Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/MsjQbbYxldFCaILLfdBj_BFpQfg.roa
File: MsjQbbYxldFCaILLfdBj_BFpQfg.roa (raw, json)
Hash identifier: UbW4/zROuAoBkV3EQEbSAhHff5Tc4vdUX61G0Y4Lf2E=
Subject key identifier: 32:C8:D0:6D:B6:31:95:D1:42:68:82:CB:7D:D0:63:FC:11:69:41:F8
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 0185724C89291A8DA22D6041EED0BE3C1355
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/MsjQbbYxldFCaILLfdBj_BFpQfg.roa
Signing time: Mon 02 Jan 2023 11:44:56 +0000
ROA not before: Mon 02 Jan 2023 11:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12670
IP address blocks: 91.234.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:89:29:1a:8d:a2:2d:60:41:ee:d0:be:3c:13:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Jan 2 11:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32c8d06db63195d1426882cb7dd063fc116941f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:24:85:1b:e3:16:f7:5d:40:66:82:3f:a3:
ad:ef:81:d1:2c:ca:37:9d:11:f1:bf:ab:f9:48:57:
7b:7c:50:61:de:94:cb:60:a6:f2:e4:64:0b:9b:99:
7e:c4:89:00:73:8a:0d:ed:33:17:e8:53:64:07:79:
d3:85:f3:5d:73:f9:4f:1c:ac:27:54:95:1b:b5:2c:
84:cb:6d:52:5a:bf:5a:11:20:ee:b6:ed:8b:74:77:
54:7b:13:7e:e3:ed:e8:d2:53:72:3c:ce:2b:c1:58:
96:3b:f0:0a:08:dc:5c:24:ef:c8:29:f7:2a:15:1f:
70:df:83:d7:a6:f9:66:46:c8:85:85:02:88:23:7a:
65:79:d8:be:05:74:7f:0e:1f:9c:3d:08:c4:73:7d:
9d:bb:69:a4:fd:94:fe:12:74:c6:37:bc:f6:ce:97:
c2:f0:be:54:ac:fe:fa:4b:c9:9c:22:c0:40:c3:ed:
20:7d:d1:08:67:3b:e4:21:3e:38:aa:0d:b5:85:b9:
66:d7:f2:63:dc:a0:ce:a1:e2:e4:8e:7c:e6:62:4b:
c4:2c:ed:15:06:ba:76:c4:41:dc:18:00:b9:27:78:
28:bd:e1:9e:3d:9a:d4:c2:71:96:ff:5f:0d:00:65:
81:28:2d:32:b2:99:ed:4c:71:1a:e2:e2:48:ea:b3:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:D0:6D:B6:31:95:D1:42:68:82:CB:7D:D0:63:FC:11:69:41:F8
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/MsjQbbYxldFCaILLfdBj_BFpQfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
41:10:d5:c9:07:49:4b:54:05:86:28:59:68:ce:97:ca:da:49:
7b:9c:85:6c:dc:0a:92:6a:03:da:0b:87:b6:cb:cd:b2:c5:46:
54:d7:03:4b:72:87:ae:37:a2:c7:fa:e1:25:ff:1a:39:bc:4b:
66:4f:95:0d:4b:c0:cf:8e:b5:2c:cc:b3:16:cc:a8:00:09:c7:
64:ec:14:0f:af:a4:1c:cf:db:d7:c1:67:52:73:3e:93:8a:60:
03:92:60:31:85:a9:98:45:6f:f4:84:d6:09:1d:bd:cb:d2:08:
84:a8:94:e5:2c:a3:27:2f:2c:e9:03:77:22:cc:2d:1c:2c:56:
24:87:62:d3:72:79:0b:43:28:7c:38:32:d3:55:ef:f0:75:0e:
27:2c:c5:fc:79:78:0f:72:e2:1c:bf:4c:be:7e:c7:99:7c:16:
3a:15:83:e0:ee:bf:91:4d:da:28:67:4e:b0:e2:9c:a3:ec:80:
9e:0f:fc:20:c2:89:9a:7d:7d:01:ad:45:7d:78:c9:a2:d8:12:
b7:a1:97:06:d5:db:53:38:f0:a7:df:9b:f5:c0:e6:76:f6:70:
14:e6:f6:3c:2f:00:bd:00:ac:19:49:cb:64:98:1f:29:8f:1a:
12:93:26:d8:aa:78:7b:45:2d:7c:60:e3:3e:8f:c9:9a:6f:38:
41:6c:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:08 2024 by rpki-client on console-ams.rpki-client.org