Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/xR8JdQ_lTuQLBIPHsTj5ZVT9hLw.roa
File: xR8JdQ_lTuQLBIPHsTj5ZVT9hLw.roa (raw, json)
Hash identifier: 2+BNlM0sFd2rX++SxAIK1TFcSbSgnvWyq5nH9NseIi8=
Subject key identifier: C5:1F:09:75:0F:E5:4E:E4:0B:04:83:C7:B1:38:F9:65:54:FD:84:BC
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0187741DF6CEBA4B14E0F8E30BD9D535451B
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/xR8JdQ_lTuQLBIPHsTj5ZVT9hLw.roa
Signing time: Wed 12 Apr 2023 06:18:53 +0000
ROA not before: Wed 12 Apr 2023 06:18:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 212.116.226.0/23 maxlen: 23
91.147.124.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:1d:f6:ce:ba:4b:14:e0:f8:e3:0b:d9:d5:35:45:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Apr 12 06:18:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c51f09750fe54ee40b0483c7b138f96554fd84bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:46:31:4f:ed:e4:b7:24:fb:c6:36:0f:4c:
d8:76:56:e2:e0:d6:23:03:55:1c:85:70:44:80:48:
b1:80:05:91:a3:f9:72:98:e1:ec:8e:ef:bf:cd:45:
68:0a:96:58:80:3c:07:87:ab:61:e4:fc:b3:d6:ea:
57:3c:ff:22:fe:75:45:03:12:8d:4c:c8:c6:94:d1:
0c:61:40:68:87:a0:8c:dc:b2:41:27:88:26:32:a4:
28:94:ab:2b:1f:a6:04:40:b7:31:6c:a1:ce:73:7c:
ba:a0:d6:20:72:ce:d3:77:0d:f2:46:0f:ec:ff:4d:
73:ba:ee:ad:d4:ac:fd:8e:7d:a8:ba:32:fc:1b:b4:
f9:f2:5c:8a:ef:c2:80:f4:09:d0:dd:03:2a:8e:51:
7b:e2:e8:53:05:41:64:f0:f1:85:f1:e6:69:1d:51:
55:50:55:8f:d2:56:e0:42:6b:1a:f7:44:98:f1:7f:
3a:80:c7:65:b6:76:8c:7b:4e:5a:b6:ac:03:1b:5d:
0d:e1:36:1a:eb:a9:65:34:3e:a2:07:d5:d8:41:d9:
63:f9:4d:aa:77:d2:d0:33:61:79:47:5b:98:90:8e:
2a:95:a0:66:4a:e4:4b:b4:3f:47:04:bb:32:e5:84:
58:f1:fd:c7:3b:fd:82:c1:76:7a:25:7e:95:63:78:
a4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:09:75:0F:E5:4E:E4:0B:04:83:C7:B1:38:F9:65:54:FD:84:BC
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/xR8JdQ_lTuQLBIPHsTj5ZVT9hLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:be:2f:fb:0a:39:b3:88:93:85:af:70:e8:2e:e4:93:bb:e0:
01:e6:b1:8f:cb:47:85:da:3a:ea:3e:f7:2e:26:a4:0b:b8:06:
89:3a:32:1c:88:5e:02:4b:02:61:9d:e3:56:ec:cf:60:3f:14:
c9:dd:94:41:7f:23:6a:bf:7b:c7:e5:63:98:8f:61:c6:94:86:
43:54:fc:a6:c0:15:eb:4e:d9:5c:66:ab:2c:cf:34:e8:cc:d1:
d3:84:56:0b:84:4f:d1:37:b1:33:7a:da:0a:a6:29:a3:47:30:
c0:3b:41:70:47:51:43:4f:9e:13:e0:f1:ec:ef:70:c2:75:2b:
f2:22:40:60:de:98:bb:20:9d:0e:4b:6f:62:3b:da:b7:06:41:
8c:96:5c:cb:3d:01:70:a4:7b:0d:79:3e:6e:f3:1c:76:bb:b1:
a1:80:d1:07:b9:2e:cb:53:bf:04:37:43:37:d7:d9:b1:5b:74:
03:3d:28:6e:ea:fc:25:13:a3:1b:9c:1e:61:93:7e:29:68:c5:
46:24:63:70:ff:1d:72:58:39:e8:ad:bd:b6:eb:b0:0e:6a:be:
6d:f2:f6:54:1b:73:8d:ff:8e:c3:54:38:bc:4d:f6:98:e9:7c:
fc:3c:82:47:ea:15:9e:a7:98:89:8b:aa:e9:1c:55:bb:09:2c:
5c:c4:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org