Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/xjiRtPprjdrEwTfcYD8n5bBBS1A.roa
File: xjiRtPprjdrEwTfcYD8n5bBBS1A.roa (raw, json)
Hash identifier: apT5whadrrBXj8HeSmF9vnCJfZ5LiOUXTjGEcKm0ojE=
Subject key identifier: C6:38:91:B4:FA:6B:8D:DA:C4:C1:37:DC:60:3F:27:E5:B0:41:4B:50
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 018571C305EE93A3BF05F7D1DFF7783C9711
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/xjiRtPprjdrEwTfcYD8n5bBBS1A.roa
Signing time: Mon 02 Jan 2023 09:14:44 +0000
ROA not before: Mon 02 Jan 2023 09:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49367
IP address blocks: 91.199.223.0/24 maxlen: 24
91.199.248.0/24 maxlen: 24
91.203.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:05:ee:93:a3:bf:05:f7:d1:df:f7:78:3c:97:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Jan 2 09:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63891b4fa6b8ddac4c137dc603f27e5b0414b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:c5:30:a9:3a:99:85:c6:07:79:b0:cb:89:
a1:e9:11:8e:90:65:70:c5:ae:88:0a:ec:bc:46:a7:
54:b6:58:86:49:ed:33:de:33:e0:2e:e7:3e:c1:96:
dc:93:32:96:61:a8:13:ca:ac:55:39:ab:70:f7:a9:
13:82:27:c1:58:a5:b4:5c:cb:94:b2:71:36:06:61:
77:7b:03:3d:d6:c6:3a:03:95:03:bd:29:8f:c4:c3:
30:08:55:c0:a1:81:52:b0:02:30:b0:02:cd:bb:eb:
ca:45:88:22:6a:9e:e0:29:bf:1f:29:b7:21:db:06:
ab:f9:d6:60:af:08:8c:a1:b2:30:38:37:d8:be:ba:
08:14:a1:d7:04:f1:a6:63:b3:56:16:0e:f3:05:f3:
8b:7e:cd:27:4d:09:96:ab:05:91:e8:89:3c:b5:c3:
e0:b6:5e:99:42:91:ae:25:3d:a4:c7:3d:70:79:dc:
41:2d:15:1f:33:ce:74:ef:df:90:43:1b:01:b7:ac:
bd:a4:04:c6:5e:a1:b6:cc:fa:93:fe:27:46:70:2a:
51:1e:2e:9f:15:d3:76:10:91:28:c5:81:55:7b:cf:
48:2c:e2:f5:f1:9a:7f:57:d0:5a:b9:8d:be:c3:95:
72:6b:e4:28:10:25:c3:6e:29:1e:4e:05:ed:e1:ff:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:91:B4:FA:6B:8D:DA:C4:C1:37:DC:60:3F:27:E5:B0:41:4B:50
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/xjiRtPprjdrEwTfcYD8n5bBBS1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.223.0/24
91.199.248.0/24
91.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:0e:a0:b3:31:1f:0d:1c:6c:6d:72:62:2b:ce:2b:c9:8f:18:
b8:2e:c8:5c:76:7c:86:30:98:d9:89:c7:9c:d6:dc:0b:1e:ff:
ed:38:49:a6:92:5a:1d:a5:97:ea:e9:18:f5:9b:4d:97:42:37:
c4:d4:55:87:8c:a3:07:47:7c:0d:a0:6f:13:ce:d6:e4:8e:12:
f3:47:c6:e8:9c:4f:cc:96:b5:31:d5:61:be:e8:f8:d7:d0:71:
93:42:4f:c3:fd:a9:a0:b3:e0:26:fa:99:7d:4e:78:0f:d9:69:
32:d6:2d:06:f1:8c:73:7b:5a:93:43:67:36:bf:b0:ac:d9:d4:
de:d1:2a:7c:28:7a:c4:90:bf:16:d0:14:42:f5:28:54:11:13:
70:66:90:0d:b3:7e:da:17:78:ec:f2:1e:38:69:85:b2:07:1c:
e9:40:34:d9:49:0b:da:d8:c9:fe:54:f3:5a:6e:61:d5:71:b6:
4f:cc:4e:0e:b4:59:15:9c:39:a1:13:57:03:a1:87:08:37:e6:
25:2c:25:51:56:aa:f7:c6:a2:c7:a5:bf:8e:b0:cc:0f:26:41:
b5:c3:cc:67:40:6f:5b:86:77:cf:8d:3a:c7:7f:4a:3d:6f:53:
24:18:d6:51:03:05:28:55:35:71:ef:aa:fb:d1:27:3f:ec:79:
aa:72:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:25 2024 by rpki-client on console-fra.rpki-client.org