Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/X2Fesb5eAoBNrGk4r_GKAArrizw.roa
File: X2Fesb5eAoBNrGk4r_GKAArrizw.roa (raw, json)
Hash identifier: zh18FpX+OAsdn1W4+FXQbsrul0+XqyHDFfAbF9jPAxI=
Subject key identifier: 5F:61:5E:B1:BE:5E:02:80:4D:AC:69:38:AF:F1:8A:00:0A:EB:8B:3C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018A6574CD07CAFC38CD82B2FBD010C233A3
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/X2Fesb5eAoBNrGk4r_GKAArrizw.roa
Signing time: Tue 05 Sep 2023 13:07:48 +0000
ROA not before: Tue 05 Sep 2023 13:07:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 932
IP address blocks: 91.213.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:74:cd:07:ca:fc:38:cd:82:b2:fb:d0:10:c2:33:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 5 13:07:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f615eb1be5e02804dac6938aff18a000aeb8b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:0a:9f:87:24:0d:ee:23:45:be:ab:39:ea:
57:9d:92:12:e0:b0:34:c4:c9:7f:67:dc:a4:cb:90:
ed:03:10:89:01:36:30:d4:64:0c:eb:b9:d1:eb:8a:
9c:5d:d4:04:bc:6e:49:60:9d:30:97:67:cd:88:b6:
05:69:c5:d2:08:59:24:4e:08:b7:ff:7e:25:64:43:
b6:94:39:b4:7c:a5:18:82:7a:4a:0b:d3:7c:24:68:
f7:66:62:bb:85:aa:01:61:45:0c:8e:b3:d6:25:18:
99:a1:04:ff:aa:46:f8:1c:16:e1:0e:ed:a1:a3:8b:
2a:05:aa:65:cd:c9:17:fe:06:d4:4e:5d:02:58:52:
22:33:0e:5f:57:66:b1:34:82:4b:de:91:f9:df:7f:
2d:e4:82:12:29:63:77:8c:8b:9d:06:36:b6:f7:c4:
79:56:e0:8e:e5:1b:08:30:db:73:78:ed:ad:b7:dc:
f0:c2:af:f3:30:40:df:90:d6:1c:5c:97:54:37:10:
ca:0e:95:d7:cb:b1:b0:35:03:ed:eb:f1:04:d8:31:
c3:13:a3:9b:8f:ea:a5:17:5f:b8:d0:32:ef:54:7c:
ce:df:ba:47:73:e2:98:af:2e:49:4d:92:2f:7c:88:
cf:46:56:c3:06:3b:dc:a6:9c:06:47:49:11:d0:34:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:5E:B1:BE:5E:02:80:4D:AC:69:38:AF:F1:8A:00:0A:EB:8B:3C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/X2Fesb5eAoBNrGk4r_GKAArrizw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fe:ab:46:94:b4:61:f8:b2:84:c2:5b:3c:0e:d5:6c:40:4f:
d5:4e:88:18:91:4c:c6:ea:c1:b9:a0:8b:11:2e:fa:38:d0:13:
5b:5c:de:4e:5c:26:16:c0:a2:38:42:90:f9:33:49:56:ba:dc:
7b:55:19:83:0b:bb:29:66:04:ec:b6:6b:e0:74:db:1a:57:65:
a8:69:fe:71:a4:09:cc:0f:ec:56:7e:ab:cb:5c:0a:d3:fe:07:
bf:37:89:94:56:73:2b:15:8b:95:8f:15:3f:a2:28:7d:e6:2c:
fe:5e:aa:2b:3d:91:02:2f:42:63:1d:8b:12:1b:d9:cb:1f:7d:
72:e3:c1:86:6a:b0:d4:f5:13:f9:8c:d9:55:9c:57:04:69:87:
3c:7b:3f:b9:39:46:3c:e2:12:4e:5d:2c:38:d6:66:bd:ce:f9:
3f:88:a6:eb:45:b4:eb:ce:54:39:6f:31:80:29:41:3f:0b:24:
18:1b:b2:49:7a:67:20:81:e9:2a:5a:cf:4e:44:8a:ef:c0:d1:
36:1e:cd:18:c3:ab:cd:f4:69:3b:f0:a8:9c:06:1d:4e:45:ba:
03:18:bf:ab:52:5f:6c:d7:0e:ee:96:be:d4:82:66:a5:31:75:
04:15:c9:2d:1b:66:45:7e:81:4d:b4:80:af:d5:6f:79:23:3e:
4d:46:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 14:26:28 2023 by rpki-client on console-fra.rpki-client.org