Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/Y3xqPZqJvDseiARvYEw3yFSyjac.roa
File: Y3xqPZqJvDseiARvYEw3yFSyjac.roa (raw, json)
Hash identifier: +if75TOYQ3P+YoSwaKm7YYF79gsNfyNLC7kgxX1IkvM=
Subject key identifier: 63:7C:6A:3D:9A:89:BC:3B:1E:88:04:6F:60:4C:37:C8:54:B2:8D:A7
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 01856C780E3B6C953658208391A70B565683
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/Y3xqPZqJvDseiARvYEw3yFSyjac.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198677
IP address blocks: 91.238.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:0e:3b:6c:95:36:58:20:83:91:a7:0b:56:56:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=637c6a3d9a89bc3b1e88046f604c37c854b28da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:89:5d:ed:a3:6d:ee:e4:af:8a:14:d5:2d:
a1:48:cc:4d:1d:1c:8a:69:d0:61:58:08:ad:b3:ec:
59:44:3c:96:9a:33:1b:53:72:d7:91:b4:dc:52:1e:
fa:85:6c:73:17:d7:33:2b:1a:d7:62:77:9a:db:7d:
37:f4:8d:a8:8b:54:01:45:ab:0a:63:07:e1:17:ca:
7f:85:68:6b:1e:33:a0:d9:f2:6c:17:91:90:73:08:
14:83:72:7b:83:2f:ce:c8:1d:f4:ee:52:8c:00:1b:
a9:9d:04:14:d2:66:a5:be:64:20:fc:92:fc:73:a8:
ab:81:79:a9:a6:98:a0:48:17:ef:cb:eb:36:14:ac:
6d:d6:f3:09:92:5d:6e:80:3e:76:8f:d2:cd:9d:40:
a1:5b:be:e8:e3:09:03:62:8a:51:16:d2:9f:a0:69:
d5:d4:4b:4c:46:35:9b:5e:82:83:05:43:d6:41:91:
ab:4d:f1:fd:be:f3:11:bc:10:90:66:fd:2d:bf:ff:
67:da:ad:b3:b4:01:d2:d4:79:5c:c0:ef:d4:00:f5:
99:a7:bf:b9:bf:e3:f8:25:9c:f4:4d:e5:7d:49:3e:
d3:0d:cb:49:6c:18:36:f8:c0:a4:0e:82:e6:8c:88:
7f:76:f0:4d:2f:f2:69:34:86:3e:64:87:e9:07:64:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7C:6A:3D:9A:89:BC:3B:1E:88:04:6F:60:4C:37:C8:54:B2:8D:A7
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/Y3xqPZqJvDseiARvYEw3yFSyjac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.122.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ff:56:d1:db:b8:de:74:4a:69:4b:1e:9d:25:ca:4d:1a:1d:
8e:e9:49:be:b7:5e:56:ad:b8:ad:ad:e5:f6:ed:fd:7b:93:1a:
af:98:e9:e4:d2:c9:54:11:01:01:b2:8b:ca:84:02:e7:28:47:
bc:32:2e:79:82:3d:43:d1:d3:ae:71:51:c4:0c:1f:ea:50:19:
8d:d0:cd:99:04:60:8d:4e:9a:33:29:76:84:27:c5:08:cd:03:
46:d3:80:72:89:9d:f3:0d:c6:1b:06:50:1f:03:fb:03:d8:6b:
cf:85:f3:b8:a9:0d:49:bc:b3:23:e7:f5:a1:92:2d:d3:4e:d6:
b9:63:73:3e:03:bb:72:34:bd:42:8d:4a:ca:df:e6:d0:b2:9e:
93:44:9b:33:35:58:ab:34:2d:a1:98:13:ab:3b:3c:ba:fb:4c:
4b:2f:7c:4a:92:1a:e6:4c:f0:36:8c:6f:e0:6b:7f:1a:73:db:
a2:93:d1:60:32:0d:44:c1:76:62:8a:0f:d8:f2:0a:ae:5d:8c:
8c:f5:2c:e4:5a:62:8e:17:1a:88:5b:e0:73:8c:fc:3c:dd:fc:
91:b3:84:93:3b:32:bc:de:92:6f:df:ee:b9:0c:f5:2c:ec:de:
c3:a5:b1:91:73:5f:9f:a0:71:59:ab:c6:33:d4:e4:00:aa:b2:
27:00:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:15 2024 by rpki-client on console-fra.rpki-client.org