Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/FphVNBo3Zbylvet0mxzI-AlTIk0.roa
File: FphVNBo3Zbylvet0mxzI-AlTIk0.roa (raw, json)
Hash identifier: XvyJETpdbdLFMrhQMeBAyGYhNaM/0DHVsRP8J7ODMBs=
Subject key identifier: 16:98:55:34:1A:37:65:BC:A5:BD:EB:74:9B:1C:C8:F8:09:53:22:4D
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 01856D4AA9464F1E6AA6EA351A98524900FB
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/FphVNBo3Zbylvet0mxzI-AlTIk0.roa
Signing time: Sun 01 Jan 2023 12:24:47 +0000
ROA not before: Sun 01 Jan 2023 12:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21449
IP address blocks: 91.217.128.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:a9:46:4f:1e:6a:a6:ea:35:1a:98:52:49:00:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Jan 1 12:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=169855341a3765bca5bdeb749b1cc8f80953224d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:77:df:ba:f9:f4:e1:7c:a7:db:aa:b5:58:9d:
bf:cd:5a:10:d5:60:8d:39:ea:19:22:79:9f:14:ba:
38:2c:cc:04:f4:9a:4e:4a:49:5a:71:46:d6:b2:34:
12:25:05:06:99:d7:fc:61:e5:55:02:9f:4d:b5:c3:
62:9b:27:c7:b3:8c:23:b8:d1:5f:d5:20:4c:30:c0:
17:34:71:02:6b:ef:9e:fe:ec:92:4f:f0:c6:b8:61:
6e:34:5a:d8:88:83:78:7f:3c:7a:80:0d:52:bb:4b:
90:31:51:cf:c8:53:ed:85:6e:9a:88:1f:8b:37:71:
ca:c8:a3:79:44:2e:38:2a:aa:5c:47:e7:d4:73:c7:
07:02:90:94:16:8b:61:df:29:62:b8:f6:67:4f:fb:
5e:c7:00:86:20:1e:41:f4:2a:5c:64:2b:ac:b8:7b:
d9:27:34:bf:fe:b4:94:18:2d:29:42:ba:64:e6:69:
e2:8e:ef:34:47:71:b1:27:dd:9a:b8:e2:ec:5f:49:
83:8b:cd:09:4b:6a:c4:46:e1:87:3d:6c:20:26:3a:
2e:90:61:dc:c6:5d:91:1b:2d:72:9c:de:46:56:66:
98:e0:78:e2:43:a5:36:ab:60:13:8d:88:a2:c4:2a:
62:52:38:81:ab:fb:b1:02:10:4c:a3:20:4a:d9:75:
ca:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:98:55:34:1A:37:65:BC:A5:BD:EB:74:9B:1C:C8:F8:09:53:22:4D
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/FphVNBo3Zbylvet0mxzI-AlTIk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
63:90:9e:da:c4:15:14:f2:a9:e9:6e:c4:b7:37:21:3b:23:ca:
be:57:c7:04:c2:e6:9f:cb:ec:f1:1c:4c:66:e8:42:b3:b6:ba:
f7:e6:88:2f:2e:5f:e0:e6:85:c2:22:39:87:ec:33:6d:e1:58:
36:55:cd:5c:cf:07:7c:32:9b:93:12:e0:85:67:d1:ed:77:2d:
09:7f:d5:c3:ee:81:38:81:17:ab:15:49:fc:96:30:fd:4b:97:
bb:b3:41:1c:93:e6:16:76:c4:3a:eb:a9:d8:07:b2:c1:72:70:
93:63:34:4f:1b:8e:33:b4:ef:e6:44:80:aa:4c:f6:29:01:17:
71:09:13:05:1c:94:2d:17:fd:13:dd:8c:7b:3e:2c:fe:87:23:
47:bc:2b:1c:1f:d8:fd:0e:1b:d7:eb:7d:30:31:d2:44:6e:da:
37:6f:99:33:9a:7f:d9:58:fb:ed:b6:04:4e:15:75:9c:22:2e:
a3:a1:86:2c:c8:a3:15:94:46:4d:b7:b4:28:a1:40:57:ea:ee:
33:23:82:de:ca:f8:da:ab:5a:1c:aa:34:48:cd:43:5e:7f:ed:
99:73:80:9f:a3:48:69:5e:00:c0:e9:6c:d7:07:94:78:02:af:
64:ac:88:74:5f:00:cc:bb:6f:f1:6e:07:84:c2:f3:0a:d8:f2:
31:93:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:46 2024 by rpki-client on console-ams.rpki-client.org