Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/nxhgsnDDhpYevAZ8rKBNNaSesj8.roa
File: nxhgsnDDhpYevAZ8rKBNNaSesj8.roa (raw, json)
Hash identifier: rgBxaFMymv3HmIJTHG1jG6Kz0/qiBTTboeVZGWuhlH8=
Subject key identifier: 9F:18:60:B2:70:C3:86:96:1E:BC:06:7C:AC:A0:4D:35:A4:9E:B2:3F
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 0189B03935E3CA2D15E6AE6F642318743BE7
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/nxhgsnDDhpYevAZ8rKBNNaSesj8.roa
Signing time: Tue 01 Aug 2023 08:31:26 +0000
ROA not before: Tue 01 Aug 2023 08:31:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.44.0/24 maxlen: 24
91.199.42.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:39:35:e3:ca:2d:15:e6:ae:6f:64:23:18:74:3b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Aug 1 08:31:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1860b270c386961ebc067caca04d35a49eb23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:9d:2e:86:ba:28:0d:7d:3d:1b:7a:50:8c:
fe:3b:01:7c:67:30:30:e5:7c:07:b5:0e:b5:b7:ea:
65:ca:cb:d2:fa:a6:54:3c:87:ab:b3:c9:7f:a9:0c:
36:b2:be:8f:10:70:47:e2:10:6b:98:21:af:16:c7:
81:8f:f1:a1:8c:00:ae:69:59:39:e1:e3:2d:17:2c:
14:5c:d0:2d:39:c3:66:41:73:3d:db:84:0e:21:3b:
5b:95:54:d0:0a:ba:cc:9a:66:b6:41:8a:e2:3a:0b:
1f:91:3a:72:ee:a7:86:6a:7e:9f:ad:ae:54:19:48:
5d:7a:15:f9:de:4c:d5:bb:11:fe:96:7c:56:78:c1:
9a:97:54:cb:fd:e2:90:7d:97:85:16:75:d2:ec:2a:
e7:d5:d8:4f:27:da:c6:c8:e4:e2:62:7a:f4:e6:7f:
03:97:e7:6c:1c:dd:a7:87:9d:d6:40:2e:7c:a3:96:
04:c9:7c:36:c0:52:27:6c:50:7a:60:9e:a5:ee:c5:
64:34:ea:18:eb:2d:d5:f9:f6:b4:e7:38:04:c2:45:
b6:f1:f3:04:3c:3b:75:44:ad:3e:46:1e:5c:b6:b2:
17:15:7c:6a:59:f2:49:19:02:a1:fb:03:df:1b:dd:
b2:d7:61:34:85:a8:31:9e:0e:88:ca:53:88:23:57:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:60:B2:70:C3:86:96:1E:BC:06:7C:AC:A0:4D:35:A4:9E:B2:3F
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/nxhgsnDDhpYevAZ8rKBNNaSesj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
37:21:45:c1:dd:6b:6b:57:26:bd:5b:6a:f8:7e:cf:c8:cd:d8:
d8:ed:da:2f:54:d7:6b:36:a3:db:69:f1:15:99:bb:03:58:f9:
af:5a:7d:52:92:f7:7d:8f:a8:6b:cd:f4:0d:bd:d6:03:5e:dc:
db:0c:91:d7:bb:91:92:8b:d0:38:aa:2b:26:bd:ab:6f:66:07:
9e:55:54:f2:2f:54:9e:c4:6d:8d:b2:e5:c5:f5:48:69:41:d6:
12:1d:9f:e4:73:47:16:e7:65:5d:34:09:11:b8:80:06:7a:0a:
3e:2f:ab:0f:62:d7:27:07:2c:38:44:93:eb:05:3a:56:6f:d1:
77:55:7b:37:21:89:ea:5f:4f:a5:96:12:d6:c6:35:1e:e6:ca:
09:13:9d:49:20:8c:5b:92:64:c1:a9:2a:61:b7:27:f7:8b:dd:
e8:c1:73:b4:6e:2e:fa:1d:67:81:c8:21:de:9a:ec:11:86:19:
4b:24:ab:2d:f0:af:08:8a:fa:52:e9:f1:77:e0:69:45:29:94:
1b:d8:73:95:f7:8b:fa:65:e5:39:bc:09:e8:85:ac:87:c2:7d:
d3:b6:84:4e:29:04:fe:74:cf:1f:d2:de:4d:aa:2a:f5:0f:97:
6f:48:21:13:ca:b9:6f:16:12:f4:3a:73:f0:30:d1:c2:45:a5:
d1:8c:1c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 13:26:40 2023 by rpki-client on console-ams.rpki-client.org