Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6fqHre55s5ZNYD-evDrBop5aL5w.roa
File: 6fqHre55s5ZNYD-evDrBop5aL5w.roa (raw, json)
Hash identifier: JcduRB4rChfhWLLy/OiS5N4cl1f6J8tOosd2ociMpMw=
Subject key identifier: E9:FA:87:AD:EE:79:B3:96:4D:60:3F:9E:BC:3A:C1:A2:9E:5A:2F:9C
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01856ED4C3F69CF82AD538F9147281239C33
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6fqHre55s5ZNYD-evDrBop5aL5w.roa
Signing time: Sun 01 Jan 2023 19:35:15 +0000
ROA not before: Sun 01 Jan 2023 19:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.220.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c3:f6:9c:f8:2a:d5:38:f9:14:72:81:23:9c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jan 1 19:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9fa87adee79b3964d603f9ebc3ac1a29e5a2f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:74:51:ce:7c:b5:24:f3:65:af:a7:db:ac:
7c:15:51:c4:d7:31:31:12:9f:b5:74:f9:7f:53:07:
28:6e:05:bb:36:4e:11:ad:30:34:52:81:c6:80:76:
60:5f:e6:d1:d0:ef:f0:a2:39:76:50:00:59:4e:88:
96:a0:16:b2:27:90:76:6c:0e:96:46:32:a2:79:52:
31:dd:c3:01:6e:9a:90:5b:5b:87:61:79:e7:3e:78:
6f:50:61:45:35:70:13:19:6a:9b:2f:34:f3:c9:8f:
a5:44:f3:af:c7:b6:05:c0:05:75:c4:cd:01:ff:73:
30:24:8f:01:50:e1:ca:6b:f9:69:38:a2:9d:0a:2c:
7e:57:9e:f7:d9:78:ab:a7:42:d4:55:93:a0:a6:e9:
16:f2:93:d9:bc:8d:b8:bc:94:e5:c7:ef:4e:da:28:
5e:8d:43:59:81:68:5e:57:f1:ef:74:3e:c1:07:30:
91:04:66:38:13:a9:28:38:8e:44:44:27:19:96:47:
40:2f:ee:b0:f1:99:b4:46:f2:e2:29:24:70:88:b8:
18:3b:87:39:fe:a7:ca:2e:33:bb:be:de:e1:ca:20:
a5:64:26:d8:83:84:a3:c1:d9:d3:8c:4e:91:35:b2:
c2:77:0f:82:e1:be:d8:46:2d:e4:c8:18:94:b3:c5:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:87:AD:EE:79:B3:96:4D:60:3F:9E:BC:3A:C1:A2:9E:5A:2F:9C
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/6fqHre55s5ZNYD-evDrBop5aL5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:e6:c5:d1:fe:f6:68:91:83:7f:a7:8d:5d:1f:4e:30:d9:d2:
98:9e:15:f6:23:c2:88:e3:1f:31:b6:7c:ce:04:93:c5:1f:06:
38:c3:00:07:79:d2:0e:67:e7:62:f9:08:f8:22:a8:02:c8:3b:
95:b2:26:0c:18:f9:5b:39:02:04:b2:43:37:fd:b9:63:be:bf:
07:dc:5f:0f:b0:2d:61:40:3f:30:e9:0f:0d:ab:3d:c6:6f:c3:
4b:cd:fd:9f:3f:ef:e9:76:eb:f5:fb:d9:ad:fa:55:28:89:cf:
16:df:75:fa:0a:92:2a:bd:45:12:e7:d4:a8:1b:e1:3f:a4:76:
21:a5:22:5b:60:bc:6c:ff:83:cd:52:9a:6b:17:fe:97:44:31:
43:40:29:59:b8:89:c7:4a:80:89:a8:42:75:01:2e:85:d0:78:
df:b8:14:69:88:7f:db:9e:5b:6f:0c:25:ef:d1:80:58:61:54:
b7:09:1d:d7:3e:b4:2d:f3:c3:6f:ac:bd:46:be:a2:7a:04:a6:
96:49:63:d2:25:b5:f0:3f:48:65:f6:73:15:24:d4:60:52:b2:
14:a0:54:ff:fb:88:63:bc:e8:b5:23:aa:37:79:39:55:3a:d9:
ee:5e:2e:22:13:99:d2:68:6d:9d:f5:ba:6f:e9:8f:7a:0c:55:
d3:b6:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:28 2023 by rpki-client on console-ams.rpki-client.org