Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/Vl0sCFmZvfuyshFDMeePKkkLwOs.roa
File: Vl0sCFmZvfuyshFDMeePKkkLwOs.roa (raw, json)
Hash identifier: j9mF9ptWgrNmmkhdtz4d1NixzvDwpnllV3Gxe2Pxpmo=
Subject key identifier: 56:5D:2C:08:59:99:BD:FB:B2:B2:11:43:31:E7:8F:2A:49:0B:C0:EB
Certificate issuer: /CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
Certificate serial: 018570B98E91B328A0F9F4EFBC11D281F8A2
Authority key identifier: 9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/Vl0sCFmZvfuyshFDMeePKkkLwOs.roa
Signing time: Mon 02 Jan 2023 04:24:46 +0000
ROA not before: Mon 02 Jan 2023 04:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56798
IP address blocks: 91.207.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:8e:91:b3:28:a0:f9:f4:ef:bc:11:d2:81:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
Validity
Not Before: Jan 2 04:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=565d2c085999bdfbb2b2114331e78f2a490bc0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:f6:ba:bb:05:4d:90:ff:89:39:1e:89:15:
82:cd:18:26:ad:36:94:ed:70:e1:53:8e:4f:82:5e:
ca:3e:aa:bc:26:52:1c:87:a6:ef:02:f7:98:62:fc:
1a:64:1f:00:5c:d1:66:ab:6b:71:46:5f:cb:8d:30:
65:86:84:09:2a:2d:6f:41:b8:b4:3b:c7:a1:b8:2d:
d1:43:a4:f1:85:56:78:b2:b6:4c:91:d0:dd:cd:42:
48:07:a7:60:34:9b:75:03:38:08:81:9b:93:76:b6:
cd:6e:ea:4e:c4:17:78:1c:0f:38:92:54:08:d9:19:
a5:8d:cd:db:4a:cc:be:aa:60:76:00:39:18:ee:f7:
1a:75:6c:43:c7:a7:a8:8b:da:f2:a6:0d:66:9f:b7:
a6:e2:aa:9c:4b:ac:62:e5:ab:06:f7:b7:73:5e:f1:
a0:76:8c:5e:81:d6:25:f2:26:6e:86:7e:24:89:af:
49:ec:4c:08:0d:d7:d8:ca:f6:77:cb:ae:32:5e:8e:
1e:92:3d:a8:22:98:3d:ab:ce:af:ef:31:a7:20:83:
30:f2:24:07:d1:b4:0b:93:f6:35:e4:3c:55:d7:04:
f6:42:88:07:a8:01:1d:ba:d9:95:e6:d2:ed:0a:f8:
4b:f8:ef:09:84:d9:97:47:74:12:0e:30:5a:2b:05:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5D:2C:08:59:99:BD:FB:B2:B2:11:43:31:E7:8F:2A:49:0B:C0:EB
X509v3 Authority Key Identifier:
keyid:9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/Vl0sCFmZvfuyshFDMeePKkkLwOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.207.0/24
Signature Algorithm: sha256WithRSAEncryption
96:91:6c:08:32:45:ba:5a:9d:9e:cc:34:51:2b:4b:d3:87:02:
ba:4e:07:bf:59:2a:ab:f5:f4:bb:67:56:2f:70:3a:a4:c7:07:
d6:75:4e:b5:08:1e:73:1c:bc:97:c4:9d:a9:cd:b5:51:82:eb:
8c:4f:a4:6c:d9:2e:12:df:d8:fc:1d:9a:87:03:7b:93:55:5a:
58:db:1c:7f:af:fb:e6:2d:de:e7:fa:11:e2:dd:d7:65:7a:5a:
d8:89:17:07:62:7b:0d:52:4d:bd:f2:18:d0:0e:1d:b3:3d:83:
a4:ba:3a:0e:72:f4:e9:24:d0:70:c8:65:e1:c6:4b:f6:2e:f0:
d5:e5:8e:e9:8a:9b:ff:95:85:6b:4d:95:09:1f:6c:ac:30:80:
b2:39:1a:fa:39:b6:e0:0b:0e:4e:9d:3e:c3:d2:45:64:50:70:
81:8c:0c:0b:c9:c5:94:b6:24:15:d9:95:da:cb:da:d9:c8:de:
d0:49:f1:6c:1e:c3:5a:47:0a:f5:29:aa:9f:11:60:21:51:37:
cb:38:83:f4:f0:b0:ba:28:c9:f3:9d:a9:8f:b3:23:20:5f:3e:
4b:c3:88:2d:f7:ec:75:e5:28:b9:9e:be:90:51:7a:1f:e3:d2:
7a:a8:5c:44:e5:bc:36:ff:06:6b:e2:a4:ab:21:68:cd:f9:9e:
af:16:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:19 2024 by rpki-client on console-fra.rpki-client.org