Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/Z6P93FtFJ8mnEQS3Vhr_Qc5nuog.roa
File: Z6P93FtFJ8mnEQS3Vhr_Qc5nuog.roa (raw, json)
Hash identifier: /IqAWYsilQb5w/pYBoIcK70bZRbHYxGjsMP5EboW+hE=
Subject key identifier: 67:A3:FD:DC:5B:45:27:C9:A7:11:04:B7:56:1A:FF:41:CE:67:BA:88
Certificate issuer: /CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Certificate serial: 0186D8229F488BC1D8164EA238AE1879281C
Authority key identifier: 9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/Z6P93FtFJ8mnEQS3Vhr_Qc5nuog.roa
Signing time: Sun 12 Mar 2023 23:23:13 +0000
ROA not before: Sun 12 Mar 2023 23:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41820
IP address blocks: 91.220.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d8:22:9f:48:8b:c1:d8:16:4e:a2:38:ae:18:79:28:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0ea1d1dd5b6064851d849c70f1cb14fcb2a383
Validity
Not Before: Mar 12 23:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67a3fddc5b4527c9a71104b7561aff41ce67ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:a6:c2:91:b0:17:fa:ac:47:f4:42:ff:5f:
e1:13:c2:d1:33:a1:bd:52:86:f5:7b:77:51:a1:d1:
df:65:93:ed:a9:59:d3:f7:3d:75:ea:19:62:94:ad:
e9:a3:db:0f:36:a2:51:ea:b3:41:7b:b0:0e:0b:9c:
6e:cc:36:ac:f4:b4:f1:ed:a2:15:db:d0:8b:19:9c:
3a:36:c8:6d:1d:7f:d7:37:0b:20:b9:27:8a:b5:5f:
bb:60:76:20:d6:79:c7:6d:9b:d3:56:dd:cf:72:62:
75:f9:4f:a8:39:79:61:ab:7b:c9:fa:70:54:e0:54:
68:35:fa:0f:dd:a6:28:97:7c:2e:e0:79:65:c1:ee:
e3:fe:eb:d1:79:df:fb:28:27:96:6c:61:af:43:5c:
6f:d9:93:92:f2:e7:05:10:25:aa:e7:e5:30:60:c6:
05:6f:0a:30:dc:52:6e:88:3c:56:22:00:af:19:92:
b2:25:cb:53:fe:ec:26:ae:3f:7d:38:fe:a7:9d:45:
cf:04:2c:d1:86:fa:50:09:84:ee:f6:b6:12:c3:23:
5a:6a:17:10:42:ef:a5:77:ad:1d:85:54:72:15:24:
63:9a:e0:45:8a:6c:ad:73:67:85:79:96:a8:62:88:
c2:1d:96:ed:a4:a3:44:c4:a3:d9:e9:48:2c:cc:95:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A3:FD:DC:5B:45:27:C9:A7:11:04:B7:56:1A:FF:41:CE:67:BA:88
X509v3 Authority Key Identifier:
keyid:9C:0E:A1:D1:DD:5B:60:64:85:1D:84:9C:70:F1:CB:14:FC:B2:A3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA6h0d1bYGSFHYSccPHLFPyyo4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/Z6P93FtFJ8mnEQS3Vhr_Qc5nuog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/112fdc-8374-47e6-8c50-996344f31145/1/nA6h0d1bYGSFHYSccPHLFPyyo4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d9:47:b7:24:13:09:8b:0d:60:6a:49:9f:43:49:90:f4:7a:
d8:50:96:f7:e1:78:b8:1f:89:c7:70:ab:2b:a7:62:7c:3a:5a:
d9:92:9c:e1:99:b3:ac:6a:90:07:dc:ce:80:3a:49:db:c4:3d:
65:0e:1f:8a:c3:7b:ab:b4:c1:e9:8c:a4:63:6f:bd:6d:c5:51:
2f:d7:ea:09:1e:14:99:2c:46:f5:86:37:bf:80:21:e1:2d:2d:
71:51:90:43:e1:0a:67:c0:4f:78:6b:c5:c7:27:d0:02:06:33:
71:89:ea:75:72:45:01:ba:46:70:e1:ae:38:44:46:1b:c8:b2:
69:b8:8e:b3:84:cc:dd:26:30:0b:c7:98:43:21:21:41:81:84:
c2:00:33:16:e0:87:6d:a4:d0:78:28:04:b8:56:c4:1f:32:a6:
dd:78:32:19:97:23:97:d0:45:b7:b6:e1:85:bb:5e:30:23:ea:
21:21:e8:31:2a:4d:6e:4b:0b:3e:89:86:5d:6b:de:da:c9:6a:
96:88:a2:77:78:48:f9:cb:d5:67:b2:ab:84:f0:73:54:02:db:
fb:e5:ee:94:68:3a:a7:b3:1d:6d:ab:d9:fd:70:a2:01:21:7e:
5c:d5:63:71:26:dc:d5:07:0c:17:5c:fc:86:50:6b:87:15:d8:
74:dd:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:52 2024 by rpki-client on console-fra.rpki-client.org