Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/zqFUItXxzE3jLtrkX9P3FQgZkB4.roa
File: zqFUItXxzE3jLtrkX9P3FQgZkB4.roa (raw, json)
Hash identifier: 6W2ZtkarVnQnNU3OGb4ZS1fxARNV6OvvtNlJT4ZNurc=
Subject key identifier: CE:A1:54:22:D5:F1:CC:4D:E3:2E:DA:E4:5F:D3:F7:15:08:19:90:1E
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 018BF6D5B0F7D112A7152D599D82B734AFA0
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/zqFUItXxzE3jLtrkX9P3FQgZkB4.roa
Signing time: Wed 22 Nov 2023 11:41:21 +0000
ROA not before: Wed 22 Nov 2023 11:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.199.44.0/24 maxlen: 24
91.199.42.0/24 maxlen: 24
91.199.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:d5:b0:f7:d1:12:a7:15:2d:59:9d:82:b7:34:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Nov 22 11:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea15422d5f1cc4de32edae45fd3f7150819901e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:ed:e7:00:dc:c4:ce:60:b2:d7:5a:ac:8f:
01:3a:d9:dc:35:71:7b:d6:75:02:63:7d:72:89:9b:
7f:66:87:bc:97:c4:20:b3:a8:b0:9b:1c:ca:23:ac:
2a:23:d4:4a:70:c5:15:20:40:5b:86:5d:87:42:9d:
93:45:76:03:08:b2:00:c3:e0:17:d2:4f:b0:3b:f9:
1c:85:39:eb:23:6a:69:f4:7e:19:03:a2:ac:6d:a5:
e8:42:ae:76:16:ca:70:78:5c:df:36:60:7c:f5:d2:
1a:7b:04:e1:b2:75:be:c3:39:14:73:c4:e4:c5:b6:
bd:3d:bb:98:3e:f2:20:9a:d4:17:72:a8:7c:e2:b4:
d2:7a:4f:6e:58:05:d4:eb:55:64:db:55:a0:eb:4d:
e6:4c:65:16:75:8e:29:7e:0e:28:8d:f9:e5:23:86:
23:bb:ba:05:90:d5:7c:bb:63:a3:5f:2b:c0:50:03:
00:1d:6e:6e:56:a8:d4:ed:08:e7:af:3c:87:86:b3:
e4:67:b7:91:ea:a0:df:8e:48:18:b5:7c:6d:f2:df:
5e:9f:20:26:41:61:56:90:73:7c:35:dc:bf:b7:de:
39:78:01:3d:04:41:43:84:4d:2e:f3:83:7b:0e:ac:
cc:5f:d9:0e:76:00:22:41:ef:28:a5:54:1a:64:3c:
8c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A1:54:22:D5:F1:CC:4D:E3:2E:DA:E4:5F:D3:F7:15:08:19:90:1E
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/zqFUItXxzE3jLtrkX9P3FQgZkB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
91.199.44.0/24
91.199.47.0/24
Signature Algorithm: sha256WithRSAEncryption
42:2d:8f:fb:24:a7:91:19:2e:3b:ff:ee:17:c9:3b:05:f1:89:
93:2d:6c:2d:bf:e5:06:e4:00:11:03:6c:17:d3:64:40:24:b9:
4d:0e:5c:5b:57:3b:1d:42:44:46:67:a2:34:91:e3:17:66:aa:
71:d8:a3:4f:5d:db:ee:61:59:87:8f:93:ee:86:38:c6:5e:d9:
09:ab:6a:89:af:87:fc:83:7d:0b:eb:5e:a8:5f:e0:b0:36:59:
79:6b:9a:77:2b:da:95:d3:ea:78:d4:a9:ee:24:14:61:c0:f7:
43:7a:98:30:9e:d9:3d:8d:57:d4:c9:d3:7e:c0:ed:df:e1:fb:
d5:fd:2a:2d:b7:9d:23:32:bf:99:e6:6b:28:14:54:61:84:83:
15:b5:39:81:ef:8c:e1:f0:0d:0f:65:46:20:f8:74:2f:d6:9c:
a9:99:4a:43:57:6c:ae:91:86:95:8d:2d:fa:4d:71:6d:aa:d7:
aa:98:68:6d:ec:79:3e:a0:f8:1b:70:25:8c:bd:ff:ff:78:e1:
65:9d:38:c3:0c:26:dc:d8:32:58:76:c9:f3:96:7b:f1:9d:76:
f0:4f:4f:f3:ba:7a:3e:5b:84:6c:42:28:67:9f:40:e6:ee:a2:
4d:7d:d8:b9:94:42:a9:76:04:82:ec:f4:1f:24:1c:70:a0:86:
4d:ec:59:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 21:48:30 2023 by rpki-client on console-fra.rpki-client.org