Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/8BZWuOSUD52-4JM6ulfAcpNvTy8.roa
File: 8BZWuOSUD52-4JM6ulfAcpNvTy8.roa (raw, json)
Hash identifier: XLYzKaIqM3AUF1TOoE640hz6F6TMEm+nTadVhTOduS8=
Subject key identifier: F0:16:56:B8:E4:94:0F:9D:BE:E0:93:3A:BA:57:C0:72:93:6F:4F:2F
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D3BE2D1DCD8BA03F1B26E0DBE709A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/8BZWuOSUD52-4JM6ulfAcpNvTy8.roa
Signing time: Sun 01 Jan 2023 13:54:59 +0000
ROA not before: Sun 01 Jan 2023 13:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:3b:e2:d1:dc:d8:ba:03:f1:b2:6e:0d:be:70:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f01656b8e4940f9dbee0933aba57c072936f4f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:32:b6:fc:c5:bd:e6:b3:a1:6c:da:b0:ab:
c0:38:5d:a6:6c:65:82:d7:d0:69:b7:d5:2e:d5:d3:
4c:96:fa:46:16:21:72:a0:01:de:0d:ce:fd:0d:44:
08:b7:8d:f9:fd:37:a8:88:4e:58:cc:90:5d:28:07:
28:6d:07:cb:9a:6c:c3:32:e3:50:c8:98:f2:58:d0:
7c:96:90:a8:f0:3b:7b:d9:b2:0d:72:5f:5e:a2:b7:
c3:5a:a8:2c:41:cf:e5:91:a6:34:1b:59:87:56:e9:
ea:c3:64:12:68:fc:d3:90:49:69:40:ff:f0:ea:92:
e0:7d:29:50:07:fc:c6:29:bc:e9:a5:d5:25:b1:78:
bd:03:78:f9:a1:76:d7:c4:2b:df:8e:26:e8:6d:eb:
23:61:02:39:f5:e6:b8:6c:cb:a4:60:2f:e0:9d:28:
6a:45:f6:1e:4a:eb:6c:4f:8f:a9:46:1f:f5:a9:13:
29:04:d8:05:1f:0b:80:77:ab:85:5a:2e:65:10:55:
cf:2d:a1:1b:f5:31:71:88:f3:6a:67:19:4b:8c:1d:
8c:4b:d7:c1:c1:4f:54:e4:ad:3a:3d:73:73:5c:c9:
37:0f:5f:fc:aa:8b:68:ea:1a:51:20:d5:46:13:31:
71:4e:bb:ff:e8:4e:c3:bc:ad:48:78:8d:03:c3:1e:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:56:B8:E4:94:0F:9D:BE:E0:93:3A:BA:57:C0:72:93:6F:4F:2F
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/8BZWuOSUD52-4JM6ulfAcpNvTy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:78:f5:d5:da:4e:a1:bb:4c:03:af:f4:b8:7f:94:cc:53:e2:
f6:89:ef:23:f9:3e:fd:64:5e:ff:dd:2d:f0:61:c2:5b:d2:a3:
df:92:64:f9:6a:85:be:93:ac:4e:ad:40:9f:f8:18:fb:c2:34:
8d:5e:f2:4a:72:1c:45:ee:9d:2a:60:bd:d2:c4:d6:74:17:4f:
b2:1d:52:ff:0e:e0:92:f6:e6:35:11:b2:38:cc:b9:db:e8:24:
75:84:a9:a4:61:1b:f0:62:e8:35:34:32:98:24:46:e4:e9:5a:
25:96:8e:40:3c:41:d7:90:0f:a6:9c:65:c2:b2:75:cf:36:ff:
b5:bb:76:22:24:05:1d:4d:a3:45:07:2b:bb:e1:2a:34:ac:94:
2f:5b:e0:0d:a9:9a:f6:0a:53:e6:43:43:bd:1f:12:69:f1:a4:
24:d0:c0:97:7c:b5:1a:c0:02:df:78:96:22:43:13:08:98:28:
e8:fa:07:7f:c7:1d:35:78:1e:93:e7:f3:14:aa:f2:10:60:b7:
22:18:62:60:b2:54:b2:19:d0:64:19:aa:a3:af:d5:bc:b7:a4:
3a:3a:92:dd:12:1d:be:d7:86:3a:49:fe:d6:60:c8:b6:f5:6f:
53:ca:ec:74:f0:ea:f4:e7:9b:b6:b1:cf:77:9f:c1:20:9a:77:
3d:15:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org