Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FpY1dbBSgnIJYT8c_NRvst4cAHw.roa
File: FpY1dbBSgnIJYT8c_NRvst4cAHw.roa (raw, json)
Hash identifier: bvvvvtad7BYjptv8OW0s93KD8qPMijEIuqCX2yZFMr0=
Subject key identifier: 16:96:35:75:B0:52:82:72:09:61:3F:1C:FC:D4:6F:B2:DE:1C:00:7C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0187C3E73319D2E904B8A35692D8930F89E3
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FpY1dbBSgnIJYT8c_NRvst4cAHw.roa
Signing time: Thu 27 Apr 2023 18:08:41 +0000
ROA not before: Thu 27 Apr 2023 18:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 91.208.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:e7:33:19:d2:e9:04:b8:a3:56:92:d8:93:0f:89:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Apr 27 18:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16963575b052827209613f1cfcd46fb2de1c007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:27:03:09:e7:93:fc:56:44:cc:9a:dc:1b:
38:47:82:e3:29:15:4b:8d:3e:5a:f3:ac:b0:23:d4:
52:9b:f6:09:b6:6b:c2:91:b5:5a:bc:91:fe:25:bd:
ea:73:46:3a:03:b7:6f:f3:ed:43:34:09:51:28:44:
22:2e:9d:24:35:9c:92:03:ca:b4:36:df:f5:f6:82:
a8:4e:06:2e:e2:73:47:ee:88:7f:fe:c6:68:2c:e6:
c5:88:d9:50:6c:d2:82:ce:a4:44:af:43:14:8f:b5:
7c:3b:eb:d7:f7:6a:40:53:15:92:25:cd:af:3c:55:
2b:bf:d4:69:e5:c5:90:80:8c:7e:69:95:4f:60:ff:
5b:4a:f8:92:35:b5:c3:1e:eb:66:ea:af:33:0f:21:
b0:fe:4c:28:58:ea:9a:26:a3:75:cc:c7:05:a8:6b:
73:3e:57:e2:5c:28:1c:37:58:58:e0:c6:06:ce:8a:
61:cb:0b:69:c2:ce:da:f5:7a:7f:39:c7:c7:fe:4b:
5c:6b:82:1f:aa:b3:d5:e6:f2:29:aa:72:62:4e:ad:
5e:b2:b5:4e:fd:e9:32:ee:bf:d0:a4:47:6c:33:6c:
6e:4f:a5:82:ad:a8:ff:87:67:3f:77:9e:f3:11:c0:
00:eb:b1:95:21:c0:1c:5f:c6:8c:60:43:5f:9d:d7:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:35:75:B0:52:82:72:09:61:3F:1C:FC:D4:6F:B2:DE:1C:00:7C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FpY1dbBSgnIJYT8c_NRvst4cAHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d8:b9:80:e4:18:da:4e:7b:dd:b2:2a:14:f9:7d:75:77:a3:
a0:f8:2a:78:a6:07:81:85:e3:60:bb:35:e1:c8:e2:09:fc:e6:
6d:0d:8a:a4:85:f7:da:08:83:cc:2c:7d:b5:59:b5:7d:f3:d6:
94:01:7f:c7:f1:95:44:2a:77:b8:11:ea:b1:80:a8:67:03:c6:
83:b5:1f:fa:41:89:b6:2c:21:16:d4:57:59:05:fa:51:14:5d:
1f:86:83:9d:81:bf:fc:0a:74:56:46:72:67:87:1b:cd:c2:8d:
e6:24:c9:b7:ec:5f:d5:24:9f:a4:4a:2f:09:a6:e7:b4:8a:0c:
0f:75:c4:56:5c:37:da:0f:14:61:5d:a6:70:36:42:8c:6a:d3:
d9:8b:e8:05:4f:5a:e4:2f:f2:a2:dd:ec:67:30:16:9b:09:29:
59:d2:c6:cf:7d:f1:64:e6:2e:10:ea:e8:c1:1d:06:bf:48:90:
d9:15:80:46:f2:72:32:53:12:93:b6:6a:3d:fb:f5:b0:fa:16:
b1:44:67:a5:0b:a5:24:e2:38:07:57:54:f1:f4:7b:38:53:84:
e5:ee:2a:54:2a:a1:41:9d:7c:4c:b6:f2:d9:03:9d:8f:aa:b8:
5f:62:61:f4:fd:ea:c1:e6:4c:36:86:17:2c:c2:ba:a3:eb:07:
51:18:53:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org