Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HHY5LyRDyRAY-A9ehLbxjMUoYvY.roa
File: HHY5LyRDyRAY-A9ehLbxjMUoYvY.roa (raw, json)
Hash identifier: PMxveN/hk1fzEpPw5PTWvV6dQJ8gnJQFjOvhQngunNs=
Subject key identifier: 1C:76:39:2F:24:43:C9:10:18:F8:0F:5E:84:B6:F1:8C:C5:28:62:F6
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01884DB235535607BB6A6E5BA90C41EB3171
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HHY5LyRDyRAY-A9ehLbxjMUoYvY.roa
Signing time: Wed 24 May 2023 12:18:24 +0000
ROA not before: Wed 24 May 2023 12:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 91.147.117.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:b2:35:53:56:07:bb:6a:6e:5b:a9:0c:41:eb:31:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: May 24 12:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c76392f2443c91018f80f5e84b6f18cc52862f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:d8:ec:8c:f0:51:b1:7a:be:09:82:a1:d5:
db:36:91:a4:d4:1a:19:24:a8:f6:02:79:4e:a9:8e:
2b:2a:eb:80:9a:f8:71:c5:a2:c7:22:0a:02:c8:7f:
2e:47:4c:33:5f:1e:67:e1:1a:e0:2b:ed:43:f9:02:
30:9c:5f:cf:89:28:11:01:2c:9d:04:e0:09:75:d0:
7d:54:cb:4f:5c:9e:a8:7b:88:ae:52:49:74:60:19:
91:d0:e9:2c:cb:2e:77:d0:c2:4f:17:a6:c9:07:3e:
63:13:9d:68:fb:6e:c1:b4:24:df:3b:4b:64:5c:4e:
92:94:24:bc:b7:3d:c5:14:f0:c5:4e:1a:e3:48:5a:
a1:46:15:b6:e2:4f:42:89:47:13:2c:43:dc:0e:cc:
b6:aa:b7:ce:42:04:6e:88:4f:61:ad:f2:f0:a4:39:
d2:97:b1:2e:dc:cf:4c:9b:e0:1d:ab:f1:21:42:50:
66:ba:82:5f:fa:48:6c:d3:33:4d:8c:db:68:99:ba:
91:73:85:a3:9a:06:5f:56:31:9a:a6:7d:27:ac:f9:
0f:b0:d9:e1:d2:50:4f:ac:e6:41:3d:bd:f1:21:92:
e7:f4:92:bf:5f:74:1c:b4:a3:be:89:98:74:1a:54:
ad:4f:d2:de:71:38:30:20:f4:86:bd:f1:fc:a8:57:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:76:39:2F:24:43:C9:10:18:F8:0F:5E:84:B6:F1:8C:C5:28:62:F6
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HHY5LyRDyRAY-A9ehLbxjMUoYvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.117.0-91.147.118.255
Signature Algorithm: sha256WithRSAEncryption
49:2b:cb:49:f4:1a:5d:03:32:35:2d:68:48:1e:fa:4e:1d:37:
4f:2e:cd:b5:d1:3e:5e:ac:13:87:6d:26:92:c1:6a:47:cc:fd:
28:7b:00:b5:5f:4b:2e:a3:33:f0:ba:67:2f:5b:96:9f:40:34:
53:60:94:a6:de:f7:51:75:21:49:70:87:28:e9:0a:34:1f:85:
15:8a:59:d6:93:b9:e6:f5:61:1e:5f:a5:87:41:c3:5d:b9:4a:
8c:82:94:b3:2b:52:6a:c8:03:a3:a1:a0:b4:42:1e:88:f1:1e:
dc:72:50:30:ad:9e:b3:29:b2:a9:72:dd:73:46:2f:4f:fe:c2:
62:bb:a2:7b:d6:48:88:6e:6f:56:04:e3:5e:15:a4:47:84:af:
e2:a4:97:1e:16:fa:04:fe:d8:b3:5e:ee:81:93:00:89:42:1f:
74:91:5b:a6:ce:5c:6f:19:5d:31:98:95:29:ad:ef:e0:dc:f5:
46:54:59:1b:e5:31:b8:5f:97:24:b0:47:72:c6:06:2e:21:98:
9b:9a:a6:20:58:ec:90:ba:5b:b1:5f:01:dc:42:65:51:eb:ec:
f6:90:27:7d:b7:dd:93:98:ba:5a:19:eb:da:8d:8b:a6:11:f8:
f9:d0:13:e8:a6:4a:e7:f1:f6:b3:89:bb:12:3f:93:c1:06:58:
d9:8c:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:09 2023 by rpki-client on console-fra.rpki-client.org