Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/cvs5IZQhxKaK9ZJyWU6D2q5F3MM.roa
File: cvs5IZQhxKaK9ZJyWU6D2q5F3MM.roa (raw, json)
Hash identifier: MJMc9dsiDRIRHFNTpKx8+Cni4W2olzHYREfrtyDgPvI=
Subject key identifier: 72:FB:39:21:94:21:C4:A6:8A:F5:92:72:59:4E:83:DA:AE:45:DC:C3
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 018571C3052FF972C51DAFD61DC832922A03
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/cvs5IZQhxKaK9ZJyWU6D2q5F3MM.roa
Signing time: Mon 02 Jan 2023 09:14:44 +0000
ROA not before: Mon 02 Jan 2023 09:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 91.199.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:05:2f:f9:72:c5:1d:af:d6:1d:c8:32:92:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 2 09:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72fb39219421c4a68af59272594e83daae45dcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:4c:06:7f:52:17:92:3f:33:3a:0f:28:2c:
34:6a:e2:44:a3:d2:c5:9a:78:dd:02:95:ee:ca:1d:
4d:4e:29:99:95:c6:b4:8a:30:6c:c9:f3:09:d8:8e:
50:c2:c9:54:81:2e:c2:5f:ae:61:0a:b0:c4:90:85:
2d:b4:02:31:8f:b0:5d:ea:51:ed:af:dc:49:73:ea:
09:75:09:69:94:40:59:41:d4:ac:d8:e7:da:c5:82:
e2:09:c3:8c:31:bc:bb:a7:56:80:10:fb:93:33:87:
6d:79:20:33:9d:1c:d2:cd:f3:91:73:0f:a2:7d:fb:
17:c0:c3:a7:71:fd:7d:ef:06:f9:45:57:02:07:28:
7b:ce:e9:82:78:a5:d0:cd:af:ee:5e:dd:52:e7:69:
4e:ba:82:fc:ba:2c:0e:f7:87:02:8c:fc:4e:2d:52:
28:dc:23:51:f2:f1:09:cb:c4:59:27:56:3e:78:a9:
1f:cc:c4:f4:e7:bf:7f:de:6b:a3:62:2c:79:95:20:
bd:10:e3:a8:08:e1:57:80:48:15:a0:2f:f4:15:22:
1c:39:13:cd:90:ec:ad:bb:dc:9f:c6:b3:2a:1a:4b:
fe:ad:ca:e7:2a:54:8b:52:45:9a:d7:11:ae:95:58:
63:2a:2b:0e:9a:aa:7c:4e:5e:c4:4f:a7:5c:c8:ef:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:39:21:94:21:C4:A6:8A:F5:92:72:59:4E:83:DA:AE:45:DC:C3
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/cvs5IZQhxKaK9ZJyWU6D2q5F3MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:60:dd:8b:54:6b:cd:54:e4:5f:b0:63:79:a7:67:f0:bf:78:
04:1d:7b:f7:25:99:6c:e4:f8:68:40:5a:08:57:68:f0:44:79:
2b:2d:ca:93:83:4a:ae:38:41:a3:95:4c:36:8e:82:70:09:14:
93:cb:97:a1:60:d5:82:b8:5e:82:b5:a2:38:5e:ba:7b:cc:b6:
f5:30:e2:b4:7f:4f:81:d8:b0:ac:e3:59:9f:73:85:9d:9b:2c:
96:0d:2b:cf:a5:5f:52:25:cb:e6:38:24:0e:85:5c:38:b1:93:
4d:a6:5f:68:93:1b:ec:48:2d:60:2f:36:22:e9:60:da:db:4c:
9a:41:6d:80:46:b9:17:b0:7e:bb:92:17:c4:91:e1:73:8a:b7:
d6:69:58:88:c1:44:e7:60:60:fa:f4:a7:80:b4:f2:fd:c9:bc:
90:d6:66:18:58:06:74:74:54:65:48:99:80:73:5b:5c:74:d0:
92:a7:e2:ed:59:87:7b:bd:a6:13:c5:df:c6:21:f5:e9:57:f5:
af:c8:29:cb:1d:91:b8:a1:9e:f4:e3:e4:fc:ad:4b:26:5f:c9:
c7:7d:f2:81:1a:53:be:bd:0a:b0:31:51:58:ad:db:05:50:18:
03:2e:37:05:66:34:f2:a6:a9:26:f7:98:6d:b5:63:5e:e9:4a:
a4:5c:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:25 2024 by rpki-client on console-fra.rpki-client.org