Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Lul7u9h-QjiJajqF0b1fDS4NFg8.roa
File: Lul7u9h-QjiJajqF0b1fDS4NFg8.roa (raw, json)
Hash identifier: 8PKEEuW+Fa9fA2n4buiWg5JZYmgj5eWBncoHPTL+0CM=
Subject key identifier: 2E:E9:7B:BB:D8:7E:42:38:89:6A:3A:85:D1:BD:5F:0D:2E:0D:16:0F
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E8B9D885AED85481406F376E09845D9
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Lul7u9h-QjiJajqF0b1fDS4NFg8.roa
Signing time: Fri 12 May 2023 06:00:10 +0000
ROA not before: Fri 12 May 2023 06:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:8b:9d:88:5a:ed:85:48:14:06:f3:76:e0:98:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ee97bbbd87e4238896a3a85d1bd5f0d2e0d160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:9e:2a:cd:3a:b9:0a:bc:fc:d3:17:b4:1c:
c4:67:da:d9:cf:04:05:43:7d:f5:76:cb:2c:cd:7d:
87:5c:92:0f:89:e0:85:ae:ef:ac:87:83:71:89:2a:
d2:d1:ca:a3:ac:a0:f4:7b:13:9d:90:e5:93:02:37:
1c:e6:be:5d:05:64:16:12:f5:42:d3:db:94:cb:1a:
3a:06:6b:02:ab:8d:01:2b:9f:48:3e:cd:df:ba:19:
7e:3a:48:33:73:69:42:80:bb:7d:0a:40:b7:f5:cd:
10:55:78:a1:9e:bd:a0:90:86:f6:e7:8b:f1:e2:c8:
dc:19:83:e2:e4:f7:9e:c4:af:e5:62:6c:24:74:1d:
7f:02:3d:05:ed:6f:1e:2a:6a:46:35:8f:88:45:a4:
e7:e9:d1:47:72:d7:a6:1c:02:38:9c:df:be:2a:95:
17:b8:7f:03:f8:48:6d:ae:de:95:a6:26:e4:16:aa:
ec:13:34:66:40:89:0d:b7:0e:13:7c:20:9e:d7:bc:
3a:a8:6c:bb:ad:9c:c9:fe:de:a6:b2:46:24:e7:64:
7d:57:5b:7c:dd:30:84:e4:20:56:c0:c9:7c:4e:57:
70:fb:fc:5d:b6:2a:c0:5e:70:4a:34:42:50:f9:18:
f1:40:c8:00:31:3c:ee:a4:dc:84:e3:fb:14:f2:eb:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:7B:BB:D8:7E:42:38:89:6A:3A:85:D1:BD:5F:0D:2E:0D:16:0F
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Lul7u9h-QjiJajqF0b1fDS4NFg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b8:a9:41:6f:19:9c:af:cc:4d:47:a4:d1:7c:76:be:82:67:
59:93:5c:2a:6a:65:5d:e6:13:43:5b:07:c4:b0:3d:6a:bf:53:
61:9c:0d:0a:6e:fa:d6:80:9b:5a:61:d6:5b:78:37:b6:7a:9c:
35:9d:d3:27:f7:cc:01:9e:03:9a:0d:8d:3d:82:2d:e9:88:4e:
9f:f5:f1:fb:d2:70:29:8b:e2:0d:00:78:3c:74:ff:40:f3:75:
2e:67:0b:79:f5:df:40:60:d3:09:f1:43:a5:76:d0:7d:23:a0:
21:d0:2c:d4:5b:c3:d8:35:97:87:be:57:52:cc:fb:72:fc:ac:
a6:a6:61:ce:e7:04:b7:b5:0a:59:46:32:be:54:b8:d0:ae:a5:
dc:fb:8d:e6:90:1b:85:a5:25:76:e4:18:5f:f1:e0:4a:e0:ba:
a0:0f:b2:8f:d3:3d:82:d1:28:a3:ab:f0:09:76:ad:f0:59:09:
ef:b7:2f:fc:04:d2:35:ce:f1:5b:32:1d:31:d1:e3:cd:01:19:
15:d9:06:10:7d:b6:f1:8d:d8:87:42:4d:4b:76:73:ce:fd:17:
b4:92:f5:98:4a:12:37:88:f7:76:41:c2:d0:29:b7:3e:23:63:
03:23:e3:29:5d:47:93:46:2b:43:00:86:5a:d0:1e:a0:a3:31:
37:14:46:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org