Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/29iqdaoHAHbfeTAF5Y_cEEV3aQU.roa
File: 29iqdaoHAHbfeTAF5Y_cEEV3aQU.roa (raw, json)
Hash identifier: yfNak0Y8sSelRRGM20pdy3pE6QAQlYaxYO2U0s1UrnU=
Subject key identifier: DB:D8:AA:75:AA:07:00:76:DF:79:30:05:E5:8F:DC:10:45:77:69:05
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0187FACECD06A9CC53BB7CF84FE4482B1961
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/29iqdaoHAHbfeTAF5Y_cEEV3aQU.roa
Signing time: Mon 08 May 2023 10:01:09 +0000
ROA not before: Mon 08 May 2023 10:01:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 91.213.189.0/24 maxlen: 24
91.208.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:ce:cd:06:a9:cc:53:bb:7c:f8:4f:e4:48:2b:19:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 8 10:01:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd8aa75aa070076df793005e58fdc1045776905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:52:04:b7:5e:d5:fc:da:5c:3b:e7:25:71:
ae:45:59:8b:ea:e5:90:ac:b6:fc:f2:c4:93:89:52:
69:f2:8a:e4:91:04:28:0c:e8:98:8f:25:67:f4:a7:
bd:ea:4d:6d:ce:fa:d9:4b:8b:ae:9e:a8:da:b0:c5:
d7:72:80:9c:a4:7b:e3:b0:df:78:1f:7d:11:f2:da:
22:0b:25:33:44:7a:c6:f4:48:a4:03:32:03:a5:bd:
dc:3e:82:6e:c5:6b:47:c2:b2:09:d9:80:2e:46:be:
36:3d:08:9d:91:18:8f:82:33:e5:60:cd:86:aa:29:
c9:70:d6:2b:96:16:c1:f6:96:7e:de:71:44:9a:37:
e7:ee:a0:db:9b:36:c5:a6:07:11:c4:2d:9c:9e:3b:
43:24:77:90:62:62:64:ba:a2:09:72:db:bb:72:1e:
fb:fe:fa:7a:8b:db:84:0a:a6:7c:fc:3b:b4:ef:5e:
78:8b:e8:ff:cb:f1:60:68:e6:eb:df:76:f8:92:62:
32:61:2d:6c:ef:d0:45:bb:c3:e2:1f:11:a2:be:1c:
01:2b:d4:16:2b:6b:ef:d8:1e:20:90:5f:90:8e:58:
6b:bc:50:56:2a:cf:39:ea:02:80:39:4b:82:fa:ab:
72:c6:28:9d:d6:61:84:01:ab:63:a8:74:b5:15:2e:
b4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D8:AA:75:AA:07:00:76:DF:79:30:05:E5:8F:DC:10:45:77:69:05
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/29iqdaoHAHbfeTAF5Y_cEEV3aQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.109.0/24
91.213.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:06:c9:4e:ca:1b:28:19:86:46:f1:f5:65:f6:f4:02:1f:4d:
a5:a6:66:63:75:70:20:52:72:4b:6f:d9:a2:58:be:8a:db:e9:
3e:f4:6f:90:d7:f7:8a:bd:35:da:ed:0c:a0:91:8f:c3:7a:18:
ad:b8:05:71:9c:0a:ce:86:29:53:c1:9e:c4:e9:2b:8e:f6:60:
53:eb:0d:d4:82:04:0f:53:cb:f3:8c:60:d8:fd:2a:3e:9f:a4:
5f:fe:a0:ab:a4:df:ed:35:c2:8a:46:54:3e:85:14:92:15:36:
f0:dd:d9:e2:4f:78:26:d3:e5:da:ea:25:58:15:63:31:0b:c9:
0f:8b:c9:1c:de:c1:41:4a:44:f0:85:28:12:40:e8:29:4b:85:
c1:50:23:e7:da:8d:87:54:e5:07:74:27:b2:e9:8b:98:0c:51:
18:f7:a6:6e:f3:c6:b9:6b:31:35:42:b2:cf:2d:6e:72:74:bf:
a9:b7:db:71:ac:0d:c9:8b:db:ed:f9:d4:c4:98:c5:97:d0:25:
22:ea:1b:b3:e9:96:3a:20:04:0c:cf:ef:b8:82:9c:be:4c:9c:
85:15:e4:70:59:f3:f5:e1:90:6c:c3:9b:ba:ae:e5:f0:fc:0f:
da:09:45:f2:f0:61:ec:49:29:ff:04:ac:08:25:78:58:fb:7b:
57:04:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org