Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/aAHtjqD_YX96K-yDl0O-N6ry_Jw.roa
File: aAHtjqD_YX96K-yDl0O-N6ry_Jw.roa (raw, json)
Hash identifier: O+aCmhbr/fr5yuk6uDwF3ExFNACTKakocW1G4LEwYSw=
Subject key identifier: 68:01:ED:8E:A0:FF:61:7F:7A:2B:EC:83:97:43:BE:37:AA:F2:FC:9C
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01891AAAA36EF1BED8D8846DBC23D7F61419
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/aAHtjqD_YX96K-yDl0O-N6ry_Jw.roa
Signing time: Mon 03 Jul 2023 07:32:17 +0000
ROA not before: Mon 03 Jul 2023 07:32:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.32.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:aa:a3:6e:f1:be:d8:d8:84:6d:bc:23:d7:f6:14:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jul 3 07:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6801ed8ea0ff617f7a2bec839743be37aaf2fc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ff:f8:fe:e0:32:74:2a:29:ac:9a:18:94:90:
44:97:b7:82:5b:dc:37:4f:52:84:3e:0a:8c:84:03:
be:f7:e6:bc:3b:63:b2:92:1c:18:47:a1:44:d5:96:
fc:4c:0b:d5:b5:c6:b7:81:e5:7a:55:77:f8:45:76:
58:6e:a2:16:85:9f:b3:b9:a4:eb:6f:84:9b:6f:a7:
51:db:6e:bb:e3:16:c1:b5:4c:c7:52:a4:67:e1:c1:
d8:ff:9a:2d:17:f2:37:8a:7e:43:ce:fe:63:3b:53:
f4:2b:9f:ce:83:38:39:bc:4a:83:dc:d7:5f:ba:ce:
d6:f6:1f:46:06:13:6b:2a:f7:7f:ee:57:8f:f4:02:
e0:86:bb:5a:e4:f7:b1:07:00:26:53:3c:a5:3d:0a:
73:d2:5a:86:b3:82:76:8e:07:d7:98:4f:c6:d1:d5:
27:4b:1d:a6:af:6c:b1:62:64:ce:08:15:99:53:71:
54:73:f4:bf:47:1e:8e:4a:af:e2:76:e5:73:ab:ea:
4b:e4:c1:0f:73:32:3b:23:bb:f6:a9:da:ca:66:be:
52:20:15:00:a3:19:1a:ed:1e:6d:90:16:74:13:4c:
b1:4d:46:d5:98:e4:b3:92:33:39:56:30:90:8b:c1:
1e:e9:2a:a4:09:39:bf:9c:34:dc:cd:7f:10:41:89:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:ED:8E:A0:FF:61:7F:7A:2B:EC:83:97:43:BE:37:AA:F2:FC:9C
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/aAHtjqD_YX96K-yDl0O-N6ry_Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.32.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8f:a2:1c:fc:fa:90:dd:49:ec:5a:ad:4f:d3:7d:36:71:d9:
07:81:77:47:5f:e0:72:49:8f:1f:00:d3:86:7e:f2:9e:f9:5c:
32:34:f3:43:5b:62:25:0b:e3:eb:e8:46:86:2f:87:b4:5d:d9:
7b:d1:7a:b8:dd:b4:1f:1a:3d:3e:d3:ed:6f:13:a4:6e:43:4d:
2a:61:c0:be:42:e2:df:87:c8:09:7a:00:51:fa:4f:0e:d0:bb:
35:d7:89:de:7c:fc:7b:35:32:9c:4d:45:67:92:da:1d:f1:53:
a2:87:f6:de:f5:bc:60:88:d7:58:3a:25:5d:2a:9f:3a:6c:8b:
8e:81:d1:6c:84:bc:7d:61:57:9d:bd:a4:6f:23:0d:4f:8b:e9:
35:3b:3d:c0:e2:8b:6a:f9:ee:d6:c3:53:33:6b:39:b8:cf:b9:
d2:0e:43:c9:08:38:82:b0:26:06:e8:f0:8c:2d:bd:4b:c7:b1:
98:ad:23:0c:3e:0f:6a:96:36:a0:ad:6b:75:75:f4:d8:f8:85:
a7:45:0e:50:7c:c0:c4:ec:47:54:82:8c:2d:64:9e:81:b4:07:
1c:14:89:30:dc:35:23:12:b1:5e:a3:47:31:1d:87:3a:14:19:
e6:f6:12:f4:f5:c7:3f:fc:39:49:d7:af:c4:5a:84:3e:d8:e4:
0e:02:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:01 2023 by rpki-client on console-fra.rpki-client.org