Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ho-rcU5FSJdt2d1CNUzbSYXo0AI.roa
File: ho-rcU5FSJdt2d1CNUzbSYXo0AI.roa (raw, json)
Hash identifier: 6hjwENUcKqhjBaUjVXhBhbiD4/l67Mh3AFdSPpnqQYU=
Subject key identifier: 86:8F:AB:71:4E:45:48:97:6D:D9:DD:42:35:4C:DB:49:85:E8:D0:02
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E9118E9ED2841896A90E9BE76452740
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ho-rcU5FSJdt2d1CNUzbSYXo0AI.roa
Signing time: Fri 12 May 2023 06:06:10 +0000
ROA not before: Fri 12 May 2023 06:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133861
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:91:18:e9:ed:28:41:89:6a:90:e9:be:76:45:27:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=868fab714e4548976dd9dd42354cdb4985e8d002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:69:48:5c:fd:84:35:77:ed:c7:4f:f0:77:
0a:4d:ae:2f:32:71:6f:22:8a:5f:1a:1c:05:28:d6:
92:bd:6a:c1:36:77:52:1d:fc:bf:82:23:49:ae:16:
6f:c9:da:57:c9:0f:96:67:7c:81:91:90:b8:e7:06:
e2:58:29:ed:e3:d3:2e:c5:d7:f3:2c:48:62:18:fb:
01:fc:26:40:2f:a4:76:2d:53:38:22:6d:59:03:e4:
b7:fd:55:f3:6a:94:2d:b7:c3:42:48:6a:6e:4c:8a:
6a:e3:4f:e5:8c:76:09:2c:66:3d:64:32:3c:c4:b8:
89:2f:00:ec:d6:6c:bf:6d:35:2b:57:f8:5d:87:69:
b0:50:42:ca:3d:4e:3b:ea:11:6a:68:dd:f2:7b:0c:
26:1e:19:b9:2d:a9:b6:bd:2d:68:25:dd:c6:7f:35:
fb:1b:90:ed:77:60:0d:6e:2a:d4:db:c9:b5:49:ef:
88:a1:41:d8:2a:9a:a1:7c:70:b1:2e:9c:c4:32:60:
31:e4:30:56:ec:81:f4:e8:16:8b:3a:43:40:93:30:
32:f5:e1:f4:11:45:b1:d4:94:e3:b5:96:35:2d:57:
c0:dc:70:c7:73:49:2c:cf:d6:57:41:b4:0a:33:0f:
57:2f:b5:7b:fe:6f:fa:2b:3a:63:17:65:d2:17:6b:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:AB:71:4E:45:48:97:6D:D9:DD:42:35:4C:DB:49:85:E8:D0:02
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ho-rcU5FSJdt2d1CNUzbSYXo0AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
47:2e:23:36:72:31:5e:62:a3:f6:16:2f:d0:69:de:bd:39:e2:
20:69:2e:30:2c:38:a8:fe:56:cc:cd:4b:d5:f0:5d:26:0e:33:
20:e7:f5:98:63:f7:c4:f4:ab:a1:24:3b:f4:5a:8c:58:d6:df:
cd:82:88:e6:3a:38:8a:45:13:f2:f9:b3:a9:72:a3:a3:c8:c1:
08:a0:cb:24:5f:02:16:af:c7:71:7b:87:19:21:6d:aa:2f:4f:
50:24:f5:1f:96:7d:2b:69:9d:a1:69:10:3c:50:06:ec:72:13:
a7:05:fc:f3:e6:f9:82:b3:b5:0a:34:b5:92:50:c0:e7:c3:33:
69:cb:64:c1:d9:d6:7f:af:f9:a6:a9:55:3a:79:5a:9d:c8:9f:
97:73:6e:5c:bc:43:2e:13:89:98:a3:2b:bb:d1:a1:45:26:9c:
02:64:24:2e:c8:6d:18:39:f8:91:e8:64:84:50:6b:1e:39:15:
87:3f:6a:08:06:f0:a6:aa:12:ed:b2:a4:92:10:c9:07:b4:b9:
99:1c:70:3d:87:51:88:cd:e4:ba:f3:cc:88:52:11:35:39:6c:
fc:6a:b8:1b:9d:fa:e7:2a:9d:8b:04:fe:47:f1:f3:2d:fb:97:
a7:17:da:f7:19:6f:ad:92:fd:f1:55:4d:93:79:96:e0:33:90:
0b:1d:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:54 2024 by rpki-client on console-ams.rpki-client.org