Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/JanG-L6zNnAsVJZeVdbCuyQzGUY.roa
File: JanG-L6zNnAsVJZeVdbCuyQzGUY.roa (raw, json)
Hash identifier: J5HwjKHjm3B2J+Y4tE0uLZqge6740hBfAo9/ZsORQVs=
Subject key identifier: 25:A9:C6:F8:BE:B3:36:70:2C:54:96:5E:55:D6:C2:BB:24:33:19:46
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B989B38BF4E044BAECA3EC3B89D61
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/JanG-L6zNnAsVJZeVdbCuyQzGUY.roa
Signing time: Fri 12 May 2023 06:00:09 +0000
ROA not before: Fri 12 May 2023 06:00:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 91.213.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:98:9b:38:bf:4e:04:4b:ae:ca:3e:c3:b8:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25a9c6f8beb336702c54965e55d6c2bb24331946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:b0:8e:13:fe:32:3c:2f:d6:ec:9a:cc:12:
32:cc:18:19:ce:36:49:50:86:13:cb:2f:ab:14:74:
87:29:32:7e:76:7d:a2:2e:d7:67:6a:57:a3:9a:ba:
ed:89:fc:1f:3f:8a:c1:b0:9f:ee:58:03:71:c5:2e:
72:09:a8:6c:b7:83:8d:e1:2b:63:f6:47:b9:21:f1:
4b:18:8f:9b:54:a3:e8:96:e1:45:e7:82:54:fa:35:
c7:f9:39:26:52:8f:96:86:e7:74:12:c3:35:58:8a:
36:a4:76:50:6f:a6:4f:f7:17:6d:ad:78:17:51:aa:
ea:b6:ac:b1:4a:a0:b3:f8:0c:02:38:22:c6:73:05:
e1:5f:e2:2c:fb:1f:1f:43:60:22:72:49:b2:7d:ff:
94:95:a8:de:9c:a0:ca:11:1b:4b:f9:2c:35:96:9b:
ba:a3:98:5b:31:d0:55:f8:7b:f2:96:93:97:ec:8c:
67:16:c6:b6:40:42:61:da:12:d1:e6:b3:a5:a2:f4:
b8:fc:0a:f9:80:7d:74:d9:58:b1:e4:33:e7:73:37:
2a:ff:b5:29:ee:13:69:e6:92:97:02:fd:f6:5e:9d:
4a:46:bb:cb:bc:54:4f:27:e9:89:ad:d1:b3:33:3e:
bc:b2:87:35:ee:7d:9d:5f:d7:86:a9:10:19:3c:bc:
78:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:C6:F8:BE:B3:36:70:2C:54:96:5E:55:D6:C2:BB:24:33:19:46
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/JanG-L6zNnAsVJZeVdbCuyQzGUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0f:08:25:14:b6:56:6d:c6:10:9d:15:0d:4f:31:22:91:38:
ab:33:1b:d1:0d:06:4e:ff:f3:ee:e1:d0:04:51:97:84:9e:66:
14:0c:98:bb:2c:b1:0d:71:6a:ef:12:f0:41:26:eb:7c:b9:8b:
79:e4:f9:7e:7a:fb:b7:da:fc:1b:66:35:c8:77:00:9e:f6:2a:
75:cb:84:d2:06:f3:47:51:2a:01:cc:e4:33:8c:6d:7b:2b:28:
37:8c:b3:c8:76:69:0f:c5:1a:de:48:3f:78:39:5f:4a:b1:6d:
0e:36:62:8f:7f:3f:f4:db:b4:2a:79:d1:93:df:35:48:0d:24:
5e:c1:76:fc:bf:6a:32:b8:a8:8a:dc:1c:07:fa:f2:da:10:6a:
c5:29:6e:d5:8c:e9:42:40:da:7e:fb:0d:ea:1a:6b:f2:ba:46:
41:42:7b:e4:39:3e:dc:88:c9:7c:92:98:78:ea:6c:2b:9b:a6:
ae:68:aa:b4:6b:28:41:8c:b2:69:14:3d:16:ce:8d:56:87:ea:
9a:83:d7:d1:75:50:c3:07:11:04:b8:df:c3:90:13:65:25:19:
d3:db:f9:08:94:50:0a:66:b2:0b:c4:9b:90:1a:ce:57:01:fb:
85:c7:65:a1:cb:12:d3:9a:77:f8:f9:bc:3c:37:77:b1:4d:a8:
63:99:67:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:54 2024 by rpki-client on console-ams.rpki-client.org