Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/kPxUG9UV_xzQG_K9mm6UANBty34.roa
File: kPxUG9UV_xzQG_K9mm6UANBty34.roa (raw, json)
Hash identifier: emEZIVjEHYmNq58yCJFPsfQiYSRNkAYTy+AWN57tits=
Subject key identifier: 90:FC:54:1B:D5:15:FF:1C:D0:1B:F2:BD:9A:6E:94:00:D0:6D:CB:7E
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 0189981CBC86D3B01D9E33BA0FCF264233D9
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/kPxUG9UV_xzQG_K9mm6UANBty34.roa
Signing time: Thu 27 Jul 2023 16:09:27 +0000
ROA not before: Thu 27 Jul 2023 16:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57570
IP address blocks: 91.232.230.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:1c:bc:86:d3:b0:1d:9e:33:ba:0f:cf:26:42:33:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: Jul 27 16:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90fc541bd515ff1cd01bf2bd9a6e9400d06dcb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:13:bf:3c:62:4d:db:71:a1:38:e8:58:0c:
2c:57:d0:6d:f7:f9:c6:31:79:a6:db:07:fd:db:1c:
b1:50:76:af:64:50:92:f9:88:49:15:ac:7c:a6:ba:
1a:85:47:7e:d0:bc:cf:a2:53:e5:6d:14:bd:e2:cf:
76:5f:d7:d4:2d:f9:68:3e:b7:ec:a2:0a:5e:61:08:
e9:88:bb:70:06:39:86:62:d6:9c:8d:0c:e5:3c:82:
ca:05:2b:48:18:c3:b0:89:63:da:8a:97:b8:d7:f4:
3a:21:b9:57:f1:dc:6a:c3:9f:10:fe:6d:cd:c5:e1:
cb:79:f8:da:16:a2:d6:e2:6f:a7:1f:84:a1:8f:77:
4c:96:87:35:b5:92:09:ea:90:65:12:6a:74:5e:3b:
ad:8c:d4:fe:78:d6:3c:f0:44:16:2e:42:01:d1:4c:
e0:5a:fe:e4:3f:7a:44:78:72:06:39:fe:39:68:ed:
be:01:98:d4:b3:ad:ea:1c:29:da:f6:a8:51:f9:35:
72:a0:f9:19:a1:0e:27:7a:d2:59:82:39:ae:76:55:
0a:c8:3f:3f:fb:b2:7c:f2:5a:64:ed:90:7b:a2:09:
45:68:47:2d:02:cc:b3:1f:d8:b7:22:cd:8f:21:99:
46:0b:6e:b3:6f:e1:ce:76:54:c5:d2:52:a9:42:d5:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FC:54:1B:D5:15:FF:1C:D0:1B:F2:BD:9A:6E:94:00:D0:6D:CB:7E
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/kPxUG9UV_xzQG_K9mm6UANBty34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.230.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d2:15:59:2d:1e:31:e9:84:ed:e2:6a:51:e2:00:e1:67:fb:
ba:25:3c:28:47:a5:13:1d:3b:6d:2c:2b:9b:b9:fa:55:85:2c:
c7:d0:46:8c:58:18:12:7a:53:fc:3d:39:17:51:72:b5:f9:8c:
d0:ff:1d:02:0b:f1:29:4a:79:03:7f:02:41:ce:a8:11:0a:07:
51:d8:16:6b:f2:6d:dc:0e:7b:e9:8d:3a:13:d7:0d:56:de:91:
f0:a1:9f:23:2f:05:b1:c0:07:f0:24:d4:d6:02:10:7d:e8:6b:
e6:b2:9f:4b:17:d5:1b:99:f4:37:0a:43:86:09:d0:c9:94:34:
c5:ce:f9:f7:db:5f:76:40:28:df:77:45:fe:0e:c4:8b:77:4b:
bf:c8:46:33:84:aa:51:7d:65:f1:0d:14:86:e9:a0:8d:fe:2a:
91:56:da:15:71:e8:4e:7a:e5:91:2c:4c:cd:fc:b0:3d:99:b8:
b4:a0:58:a2:69:9f:76:89:15:57:c8:9b:be:c3:65:bd:4b:ee:
c5:30:4b:36:fa:eb:fc:d0:e5:2c:fe:a4:b0:6e:16:82:4f:dc:
46:75:4f:b1:36:09:da:fa:4e:ec:73:28:24:44:15:22:36:ac:
85:75:22:11:6b:a2:76:f8:ad:f6:47:68:36:f2:12:12:83:b5:
c4:77:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 13:11:04 2023 by rpki-client on console-ams.rpki-client.org