Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/SqoUrAU-SINNW986cCxMUtZ4Xfo.roa
File: SqoUrAU-SINNW986cCxMUtZ4Xfo.roa (raw, json)
Hash identifier: Dir5UW5Cni5xZfe/fvLmBO23ISBBkk6gV2xd5kRmRWY=
Subject key identifier: 4A:AA:14:AC:05:3E:48:83:4D:5B:DF:3A:70:2C:4C:52:D6:78:5D:FA
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 0188B8E3E6669EC438B2D5045AEFDC6C8C93
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/SqoUrAU-SINNW986cCxMUtZ4Xfo.roa
Signing time: Wed 14 Jun 2023 07:52:03 +0000
ROA not before: Wed 14 Jun 2023 07:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:e3:e6:66:9e:c4:38:b2:d5:04:5a:ef:dc:6c:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jun 14 07:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4aaa14ac053e48834d5bdf3a702c4c52d6785dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:f2:29:96:1e:b5:fd:85:85:3f:8d:2a:36:
eb:6e:4e:65:5b:9a:a4:70:01:8b:8c:a1:e7:91:47:
93:c1:93:dd:a8:06:3f:ce:f2:3f:79:c9:13:0f:20:
2c:0c:04:44:df:dc:f0:d8:0c:a6:ae:3d:1a:ec:f6:
63:f5:a2:b6:dc:5b:81:c3:10:f0:33:b6:44:9c:e3:
e8:0b:06:aa:62:04:a1:30:60:83:7e:0a:3e:c2:6c:
30:26:c8:40:ea:53:d8:6a:02:da:33:7d:f6:2f:f1:
13:f0:16:fb:49:e1:1e:8d:b3:d8:8c:1f:c7:ce:51:
b2:85:dd:92:33:c5:24:4d:12:3e:c5:a4:b7:37:48:
1c:e4:32:b4:fa:ef:57:ad:92:f3:51:19:0e:cb:43:
71:20:d9:c5:1d:18:a0:bd:17:d8:00:19:a1:00:35:
5d:a2:04:92:21:67:ca:3f:9d:66:b8:19:aa:2b:27:
e8:5b:6e:04:58:93:81:5e:c4:18:4b:49:79:d4:34:
37:31:f6:4d:19:5e:b5:99:f1:7d:ca:eb:0a:31:88:
f3:da:f1:33:ec:cc:99:6a:41:04:54:1a:d0:23:fe:
f8:2e:04:4d:1a:8e:97:87:eb:94:fb:d4:2e:1c:13:
2d:1b:55:0c:ec:14:5e:5e:84:9e:b8:31:70:36:8a:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AA:14:AC:05:3E:48:83:4D:5B:DF:3A:70:2C:4C:52:D6:78:5D:FA
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/SqoUrAU-SINNW986cCxMUtZ4Xfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8e:63:02:8f:10:e0:50:27:c3:41:f5:79:a1:cd:9e:51:90:
fd:60:a3:d3:52:c6:1e:4b:ae:46:aa:d4:9a:d6:66:16:75:e4:
58:c4:27:4b:1d:e6:11:1f:cf:dc:d4:b8:1c:db:be:f1:fd:07:
9f:8b:60:b4:be:ca:5e:24:40:d1:67:ff:34:42:17:21:86:00:
91:ae:76:2e:e4:e8:e0:13:96:f4:9a:63:72:10:07:18:57:42:
ea:70:d2:fd:45:43:df:a0:0b:f6:c3:a3:67:ea:77:dd:dc:16:
e1:9a:ff:95:ec:32:8d:f6:00:bc:70:07:06:94:b8:c5:7b:7e:
1f:64:bf:da:f4:2e:84:e1:de:71:97:42:17:fc:40:2a:eb:f5:
7d:0b:a8:68:49:79:c4:d6:a7:23:23:f2:d0:5a:de:b1:24:3c:
38:21:6d:6e:39:be:8d:78:ba:33:00:db:e6:46:ce:2e:b6:74:
c1:4c:28:08:38:8e:2c:3d:24:b6:db:52:1f:36:4e:b4:8c:64:
48:dd:89:08:6a:11:a6:c8:c9:e3:b8:57:b9:b7:58:99:b3:1d:
ad:c8:1f:ba:a8:98:bf:fc:1f:7b:4b:85:18:fe:6b:4f:33:39:
62:be:d4:6f:c6:82:8d:8d:1b:16:93:eb:bd:37:6e:73:55:e9:
53:0d:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org