:89:b6:ec:6f:b8:f7:69:e2:3d:e7:b2:cb:
f8:fe:47:35:28:a0:dd:2f:26:8a:21:95:19:f3:86:f9:90:bc:
8d:92:1f:d8:83:d5:7f:3f:46:ce:a2:8f:7c:ec:4a:6b:dc:ce:
8b:ef:a8:82:b0:14:60:27:bc:04:e5:13:d6:4e:57:82:04:30:
a7:ab:81:f4:9c:2f:a6:96:43:b3:5c:bf:e4:ef:53:0f:b7:b9:
00:c0:28:bd:b3:c1:43:57:fb:c1:08:ce:16:92:01:ff:01:27:
62:e8:8a:92:0d:84:c3:d6:aa:d6:f6:66:b9:78:7d:bc:a1:ba:
b0:59:93:09:a2:ad:79:c9:85:a0:45:e2:6e:8f:49:36:99:75:
80:71:66:ac:91:16:48:04:9e:13:e0:37:b6:50:a4:de:84:17:
a4:5a:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 09:06:47 2023 by rpki-client on console-fra.rpki-client.org