Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/nV2FuajlVOAJxAgjFwPnLwge_BQ.roa
File: nV2FuajlVOAJxAgjFwPnLwge_BQ.roa (raw, json)
Hash identifier: ZiYvuSc3V1YwxW9rwXvpnY7BiGnoEqhJLtKBZ5PrMsw=
Subject key identifier: 9D:5D:85:B9:A8:E5:54:E0:09:C4:08:23:17:03:E7:2F:08:1E:FC:14
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01856F02209582D65E7BC38F7FEF86D74751
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/nV2FuajlVOAJxAgjFwPnLwge_BQ.roa
Signing time: Sun 01 Jan 2023 20:24:48 +0000
ROA not before: Sun 01 Jan 2023 20:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:20:95:82:d6:5e:7b:c3:8f:7f:ef:86:d7:47:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jan 1 20:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5d85b9a8e554e009c408231703e72f081efc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:f1:21:f5:26:0c:d0:2d:36:d7:62:61:38:
86:84:8d:cb:88:4b:2c:0f:98:d9:81:26:d6:0a:26:
a0:bd:b8:0d:b7:4f:2b:85:82:9f:53:cd:7c:bc:e8:
45:4a:cd:74:74:d3:86:5c:af:e0:e0:94:63:30:2a:
9f:02:95:b5:2e:f6:f0:e5:84:22:de:49:0c:26:90:
7c:bf:c9:f3:4a:10:65:b7:12:ac:4d:33:4d:a0:03:
b7:46:66:c9:86:19:5b:ee:9a:93:32:75:7a:83:9c:
26:41:b8:d7:4f:bb:cc:66:3f:7a:03:bd:37:db:f8:
5b:19:d1:48:aa:01:80:25:dc:f0:ae:d7:ac:2f:59:
dc:13:f6:1e:28:62:bf:e0:e2:0f:5d:a3:61:a2:f0:
31:28:9f:01:1e:16:ac:71:ca:a4:22:bf:92:3b:5d:
e1:be:a6:79:d1:4b:30:f8:68:c7:f2:db:65:e0:e4:
78:dc:ec:c3:a3:53:9e:5e:4c:6b:af:38:87:63:27:
8a:40:6f:e7:ff:df:38:a2:2c:a8:64:58:69:18:4d:
53:60:5b:16:b2:d1:cb:27:5d:5d:69:4f:fc:4c:0b:
c9:62:d2:a9:b0:b3:3c:b9:09:8c:27:78:32:ff:9e:
6f:b2:57:5c:3e:d2:86:82:40:7f:72:04:52:c0:c5:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5D:85:B9:A8:E5:54:E0:09:C4:08:23:17:03:E7:2F:08:1E:FC:14
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/nV2FuajlVOAJxAgjFwPnLwge_BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:64:d6:4b:ea:d1:f4:6b:f9:96:2b:00:79:dd:57:9a:1c:2e:
7b:57:1d:51:b7:cf:87:b6:3a:93:cb:0e:51:19:07:ff:79:ec:
86:3e:d2:0b:1a:f5:3e:8d:e3:b1:2f:89:08:4f:59:9d:ad:f2:
7a:db:98:c3:8d:e5:f8:ce:7b:e1:8f:9f:16:75:7d:fc:79:c3:
1c:27:04:66:6d:3c:b7:03:d0:3b:ea:35:9f:74:ea:ea:5e:51:
d8:fa:ec:0b:6a:fe:d7:b7:c3:f8:cc:43:bb:1e:78:93:7c:f7:
ac:03:aa:6c:4d:3f:a1:45:0e:c1:52:cc:06:a1:5e:07:27:40:
c9:f3:b7:e3:e8:5c:e3:c0:f1:91:19:5b:4d:cf:75:02:6c:ba:
19:2b:bb:fc:ee:bc:c1:00:5e:e2:d3:40:6d:a5:76:2b:7d:18:
00:e0:6b:e7:38:2c:b0:11:df:82:5e:33:0c:9a:b9:f2:54:20:
f2:21:4b:a0:60:84:13:01:ec:d2:c2:15:22:14:52:cb:68:e9:
2a:10:a5:4d:e6:b7:b7:32:d7:1c:2d:8e:92:ee:b6:03:2c:0f:
d6:75:aa:a6:da:00:cc:a7:40:42:e8:3f:66:29:b4:b9:6c:c2:
39:c7:93:20:02:39:1e:0f:31:e1:91:ba:15:0a:27:b2:f0:6f:
f8:3e:3d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:18 2024 by rpki-client on console-ams.rpki-client.org