Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/c-ADxFCr-KPEHu04n0vMaesebTk.roa
File: c-ADxFCr-KPEHu04n0vMaesebTk.roa (raw, json)
Hash identifier: dAdiC3GP9Jfz0Iu/FIHS4fUaXy/istTqwTukcnHhshs=
Subject key identifier: 73:E0:03:C4:50:AB:F8:A3:C4:1E:ED:38:9F:4B:CC:69:EB:1E:6D:39
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 0189AB9B47FC1C30FDE3B6F6B35F19198F3D
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/c-ADxFCr-KPEHu04n0vMaesebTk.roa
Signing time: Mon 31 Jul 2023 11:00:27 +0000
ROA not before: Mon 31 Jul 2023 11:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.44.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:9b:47:fc:1c:30:fd:e3:b6:f6:b3:5f:19:19:8f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jul 31 11:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e003c450abf8a3c41eed389f4bcc69eb1e6d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:cb:d9:ba:69:87:71:41:85:ce:8f:2a:95:
0e:6d:43:04:eb:d2:c2:ab:90:83:dd:6a:bd:e2:3b:
c7:e5:e5:7d:b3:79:ab:60:31:7b:40:0a:69:4e:41:
d6:19:d6:9d:bb:6d:20:0e:87:3b:87:d1:44:6d:70:
1f:ad:4e:61:b7:41:59:64:27:88:63:b7:82:78:b3:
74:29:76:dd:08:cd:cc:ea:8c:a2:7d:e5:c3:f3:4e:
47:97:b9:81:44:5a:f7:06:93:92:99:1d:9d:72:ea:
a6:9e:ed:11:a7:94:c8:87:2e:6b:5c:15:3c:c9:c3:
9c:40:cb:74:99:e9:04:27:18:d5:ae:eb:47:a0:c2:
be:31:5e:40:a3:59:e0:2d:b3:5f:ee:4d:d0:aa:27:
93:dd:e7:3e:c5:79:54:50:37:66:87:d5:62:8a:13:
ed:46:5e:a1:1f:72:6f:b0:15:c2:22:11:a6:2a:ab:
31:dc:fd:4b:33:fe:3e:66:d8:5a:7c:c1:92:f3:d7:
39:a7:e2:45:a6:cc:28:d7:d9:08:41:93:2a:58:f8:
b8:55:83:f5:3a:3a:66:c3:88:85:b5:42:5f:e3:77:
a5:a2:c5:48:8c:b1:69:ee:92:6c:eb:9f:59:82:02:
1e:e5:45:7b:e8:1e:53:1e:d5:ac:94:82:5f:26:30:
24:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E0:03:C4:50:AB:F8:A3:C4:1E:ED:38:9F:4B:CC:69:EB:1E:6D:39
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/c-ADxFCr-KPEHu04n0vMaesebTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
14:90:ac:93:e3:67:43:aa:e4:44:57:0f:c7:a0:f6:36:e0:81:
24:f5:c2:bc:97:3b:2b:1c:79:22:0f:93:e2:d4:02:74:d6:f7:
e7:17:83:71:d6:9d:8d:26:1d:63:7c:6e:56:fd:a3:34:a5:2a:
02:30:3b:72:fc:a6:fd:61:43:3c:13:ef:ae:78:4a:4b:c5:c6:
dd:29:b2:68:99:81:57:0a:eb:d7:96:09:69:80:5f:c3:7d:1c:
0a:50:2e:73:35:51:29:f2:28:3b:83:b4:14:c2:6b:90:7a:ec:
33:c5:b4:2c:7e:bd:b2:2d:f7:a3:ea:cf:90:ea:ee:fb:cd:bc:
ce:6e:16:ed:c7:54:c3:16:d4:10:43:a8:93:12:a7:89:08:c5:
01:cf:ef:cb:20:7a:a3:39:ea:54:3d:f5:5b:a4:4e:11:63:e3:
a2:62:0a:2d:48:fa:5a:4e:ab:4a:4c:40:e3:5b:b2:82:b8:9b:
5d:34:a5:82:35:32:d8:df:d0:19:6d:0f:a1:70:e4:a9:36:d6:
d3:dc:d3:b7:7e:e3:77:d8:f8:67:1d:77:5a:2a:a8:08:3f:d2:
a1:d4:9d:eb:08:f5:51:7a:08:3d:85:6e:b9:4a:ca:0f:95:ff:
9a:09:d9:39:10:a5:d1:e5:6a:70:fe:5f:52:e6:a6:be:ce:c0:
e3:70:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 09:24:15 2023 by rpki-client on console-ams.rpki-client.org