Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/Q1N7V-JidGjEfMAFoWuc5oqoSx4.roa
File: Q1N7V-JidGjEfMAFoWuc5oqoSx4.roa (raw, json)
Hash identifier: 6P5IFR64yBiFORg8E7cvF89ZAo8X6jxMByi16iXLlow=
Subject key identifier: 43:53:7B:57:E2:62:74:68:C4:7C:C0:05:A1:6B:9C:E6:8A:A8:4B:1E
Certificate issuer: /CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Certificate serial: 0187795588D17C53CFA88AD9217A8916CDA7
Authority key identifier: 83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/Q1N7V-JidGjEfMAFoWuc5oqoSx4.roa
Signing time: Thu 13 Apr 2023 06:37:41 +0000
ROA not before: Thu 13 Apr 2023 06:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:55:88:d1:7c:53:cf:a8:8a:d9:21:7a:89:16:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839c206ef5dcc43770983a48e049aaec3f0b4fec
Validity
Not Before: Apr 13 06:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43537b57e2627468c47cc005a16b9ce68aa84b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:99:a6:09:c3:a0:91:f8:60:ad:99:96:0f:
6e:d8:9a:01:b4:d1:0b:94:99:7d:7d:dd:ce:cc:a5:
c5:8f:8d:eb:f3:32:74:bd:47:a8:f4:f9:b9:de:46:
9c:af:36:0f:1e:c1:3d:b6:c2:43:ad:75:26:61:8b:
35:c2:1f:d9:17:2e:5c:43:f9:c3:df:07:45:f1:db:
c9:c5:b6:62:6f:5b:99:25:f2:e8:d1:ae:ae:27:c6:
83:9b:b4:72:48:e0:0a:a3:95:6e:e8:89:56:b3:0d:
87:40:e2:6b:c2:71:60:cc:b6:73:eb:a3:af:d8:66:
4f:7b:b6:e9:3c:c6:73:80:ae:90:d7:8c:a3:50:86:
37:4c:8f:10:41:82:31:2f:d4:3a:f2:09:00:01:c4:
7b:9b:65:7e:aa:ff:8a:95:85:43:10:6e:96:99:30:
c8:17:a2:61:e0:8c:ad:da:dd:da:e9:a2:ee:ac:6e:
47:a6:67:68:6d:47:ea:f6:e9:38:52:5c:cc:95:e1:
0a:bf:cf:cf:c1:ee:6a:f0:0b:12:09:8a:72:3d:6b:
14:bb:70:f0:0f:46:68:07:d5:64:1e:e5:9f:9f:44:
3a:a3:4b:53:a9:1c:70:bc:fb:e3:ed:ac:e7:af:9b:
ba:ed:fc:19:8f:77:e2:a3:a2:84:b5:a4:5b:92:d0:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:7B:57:E2:62:74:68:C4:7C:C0:05:A1:6B:9C:E6:8A:A8:4B:1E
X509v3 Authority Key Identifier:
keyid:83:9C:20:6E:F5:DC:C4:37:70:98:3A:48:E0:49:AA:EC:3F:0B:4F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5wgbvXcxDdwmDpI4Emq7D8LT-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/Q1N7V-JidGjEfMAFoWuc5oqoSx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f0ba90-2ce1-4d04-a92a-1130b7798ff4/1/g5wgbvXcxDdwmDpI4Emq7D8LT-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:60:ea:af:81:9e:f2:6a:71:bb:f9:05:3a:6e:47:12:51:ee:
11:33:3c:92:8b:b8:29:b4:94:a7:37:be:17:96:78:69:ee:f4:
9d:d5:f8:66:f2:d2:e4:b2:16:15:95:c9:e4:13:09:b7:86:23:
e2:5f:a2:3f:4e:76:29:13:aa:82:0e:a0:87:83:ca:4a:25:c9:
bb:25:1b:15:3b:8d:ba:ab:98:4e:a5:1a:6b:6c:95:56:77:58:
a6:1a:27:27:16:51:3d:df:b8:0a:be:25:30:fd:8e:9e:0e:ac:
7b:3b:6f:61:fd:0b:3f:11:1a:e5:c4:3b:2c:e5:12:fe:77:6b:
2b:81:54:80:ae:ff:f6:16:1b:b3:0a:f2:a1:04:f3:2e:cd:be:
84:9c:69:09:0d:be:22:6a:ad:59:52:80:c6:94:a4:99:4e:8c:
a1:5a:69:e7:32:68:26:47:d5:1a:47:e4:e2:6d:4a:ac:a2:c8:
c8:e8:5f:57:5b:d6:17:af:db:34:6c:18:e7:0c:2c:92:7a:8e:
b6:55:22:a6:dd:71:00:4b:8f:2c:6b:fd:30:fe:f1:1e:09:ce:
a9:e9:a6:75:27:47:66:be:36:fa:9f:df:28:84:96:12:7b:5e:
16:39:76:da:f0:84:df:72:3f:e4:60:b7:b6:6f:ba:d6:2b:1b:
1c:57:43:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:36 2024 by rpki-client on console-fra.rpki-client.org