Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3JYawAn3pNfLVX_FO7HlVDe4Cxs.roa
File: 3JYawAn3pNfLVX_FO7HlVDe4Cxs.roa (raw, json)
Hash identifier: icum3GD8m7l1fHvxYdEazhCKFlR4a7zumoVjNxte8y8=
Subject key identifier: DC:96:1A:C0:09:F7:A4:D7:CB:55:7F:C5:3B:B1:E5:54:37:B8:0B:1B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018576692AC33726570891BA30B99F6EAD85
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3JYawAn3pNfLVX_FO7HlVDe4Cxs.roa
Signing time: Tue 03 Jan 2023 06:54:41 +0000
ROA not before: Tue 03 Jan 2023 06:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 91.147.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:69:2a:c3:37:26:57:08:91:ba:30:b9:9f:6e:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 3 06:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc961ac009f7a4d7cb557fc53bb1e55437b80b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:62:d1:e7:24:18:e6:87:b2:f1:5a:0a:c8:
30:76:19:1a:09:7f:bc:2b:c1:26:4f:89:f8:fb:c2:
6b:30:f7:fc:48:8b:fb:80:c1:7b:26:0d:88:60:33:
65:48:e8:f2:c2:72:5b:31:92:54:03:37:f5:38:cd:
a5:4b:07:67:ac:3f:2a:97:ac:01:9f:92:44:95:23:
ca:33:7c:b9:d6:ec:e5:82:82:a7:3d:68:b4:7a:47:
4d:bd:8d:f5:c1:e5:18:02:f9:32:16:7f:74:f8:3f:
44:d6:0a:d3:a4:cc:16:f3:cf:0d:9f:44:80:65:7e:
75:c6:0e:2f:ae:14:f8:ef:8a:f2:f5:3c:8c:b3:c1:
bc:17:65:b7:08:b0:4b:87:98:0b:b2:9c:37:b5:18:
b1:67:ce:bc:14:8e:62:3f:a5:ec:58:9d:3c:a5:f9:
14:fd:04:d3:ec:5c:39:34:32:cf:18:f1:83:0f:5f:
54:0c:f4:81:6b:57:ad:89:27:5e:1b:72:fa:b8:77:
cb:40:dd:c5:66:79:2c:05:a5:a1:03:db:01:28:ab:
48:a1:3f:37:17:70:e3:23:62:7c:c2:a5:dc:4f:51:
3f:53:4e:d5:4d:3a:fb:f2:cf:89:d2:7b:ad:07:53:
8a:5f:a8:81:90:03:88:ee:32:fb:5c:0c:ce:1b:65:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:1A:C0:09:F7:A4:D7:CB:55:7F:C5:3B:B1:E5:54:37:B8:0B:1B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3JYawAn3pNfLVX_FO7HlVDe4Cxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:35:b5:78:d7:41:aa:cc:25:06:50:00:bc:31:0d:43:f6:01:
de:60:65:f0:78:89:f9:12:ad:b8:65:1f:1f:ff:5f:f3:d8:9b:
aa:b0:14:db:44:2a:51:cc:8c:6b:14:cb:be:8b:78:51:48:c7:
9a:78:8d:68:dd:ca:b3:01:32:9a:c2:a5:7e:b7:03:02:67:83:
fd:e4:da:a7:36:50:58:39:22:3f:9c:94:f9:75:65:d7:69:3f:
a0:8e:10:14:d2:2e:9f:a1:a6:12:56:e9:39:d6:84:91:6f:16:
a2:e0:59:10:2e:6c:26:d4:bb:11:79:b1:dd:9a:9d:77:1c:d5:
a9:93:b9:a3:d6:35:55:36:27:b9:e2:a8:f2:9e:e8:27:c5:ec:
af:08:85:e3:79:f9:6e:2c:eb:2d:f5:52:ce:67:28:df:09:b7:
48:a8:b0:6c:ec:e1:74:d5:c9:d9:da:b8:9c:8f:93:52:ae:34:
e9:0f:19:3c:f9:b4:35:f1:68:ea:55:44:44:10:4c:bc:a3:0e:
cf:70:c4:6b:fd:09:c0:a5:1c:ae:60:f8:97:6f:f5:a0:0a:1f:
71:4b:d9:ea:07:6f:b3:a9:98:04:5b:ad:ac:4e:c5:1f:77:3b:
1d:d3:0a:21:57:9b:f4:46:b4:31:ef:26:fa:c0:5b:38:d8:72:
87:25:99:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-fra.rpki-client.org