Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/G2k1-b4SAbyRT6EbiJpktfWWI7A.roa
File: G2k1-b4SAbyRT6EbiJpktfWWI7A.roa (raw, json)
Hash identifier: 7Guoo/LwZbo09V4grlOELyGmgYA302A/TF2N6vPQTYQ=
Subject key identifier: 1B:69:35:F9:BE:12:01:BC:91:4F:A1:1B:88:9A:64:B5:F5:96:23:B0
Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial: 018570E7451F47B516351D3320DDF8ABFD8A
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/G2k1-b4SAbyRT6EbiJpktfWWI7A.roa
Signing time: Mon 02 Jan 2023 05:14:42 +0000
ROA not before: Mon 02 Jan 2023 05:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202354
IP address blocks: 91.205.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:45:1f:47:b5:16:35:1d:33:20:dd:f8:ab:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Validity
Not Before: Jan 2 05:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b6935f9be1201bc914fa11b889a64b5f59623b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:3b:00:6f:1d:f8:6a:72:eb:8f:26:64:8d:
1a:7a:14:52:90:13:31:1e:35:7b:eb:b0:fc:b6:24:
b0:4e:9a:9f:ca:7b:3e:75:87:e6:30:06:aa:a5:f8:
f7:17:e5:13:11:e2:ed:02:27:7f:66:a6:f2:25:fd:
d3:a6:59:be:96:f9:b7:04:33:15:21:a3:30:2c:93:
bf:47:af:15:51:d3:ea:84:fa:69:ed:d9:1f:b1:00:
49:08:ea:f8:f6:4d:11:5a:e9:f0:87:7f:c5:9e:d0:
83:e3:89:a8:bb:ea:d7:7c:d1:09:f4:b0:4d:f1:e4:
b2:82:b1:bb:41:a9:db:20:42:dd:ac:16:58:c7:28:
9a:c1:e6:f7:d0:27:69:f9:b6:8b:8d:ee:a2:73:27:
3d:bc:09:0a:87:ca:d2:88:03:17:6a:70:66:2f:25:
bb:26:1e:3b:0c:d4:f9:93:14:be:fb:1a:0f:bf:62:
7a:1b:fc:3d:c1:e6:6f:a2:e1:3d:6a:01:00:a3:eb:
94:12:e8:51:06:83:77:f1:39:f4:21:f1:04:99:49:
53:44:b6:16:3c:78:ef:df:87:1a:8f:c6:87:cc:94:
43:7e:56:c5:3e:7f:dc:41:a2:16:fb:b1:c0:b3:77:
64:63:6d:6c:d0:9f:40:83:ca:82:17:16:d1:e8:97:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:69:35:F9:BE:12:01:BC:91:4F:A1:1B:88:9A:64:B5:F5:96:23:B0
X509v3 Authority Key Identifier:
keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/G2k1-b4SAbyRT6EbiJpktfWWI7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.42.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:52:50:d2:e4:97:f2:68:1a:fd:ff:71:c5:f7:e5:20:73:6a:
b7:13:d1:ae:64:7e:d3:e5:0e:3a:c7:28:81:ed:d5:d4:02:99:
b1:a2:b2:0b:cf:fb:70:c2:8d:e5:8d:27:c7:a6:ee:2e:29:ec:
66:5c:d1:59:bf:00:2b:1c:60:d0:d1:f2:27:d9:52:4e:bc:76:
eb:0b:b6:23:a6:92:4f:3e:f1:ee:20:d9:ea:1f:e7:00:de:a8:
bf:35:2b:00:0e:53:6b:5b:3e:55:a6:b3:32:ba:27:fa:15:8d:
51:19:d3:6e:4c:be:d3:f4:14:5f:ac:0c:ac:eb:ba:4a:cd:af:
e4:7b:6f:c9:10:02:66:79:02:67:9c:ae:6a:93:c7:f4:c3:71:
be:f2:1c:df:d0:6d:1b:53:8e:dc:ef:34:03:22:26:ce:40:a6:
7f:09:ab:d4:6b:ac:3b:6b:27:ff:e6:e8:f4:05:f4:e6:5e:c3:
bf:59:ff:0e:1c:b6:42:3a:8d:63:cd:a8:06:04:60:eb:09:5d:
5d:ee:23:60:48:85:20:3d:b6:a5:32:ee:35:f7:cf:87:97:74:
df:ab:65:8a:72:5b:3d:b3:89:35:fc:94:52:4e:47:7a:ec:01:
75:1a:5c:00:3b:99:9c:bf:ce:a5:64:2b:2a:2a:1c:0e:b0:0b:
c0:85:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:35 2024 by rpki-client on console-ams.rpki-client.org