Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CFcxSNl2JibRaz8MAiU5Y0kKn-s.roa
File: CFcxSNl2JibRaz8MAiU5Y0kKn-s.roa (raw, json)
Hash identifier: EvyBQR0V7LcxBVNR8cQ6Sd2OvpA8y1M26WnrIjferD4=
Subject key identifier: 08:57:31:48:D9:76:26:26:D1:6B:3F:0C:02:25:39:63:49:0A:9F:EB
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4CBE345184AACCF63E04828E0E8C4
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CFcxSNl2JibRaz8MAiU5Y0kKn-s.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56989
IP address blocks: 91.109.160.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cb:e3:45:18:4a:ac:cf:63:e0:48:28:e0:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08573148d9762626d16b3f0c02253963490a9feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:a6:e2:f8:dd:ef:e7:34:59:cd:06:eb:7e:
a9:78:a9:bd:c0:85:39:4b:c8:d9:b5:04:c0:27:f2:
fb:af:7a:c7:a5:81:e3:34:d3:20:8a:f7:bd:ba:c0:
89:db:52:5e:c1:7f:05:01:fa:64:a4:f5:bc:46:77:
91:b3:71:2b:a2:40:77:ed:e2:95:a6:d2:b4:4e:02:
bb:c5:52:9a:73:12:83:0f:0e:66:ad:88:53:98:2e:
b8:a2:61:d6:fe:13:26:8b:2d:da:16:2c:e2:8a:72:
f5:9b:3f:35:8c:af:21:52:fc:98:33:69:ea:91:46:
5d:2f:0e:be:1d:7b:c3:40:ea:bc:40:c8:15:f3:65:
74:e3:e6:ce:57:23:64:00:f7:3e:7b:35:2c:36:15:
80:68:cd:b2:4b:0b:2d:b4:72:b7:14:51:a5:6f:c6:
52:a0:6c:99:40:cd:e5:19:5b:27:45:64:2e:81:7c:
08:85:3e:2d:4e:e7:17:c4:eb:27:fb:94:24:a2:74:
d5:1b:ae:5c:3a:22:6b:3b:62:db:72:dd:3c:91:05:
1d:b9:38:91:2f:40:73:1d:cf:e3:02:84:64:74:63:
52:b9:91:69:0d:64:1d:93:12:77:d5:5e:d5:a5:66:
ba:42:e9:20:e4:ff:b6:01:34:72:b5:d0:a1:9a:ae:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:57:31:48:D9:76:26:26:D1:6B:3F:0C:02:25:39:63:49:0A:9F:EB
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CFcxSNl2JibRaz8MAiU5Y0kKn-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.160.0/21
Signature Algorithm: sha256WithRSAEncryption
41:a9:20:82:8b:18:b9:85:0a:30:a4:a1:1c:59:e7:01:d2:97:
60:32:b4:3d:e9:38:ed:29:4e:f9:94:66:8c:4e:ab:a8:91:e0:
b9:e4:54:68:c4:6c:64:9a:5c:21:ab:55:7c:49:92:8e:48:81:
95:69:d6:94:bc:39:bc:6f:51:3b:6e:1f:93:1b:d7:3d:2f:79:
02:48:ba:d0:b5:a5:7d:cf:8f:7c:4c:e8:d2:85:1d:e4:54:e4:
45:ff:4f:07:50:13:3e:eb:9b:9c:83:45:26:4a:ad:a0:be:5e:
5c:48:5a:11:67:df:66:7b:49:76:5a:c0:75:f3:1c:7f:2d:9c:
65:64:be:bf:d3:6e:05:e6:28:cd:bc:e2:9d:6c:a2:72:a9:e5:
12:17:82:66:cf:66:8f:11:59:62:01:65:40:3c:94:c4:20:18:
a4:28:2a:48:a5:8d:d3:f0:da:23:a9:b2:05:3b:e6:70:67:6a:
a5:df:7b:9c:ac:19:48:dc:42:85:57:64:40:38:45:8d:76:78:
16:8d:fb:78:0a:0e:d9:7d:b9:de:df:45:93:62:d4:06:81:a7:
b5:09:9c:b9:1a:c3:8b:fb:4a:a2:51:72:99:91:8d:57:ea:ca:
5e:11:75:ed:19:70:e4:5c:da:83:69:d6:0d:b4:35:3a:26:ea:
34:26:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org