Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ATtw3vb5TMA9ofl7RIDxIHADj-I.roa
File: ATtw3vb5TMA9ofl7RIDxIHADj-I.roa (raw, json)
Hash identifier: bBJB3J+C2CkIqXH4Kb06G4vMFse3GccJuiQRKbUj/0w=
Subject key identifier: 01:3B:70:DE:F6:F9:4C:C0:3D:A1:F9:7B:44:80:F1:20:70:03:8F:E2
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01857C094CB92A05323B2378C35C642E3D8D
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ATtw3vb5TMA9ofl7RIDxIHADj-I.roa
Signing time: Wed 04 Jan 2023 09:07:42 +0000
ROA not before: Wed 04 Jan 2023 09:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 91.213.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:09:4c:b9:2a:05:32:3b:23:78:c3:5c:64:2e:3d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 4 09:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=013b70def6f94cc03da1f97b4480f12070038fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:70:18:e3:8f:5a:ef:ee:7d:c8:9b:d2:7b:
a3:32:f8:de:de:da:91:ff:25:d3:32:f8:7f:52:ef:
7b:a1:55:de:5b:37:a3:b5:29:4a:c7:75:cd:8c:64:
d1:af:79:21:13:79:34:4d:22:31:44:9d:5c:c1:3d:
99:8c:32:29:49:30:e6:7b:70:24:8c:3b:e8:2e:da:
5c:b1:96:75:a6:57:e3:f9:88:33:07:cc:57:bc:37:
c6:8d:a4:44:3e:e1:09:8d:80:ab:cd:b2:12:da:80:
9a:d6:71:25:f3:42:88:93:48:49:6a:3f:df:76:8f:
62:e5:92:0d:55:3b:2c:0d:d7:c4:e2:48:0c:7d:ab:
05:21:7f:65:86:17:77:0d:75:07:d6:2a:6b:23:3b:
4d:19:73:73:e5:14:94:b3:f7:4d:4b:cc:f8:4f:1b:
22:5e:11:b9:67:cf:64:04:5e:5e:d7:b7:91:b8:93:
be:e0:91:82:bb:b3:e7:a3:45:a3:b3:3d:0a:59:91:
06:6e:7b:5d:7c:1b:6c:a6:d4:7b:7b:4b:eb:8d:fe:
f6:41:c5:7f:63:1e:77:69:ec:a8:ec:ff:30:99:32:
97:e0:e9:d7:32:a0:3d:e6:79:a9:ba:67:ce:9c:0e:
36:4a:fb:f7:45:46:78:89:7b:fc:54:e2:b7:57:1e:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:70:DE:F6:F9:4C:C0:3D:A1:F9:7B:44:80:F1:20:70:03:8F:E2
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ATtw3vb5TMA9ofl7RIDxIHADj-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3e:ea:f8:99:9c:20:77:02:ea:3c:3b:ce:09:4c:30:63:b9:
c2:39:9e:4f:75:1c:ad:c7:b3:5f:11:58:d4:65:22:21:ee:db:
fd:33:ef:9d:a5:10:62:f4:c3:07:02:56:40:9a:0f:91:65:3c:
7d:54:63:40:5e:28:e1:60:da:fb:d1:41:eb:9c:73:dc:4b:8b:
1a:ce:80:f3:e6:62:5a:24:54:47:eb:53:0e:16:fc:46:69:b2:
3f:5e:5e:13:11:0d:6e:bf:78:ba:72:43:57:f7:2e:80:32:b5:
73:e5:ab:cf:29:50:ae:ac:1b:f9:e5:57:05:0e:d9:ca:08:82:
0d:b2:1f:e9:a1:13:13:8a:c2:1c:11:d8:e4:1c:90:d3:99:25:
f0:e0:b2:5c:0e:1b:fe:7d:b2:fa:a6:d4:eb:de:53:e2:0d:14:
b6:e6:16:7e:3b:7e:30:c4:e3:5a:bc:3d:ee:15:b9:d4:88:b3:
34:60:cd:53:b6:cf:e3:e1:2b:11:8e:82:ba:d0:5a:16:62:fe:
6b:df:de:d9:5e:29:73:dd:11:a2:53:65:3c:2a:c8:bc:91:88:
4d:58:c8:96:91:0a:55:51:48:c6:0a:35:f2:74:1a:1c:ce:be:
bb:45:ba:ac:af:43:62:22:3c:24:5c:ab:52:d3:a7:e5:0a:de:
b7:10:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org