Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/_FvXO7lxS0wYBS1S99JkDBoe9WU.roa
File: _FvXO7lxS0wYBS1S99JkDBoe9WU.roa (raw, json)
Hash identifier: Z47I4WdLblBnUzjYE3o8PIPj8jFRQCBgEWo/bqG9x/g=
Subject key identifier: FC:5B:D7:3B:B9:71:4B:4C:18:05:2D:52:F7:D2:64:0C:1A:1E:F5:65
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01877593205B58EA54E3ACAB5A8B322A2327
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/_FvXO7lxS0wYBS1S99JkDBoe9WU.roa
Signing time: Wed 12 Apr 2023 13:06:29 +0000
ROA not before: Wed 12 Apr 2023 13:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 91.193.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:93:20:5b:58:ea:54:e3:ac:ab:5a:8b:32:2a:23:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Apr 12 13:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5bd73bb9714b4c18052d52f7d2640c1a1ef565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:e3:76:d0:d2:2a:31:a7:a5:78:c3:dd:98:
4f:4f:48:fd:05:ab:19:05:3a:8b:ef:61:a6:c9:40:
bd:6b:66:e9:15:e9:e1:a1:97:9a:80:cc:13:f2:e5:
52:55:f3:06:92:69:d6:2e:ee:eb:ed:89:ab:5d:4c:
15:80:b3:6b:2c:bc:13:c1:36:58:dd:25:f6:05:fa:
f3:48:07:73:ff:93:78:38:86:5f:65:2a:87:52:be:
81:c2:ec:79:01:f7:15:a0:7d:9b:52:4f:a8:10:38:
ee:18:f3:a7:d7:51:ea:a4:85:62:62:3e:45:9a:06:
f9:0e:a2:28:29:28:de:9c:31:b0:6f:5f:ed:f8:e9:
00:56:dc:87:99:3a:1e:7a:3c:70:28:27:6a:55:9d:
65:b1:69:30:36:a3:98:99:ac:9d:82:27:c1:30:af:
51:f6:d5:c8:f5:8e:4d:72:35:c5:f4:3e:f1:f3:cf:
60:d5:8b:e8:7f:3b:0b:c5:80:51:22:88:5d:ab:16:
ba:c6:28:76:e5:ef:91:4a:b9:b4:b7:14:cc:1e:e7:
41:f5:03:e9:dc:54:03:38:d2:b1:fe:65:7f:ae:cb:
66:2c:d0:05:7e:66:5e:a1:ab:53:2a:9b:8c:15:4e:
d7:e3:33:3d:05:16:a6:11:1d:3f:61:10:a4:df:ab:
13:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:D7:3B:B9:71:4B:4C:18:05:2D:52:F7:D2:64:0C:1A:1E:F5:65
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/_FvXO7lxS0wYBS1S99JkDBoe9WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.253.0/24
Signature Algorithm: sha256WithRSAEncryption
42:57:0c:15:89:08:77:09:b9:bb:43:33:d7:8c:b6:27:59:12:
fe:d0:b6:0b:a8:e7:b9:d8:11:6c:04:a7:03:af:af:26:2a:f2:
2d:50:e1:8b:e6:6a:5f:28:c4:2b:cf:11:1c:ca:01:7d:39:fa:
63:75:3b:47:6e:a2:14:6d:2c:fa:34:c6:6c:af:52:f6:f1:85:
34:00:96:39:62:ee:17:13:8a:2f:d6:22:df:82:aa:a3:d0:1b:
ca:d9:16:ad:75:7b:fa:b7:36:76:b9:0b:4a:24:64:69:06:f0:
9a:f5:fa:ca:90:c3:e9:8f:46:98:85:a0:ef:02:0a:80:ca:d7:
9f:22:ed:25:e4:a6:16:be:b0:04:13:18:b7:bd:5d:02:2e:20:
fd:87:df:e9:47:23:b6:a5:67:57:06:eb:19:dc:be:80:3f:e8:
64:50:fe:ab:7d:b1:0d:2c:df:92:c6:ee:fd:e1:8a:6b:81:d3:
f6:20:0e:5c:21:e2:e2:f6:40:c5:80:0b:82:c9:58:57:d0:0e:
47:a4:cb:69:f8:c5:d4:9f:57:9f:89:54:8a:74:41:08:42:1b:
d8:a6:ee:83:46:d4:22:f9:99:b3:7e:f2:24:64:88:c8:7d:c8:
f9:db:1a:47:7f:3a:c8:77:b4:68:73:ad:5d:e5:41:f7:a5:9f:
2b:53:1c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:20 2023 by rpki-client on console-fra.rpki-client.org