Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/xZuhNeZEiQISLsSSLyHbCqmQO58.roa
File: xZuhNeZEiQISLsSSLyHbCqmQO58.roa (raw, json)
Hash identifier: 0dzctFMprcSMxQGIVJQBFazWax5uTrFQfcWaGh0pLXs=
Subject key identifier: C5:9B:A1:35:E6:44:89:02:12:2E:C4:92:2F:21:DB:0A:A9:90:3B:9F
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018A3C8F4FDB8ADF9E6D6FF13F354535A522
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/xZuhNeZEiQISLsSSLyHbCqmQO58.roa
Signing time: Mon 28 Aug 2023 14:32:19 +0000
ROA not before: Mon 28 Aug 2023 14:32:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201909
IP address blocks: 91.219.16.0/24 maxlen: 24
91.236.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:8f:4f:db:8a:df:9e:6d:6f:f1:3f:35:45:35:a5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Aug 28 14:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c59ba135e6448902122ec4922f21db0aa9903b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:3a:ef:59:2d:11:e3:b5:1d:74:f9:a1:43:
24:7d:46:96:c3:e9:59:01:9b:91:e6:83:21:1b:53:
32:63:4b:d7:2f:b7:1e:af:7f:dc:78:eb:ac:9b:5b:
4e:c5:03:1c:b3:11:f0:16:b0:f0:d1:a3:1f:52:88:
92:97:0d:85:e0:61:c7:8b:6e:53:77:06:db:c7:b1:
82:58:d2:ff:d5:1e:94:02:df:1b:6c:5f:8b:84:bf:
4b:81:9f:d9:0f:b4:34:6a:75:64:53:2a:73:30:dd:
b8:ec:39:10:c2:6c:5f:df:f9:f5:2f:07:41:66:7e:
41:c9:41:b2:9f:84:34:f5:37:bf:d3:9e:83:dd:64:
fb:26:07:40:06:56:ec:49:07:c2:34:ef:a1:68:b2:
b1:f9:ce:29:1c:36:5c:dd:2c:c1:9b:b6:08:4c:92:
25:87:be:df:ca:28:73:df:7a:b7:57:d9:7b:c0:e9:
08:99:45:36:90:a1:39:c9:fe:da:70:68:2c:c3:c2:
8e:39:65:2c:0b:a5:5b:e2:40:b2:7a:29:f1:57:fc:
5e:a6:f4:80:db:00:62:68:6e:86:91:0a:27:3a:ed:
d1:1f:d1:b6:10:0e:bc:f6:40:98:87:b7:29:f4:3e:
51:f4:d1:a2:43:03:5d:9d:ea:6d:c5:36:12:8d:8c:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9B:A1:35:E6:44:89:02:12:2E:C4:92:2F:21:DB:0A:A9:90:3B:9F
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/xZuhNeZEiQISLsSSLyHbCqmQO58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.16.0/24
91.236.88.0/24
Signature Algorithm: sha256WithRSAEncryption
60:69:8b:8f:ec:31:ad:0b:34:32:63:7a:54:c2:07:35:36:e4:
08:8a:59:29:ac:06:48:c7:d6:83:18:8a:47:b9:03:66:91:b9:
50:25:26:c6:ef:bd:e5:6e:9c:bc:cd:d2:9c:fe:4b:d7:cb:fd:
53:d3:dc:8c:ce:f2:f8:bf:f4:34:a4:66:ee:c6:d0:07:27:c0:
eb:e7:8d:e5:9d:40:f2:1d:71:a4:4b:86:eb:22:88:79:48:59:
e3:22:8f:62:e6:a7:bd:b3:be:ef:d4:b2:3c:a5:f7:bc:da:dd:
0a:25:73:ae:77:bb:c2:0b:02:0b:ed:47:d6:75:c5:eb:06:47:
c2:21:08:17:5c:1d:db:3b:55:c3:c1:9d:b0:8b:7a:dc:2d:35:
02:aa:b1:64:bd:bd:32:52:59:9c:74:0b:7b:ed:6d:47:6d:92:
4c:69:2a:a2:5b:aa:ce:91:03:da:57:28:ae:35:03:cc:fc:66:
2e:69:3f:a2:48:d1:f7:11:87:c0:2e:31:0b:b1:71:ce:7a:59:
cb:fc:b8:b0:43:43:51:88:24:f1:1e:6f:bf:aa:7a:ad:d9:0d:
83:dd:4a:57:d5:c5:99:83:d1:19:b3:d2:fc:49:86:f1:0c:e7:
a9:c2:63:ba:7d:28:7d:c5:1f:a1:bb:91:d2:5a:3e:85:86:9f:
be:7d:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:53 2024 by rpki-client on console-fra.rpki-client.org