Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/inoffpOgUrFZPzykQGgBhGLLOCQ.roa
File: inoffpOgUrFZPzykQGgBhGLLOCQ.roa (raw, json)
Hash identifier: tKso7xPXMZmRdGDJiksxJ/UCz4/h2s2Gm09Z6HhkZTo=
Subject key identifier: 8A:7A:1F:7E:93:A0:52:B1:59:3F:3C:A4:40:68:01:84:62:CB:38:24
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0187B8A7380B12E49A26D73FAA5BDD320F6A
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/inoffpOgUrFZPzykQGgBhGLLOCQ.roa
Signing time: Tue 25 Apr 2023 13:42:59 +0000
ROA not before: Tue 25 Apr 2023 13:42:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199239
IP address blocks: 91.92.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:a7:38:0b:12:e4:9a:26:d7:3f:aa:5b:dd:32:0f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Apr 25 13:42:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a7a1f7e93a052b1593f3ca44068018462cb3824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d8:ac:7d:54:e3:b0:22:1e:08:4a:39:c8:74:
a3:5f:4a:77:69:58:04:b0:b7:07:69:c7:98:7b:c5:
66:15:ce:94:60:ef:3a:4c:0b:9e:f4:70:92:b1:67:
f0:87:66:10:d2:ca:40:a8:f2:89:4f:35:6e:1a:28:
ae:79:2a:b3:4f:26:2e:fc:78:8f:b2:c6:7f:83:5b:
d5:29:69:02:29:45:de:bb:c6:9d:a6:71:68:43:d6:
38:ec:ec:78:69:80:25:9d:4c:87:ea:e2:9f:e3:aa:
82:f6:fd:36:2c:4e:00:fb:c1:26:64:64:36:3c:ba:
68:d9:3b:4c:0c:94:02:29:fe:d1:57:aa:3c:ec:da:
c4:1f:b0:d3:6f:72:4c:ab:0c:e4:15:fb:13:e7:e3:
6b:88:74:0a:4d:12:ab:88:b6:ec:f2:b5:b7:27:ee:
c5:05:fc:3a:6d:5b:0b:4d:33:65:31:a1:7e:2c:7d:
64:59:a3:d9:df:55:50:7e:3a:a8:ce:b4:c3:6f:4e:
5b:7e:06:dc:d3:76:dc:5c:7b:94:02:8c:97:88:0c:
40:57:d0:cb:45:21:24:d9:20:bc:19:09:fa:c5:5f:
c3:a5:25:b9:c5:8d:e5:88:89:50:39:ef:9f:28:b9:
36:f6:d4:05:9f:d4:d5:0c:6a:fa:3f:7d:43:9b:cf:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7A:1F:7E:93:A0:52:B1:59:3F:3C:A4:40:68:01:84:62:CB:38:24
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/inoffpOgUrFZPzykQGgBhGLLOCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:49:02:2b:17:5d:77:f9:66:a1:3d:c2:e2:cf:62:4d:29:78:
28:7f:ba:45:32:0c:f1:84:b0:2f:a4:f6:aa:b4:25:46:da:2f:
eb:49:35:2c:5a:f2:15:35:13:3a:53:69:7f:27:8a:ee:63:ca:
2b:2b:f7:81:d3:90:ac:a1:95:99:44:68:a6:ea:ae:2b:f4:d3:
e3:30:f0:30:2f:1c:fe:02:14:6d:32:94:18:88:3a:65:30:b2:
14:f6:b3:9f:3c:d2:a5:b9:e1:bf:4f:ff:b9:36:c6:eb:84:dd:
fd:91:1a:73:85:7e:a4:74:0b:d3:67:0e:41:f7:5f:7a:b8:92:
a7:a2:37:0b:5b:22:be:5e:14:33:9f:70:df:e8:21:85:be:77:
f6:c5:57:23:38:6f:8f:2b:3f:58:ba:56:f4:a6:73:cb:50:d2:
a4:2d:df:9a:e1:a2:5b:72:8b:9f:67:c6:92:80:6f:28:c1:8d:
cc:41:5d:5b:a2:3d:a2:9a:64:5c:4b:14:67:0f:24:cd:d7:3b:
78:18:6b:6c:92:9b:7e:7a:53:50:b8:a8:cf:41:67:d2:a0:cb:
ab:b2:bd:fc:c3:39:96:f7:5b:b3:ea:1b:ba:aa:c8:a8:c5:89:
c2:70:72:c7:6c:27:1c:39:20:b6:4a:2e:b2:4e:8f:b6:a7:c3:
83:51:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 13 17:46:30 2023 by rpki-client on console-fra.rpki-client.org