Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/122QT-yr01W8uFRmLRqiLX3BfVQ.roa
File: 122QT-yr01W8uFRmLRqiLX3BfVQ.roa (raw, json)
Hash identifier: d6di6mMSrMlScEK0D/8PXfWKif2Iif9EAUd61A3Dhow=
Subject key identifier: D7:6D:90:4F:EC:AB:D3:55:BC:B8:54:66:2D:1A:A2:2D:7D:C1:7D:54
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9E2E94CFDFB6F16F4BDF40ADAEB8
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/122QT-yr01W8uFRmLRqiLX3BfVQ.roa
Signing time: Fri 12 May 2023 06:00:10 +0000
ROA not before: Fri 12 May 2023 06:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 91.208.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9e:2e:94:cf:df:b6:f1:6f:4b:df:40:ad:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d76d904fecabd355bcb854662d1aa22d7dc17d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:13:1c:c7:c1:08:bf:79:d2:f4:0f:07:90:
74:52:61:65:5a:98:9a:d0:c5:0f:a3:a3:c5:b4:2b:
2c:17:e6:32:95:de:58:95:67:6f:44:57:6e:0e:7f:
be:5b:b0:22:30:d9:f2:44:0a:5f:a6:62:49:84:13:
1f:6b:ad:01:cb:f1:f3:19:05:28:6d:94:b9:45:81:
05:4d:3a:75:be:33:de:71:e8:2e:6b:93:e6:8b:b2:
87:45:4c:63:f3:b1:7f:f4:37:06:d8:e3:23:7b:a1:
9d:63:79:fc:40:f8:c3:07:a1:b4:26:cc:f2:21:4a:
58:79:f7:40:0c:76:2a:31:c9:98:9c:c2:28:f5:70:
06:ab:65:2e:b1:21:e5:5e:c5:2e:cf:97:39:c7:e7:
22:c8:3d:bd:60:b6:15:5a:b9:5c:01:ac:ee:fd:08:
66:2a:81:f2:ec:c8:01:8e:45:d3:31:84:58:a7:9d:
76:6a:20:fe:34:e1:c2:9c:3c:c2:90:6a:c0:bf:9f:
6c:9b:28:9d:97:5e:2b:50:dc:7b:f2:57:20:7b:5b:
e0:e1:e8:10:31:27:4d:c5:d0:ce:5b:29:9a:a2:8c:
88:54:58:a5:d4:26:b6:c6:11:3d:48:48:e0:25:0f:
73:0b:c6:a3:d7:fd:42:1b:ea:24:4c:dc:46:c0:21:
4d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:90:4F:EC:AB:D3:55:BC:B8:54:66:2D:1A:A2:2D:7D:C1:7D:54
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/122QT-yr01W8uFRmLRqiLX3BfVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.69.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5f:60:ce:60:33:36:84:7d:20:dd:9f:20:4a:17:38:46:c3:
3f:e0:01:f1:26:d7:e2:d3:50:c1:a2:b5:46:ad:a4:67:05:f0:
37:25:cb:7b:1a:a1:c6:c3:46:97:70:d0:64:e9:88:96:ac:cc:
4e:7d:ee:b8:a3:2d:07:a5:21:ad:4d:ef:00:35:2a:41:48:3c:
e4:1d:b8:3a:f8:a5:1b:57:fe:6d:90:04:b1:71:a3:f0:ec:fb:
5a:e5:71:1e:2d:59:de:5a:51:ff:ed:b2:8e:cb:0c:8f:ee:76:
e2:8c:89:3c:14:07:e4:1e:63:c2:77:3b:56:31:e2:bf:be:99:
57:56:99:ae:c8:84:b6:62:71:30:1b:25:ea:59:04:96:e3:87:
11:10:4b:26:00:b2:74:36:b7:f7:98:4a:79:c2:04:f3:70:52:
11:68:76:5b:a8:f3:4d:0f:d9:22:88:ce:11:06:80:9b:32:5a:
21:df:12:10:e4:6b:cd:dc:90:eb:16:dc:33:62:52:b2:3b:0e:
95:8d:5e:5b:c4:18:10:79:ae:ee:61:5f:0f:55:b0:30:e8:8c:
0f:04:85:f8:95:a9:98:b4:88:46:f2:b2:1b:6f:53:db:71:73:
d2:93:34:48:99:43:6a:87:62:5e:5d:a0:06:59:e0:07:87:6e:
d9:e6:1e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org