Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/S3TypNkkG8WCUqWhGfHL2ztKHPk.roa
File: S3TypNkkG8WCUqWhGfHL2ztKHPk.roa (raw, json)
Hash identifier: PkegaZLnGKL6UvLlBKGlp+mynaB5G6ambA4JboUfpNs=
Subject key identifier: 4B:74:F2:A4:D9:24:1B:C5:82:52:A5:A1:19:F1:CB:DB:3B:4A:1C:F9
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 018593FC94763FDEDEC768B9768E6790C6EF
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/S3TypNkkG8WCUqWhGfHL2ztKHPk.roa
Signing time: Mon 09 Jan 2023 00:44:41 +0000
ROA not before: Mon 09 Jan 2023 00:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.237.175.0/24 maxlen: 24
91.237.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:93:fc:94:76:3f:de:de:c7:68:b9:76:8e:67:90:c6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 9 00:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b74f2a4d9241bc58252a5a119f1cbdb3b4a1cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:74:35:75:1d:b0:b0:20:ec:0e:ed:8d:6f:
22:de:55:cf:d9:ab:e4:51:70:d1:a8:82:cb:6b:4d:
d9:2a:40:e2:0a:f3:08:fe:8c:19:61:31:6a:51:54:
4b:ef:5d:fb:47:a8:b2:70:1b:42:e7:74:bf:b1:e7:
4d:bb:6f:3b:95:b7:1f:e0:85:7b:14:d5:77:45:41:
26:a7:0f:d8:b8:25:c2:e5:f2:3e:f2:d1:9b:8a:ad:
d9:e0:a8:2e:07:84:5d:46:79:37:f7:fa:e7:a8:2f:
27:69:10:02:41:d5:e5:84:41:f9:0c:67:ea:61:49:
99:ec:7b:40:31:16:99:ea:d0:78:3f:08:bd:ce:1f:
38:2d:b4:c9:da:4d:7d:1b:ac:75:52:42:cc:2f:ca:
24:4e:22:78:28:5b:41:83:66:ac:87:d4:76:27:79:
77:db:7d:26:6f:54:c9:a6:5e:b7:e1:8a:c5:95:4b:
f2:fd:79:d6:12:b8:17:e5:0f:a7:3b:8e:da:a1:a6:
e7:de:a4:72:fd:22:c7:2d:01:32:7b:13:d5:a4:2d:
0b:91:fb:63:42:25:68:9c:5d:c7:72:81:af:8e:0b:
11:e6:7c:da:6d:ad:68:ff:95:d5:ff:09:93:d9:0c:
70:40:0c:cf:e9:63:5e:45:43:66:22:a2:3c:e4:8b:
75:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:F2:A4:D9:24:1B:C5:82:52:A5:A1:19:F1:CB:DB:3B:4A:1C:F9
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/S3TypNkkG8WCUqWhGfHL2ztKHPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.174.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:ee:1a:3e:0c:5e:35:4e:38:5f:c7:2d:24:40:00:52:88:b2:
d1:20:1e:e3:e2:5c:05:ff:5e:64:01:12:f1:fb:1c:08:1b:e9:
98:ef:e7:98:28:82:f3:c8:22:17:8d:d7:92:52:1d:f0:e9:69:
bf:cb:85:45:64:14:8a:f5:aa:aa:8f:f3:4e:db:78:b9:8c:4d:
04:2d:90:f0:88:ec:a1:9b:df:ab:21:01:a0:fd:31:03:fc:64:
0b:6b:91:73:ee:c4:23:32:8d:9b:74:bb:5e:b8:50:e5:6b:46:
db:c6:a0:19:1f:a2:43:f3:f1:44:d5:66:20:d2:41:40:0b:1a:
19:9e:1c:6d:ec:5a:45:5d:cc:c4:83:f6:5f:e3:0b:b3:1e:4d:
67:f7:00:cc:fa:cb:b5:ec:87:9c:e3:1d:57:ab:a3:f4:1f:4f:
9d:8a:97:34:04:cb:82:b2:8c:94:03:1c:77:52:24:90:cb:f0:
d9:a5:da:fa:65:8a:a4:e2:5f:99:05:60:18:fb:f7:fe:5a:c4:
f1:12:19:8f:f5:29:be:7a:2f:1b:89:06:bc:5e:49:6c:32:b0:
1d:04:9d:18:ac:bd:8c:b1:33:67:d0:dc:94:f9:d8:f2:6f:ee:
c8:09:48:63:ba:b1:38:9d:ab:9b:35:c6:5e:cd:23:c1:f7:0d:
24:ad:b6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org