Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa
File: OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa (raw, json)
Hash identifier: v3M9MXjXOEYTBQmbXAthEb1NEs5vGV4Bc/2bnDPq2L0=
Subject key identifier: 39:43:D3:9B:FD:01:E9:6A:69:FE:D2:D6:45:43:F5:11:64:CE:D9:5A
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D38079E182893BB57EDCB9F610871
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa
Signing time: Sun 01 Jan 2023 13:54:58 +0000
ROA not before: Sun 01 Jan 2023 13:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 91.213.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:38:07:9e:18:28:93:bb:57:ed:cb:9f:61:08:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3943d39bfd01e96a69fed2d64543f51164ced95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:c2:9c:52:bf:97:55:34:c3:a8:f1:7e:2b:
de:d7:1d:04:b6:9b:a6:12:e6:fa:ab:d5:2e:fd:2e:
b9:4d:02:bf:e4:f3:eb:ba:d5:86:2e:30:73:9d:19:
1b:c5:f6:62:3f:c2:bd:2f:23:df:df:7d:5b:7b:72:
ed:b3:a6:2d:a6:95:11:62:f3:54:01:79:13:3b:d0:
e1:2e:8b:33:80:d9:42:ca:9e:a3:55:4c:6b:9e:bb:
b5:58:aa:cd:7c:00:a8:c8:3c:84:c9:b6:51:e5:23:
7d:7b:22:e6:68:8f:9f:98:8d:0e:8b:81:ff:e3:6e:
b3:85:46:ea:06:1f:78:4c:c9:2f:66:b9:81:9f:fc:
54:f7:8b:34:83:a5:e8:03:35:14:fe:45:dc:93:ce:
b4:51:ab:36:5c:5d:c6:b4:96:c3:c5:e4:27:b9:25:
c7:61:a1:85:c9:f4:fc:c2:6d:f6:f8:d3:c4:24:b4:
89:19:31:fe:71:00:dc:c0:97:a1:86:82:48:3e:a4:
ea:e8:8a:17:6e:12:86:c2:a1:83:a2:1c:21:8d:45:
72:71:22:25:7c:94:f2:48:41:b7:8d:cc:45:83:52:
49:96:ce:4d:62:44:01:ca:67:39:d8:71:f7:16:c2:
74:16:65:35:bf:cf:2d:e4:26:7d:e8:08:91:57:d5:
29:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:43:D3:9B:FD:01:E9:6A:69:FE:D2:D6:45:43:F5:11:64:CE:D9:5A
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/OUPTm_0B6Wpp_tLWRUP1EWTO2Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0b:6c:ba:b0:d2:19:4f:13:cc:76:7d:78:4e:eb:80:b7:50:
06:8f:e4:11:8b:cb:3a:0e:90:ad:c4:ae:c5:58:de:e8:f3:34:
83:73:18:6d:7a:67:8a:a6:90:e8:64:0c:e6:c1:8b:6a:bb:ca:
02:7c:53:09:3d:b6:ce:dc:49:6a:11:3a:2e:e0:76:a0:b7:cd:
91:be:b8:5c:39:d1:4e:9f:4f:e2:b5:10:ec:c3:ab:1c:35:4d:
a6:34:79:4a:32:c4:53:26:11:19:78:2b:f8:39:cb:0b:8b:f7:
94:34:85:91:6a:1d:e3:de:0c:4f:6b:27:bf:43:0d:dd:18:7b:
45:c2:af:d3:a8:14:e0:1f:2e:82:37:92:ad:d7:64:de:10:a8:
67:52:7d:e3:7c:1f:b5:95:f7:80:b4:a3:8d:42:f3:95:f8:38:
3b:f5:fd:c9:64:7d:fb:d3:50:1b:1e:b1:43:49:31:40:e5:7e:
94:5b:72:5b:6c:bf:ee:88:89:02:4a:c1:66:09:c7:0f:da:76:
bd:d2:2d:87:a0:12:09:07:21:54:61:ae:29:0a:8d:0c:bf:19:
01:79:1b:c1:09:9e:b8:76:7c:65:43:f0:11:e3:36:cf:d1:77:
8e:00:36:d9:dc:e9:c7:40:33:12:34:3b:79:ea:01:a1:24:28:
1e:4d:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org