Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/RNqs-2-mqjbOIeA2OMObmIsXVPc.roa
File: RNqs-2-mqjbOIeA2OMObmIsXVPc.roa (raw, json)
Hash identifier: R0am0KharWdKUX/ZhI7wEh3gJUN9LkTAl/5bXgZHLUg=
Subject key identifier: 44:DA:AC:FB:6F:A6:AA:36:CE:21:E0:36:38:C3:9B:98:8B:17:54:F7
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01890B83CCEAD070401D02F24284166CF0F7
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/RNqs-2-mqjbOIeA2OMObmIsXVPc.roa
Signing time: Fri 30 Jun 2023 08:55:34 +0000
ROA not before: Fri 30 Jun 2023 08:55:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 91.199.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:83:cc:ea:d0:70:40:1d:02:f2:42:84:16:6c:f0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jun 30 08:55:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44daacfb6fa6aa36ce21e03638c39b988b1754f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:96:ac:bb:5e:cc:5e:da:62:80:7e:09:8a:
11:f1:ff:29:d6:d9:49:64:87:3b:35:2a:e9:8f:22:
a4:c4:b6:51:25:99:d5:27:dd:cb:61:39:05:69:e6:
60:bd:f3:eb:5c:3b:4f:e7:22:59:ec:f4:76:d3:03:
37:45:c2:e9:e9:f7:c3:48:18:42:1f:c3:04:d0:4e:
b0:f9:a7:d8:7c:05:97:a0:7b:ec:26:6d:46:62:14:
e3:c9:4c:08:dd:fd:23:c1:29:e0:2f:4e:d4:bf:a2:
90:6d:ba:64:ed:9c:bd:14:0a:e1:34:35:59:d0:e3:
ff:52:75:4b:be:f1:39:b6:5c:ab:f7:13:da:3a:0e:
d6:fa:0c:18:6b:ba:a9:81:26:6a:18:14:2a:d2:51:
75:6e:7d:91:91:4e:4c:bb:fe:1c:99:de:6e:80:1d:
de:a8:2d:8f:0e:4b:a7:cc:e0:5c:87:bd:a8:e4:5b:
b4:af:25:10:0a:53:45:c2:c4:0d:95:ec:d9:5c:05:
15:61:65:4c:f6:50:2a:53:d2:e6:8e:5f:b0:5d:9d:
8d:d6:c8:83:18:6d:5e:49:41:11:fc:be:85:76:be:
9f:98:fc:29:6e:21:f5:d5:bd:23:33:ad:03:42:e5:
c0:b5:8b:44:01:88:96:f7:0e:de:d0:fc:05:8e:2d:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:AC:FB:6F:A6:AA:36:CE:21:E0:36:38:C3:9B:98:8B:17:54:F7
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/RNqs-2-mqjbOIeA2OMObmIsXVPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.44.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7b:90:25:2b:f0:c9:a6:08:f8:41:12:f5:37:a3:1c:5f:b7:
81:76:ea:2f:b2:4f:8a:c5:7b:58:4b:48:59:ed:46:b4:3b:c1:
ca:04:5c:98:f5:94:9b:2c:ac:7f:42:13:46:41:50:5f:35:21:
cc:18:3c:ad:8f:4a:b4:8a:a0:30:e9:54:50:31:31:86:aa:45:
5e:75:16:59:46:79:29:12:04:10:ee:71:0f:89:ca:77:82:de:
20:5f:4c:ce:f3:fa:80:39:fa:21:af:a3:bd:1f:78:02:09:fc:
8f:89:1b:33:ca:84:ae:16:a9:d0:a6:11:4b:33:5b:17:f9:26:
77:21:76:5a:53:15:4b:3a:13:90:f7:a2:a4:39:47:66:c1:ec:
f5:da:2d:a3:a6:da:3d:06:d4:12:14:23:56:e8:79:ca:e9:b5:
34:78:05:76:f3:3a:90:77:bf:fb:d3:9b:3b:aa:56:28:c9:97:
0d:f3:27:28:05:6b:5d:f7:f8:e1:a2:1f:e0:07:b0:78:17:ee:
ec:89:09:23:10:a3:c4:43:b0:a3:43:cd:96:76:2a:90:42:56:
9b:fe:15:2f:ea:33:3a:49:fd:77:49:9d:61:f2:7e:4a:b2:11:
d1:24:b2:0d:1e:11:32:8c:f8:e1:49:bb:51:10:17:f8:bf:3e:
15:5f:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 11:25:36 2023 by rpki-client on console-ams.rpki-client.org