Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/xF0QsR_RBx_7Yq2uyNkN78D0xwE.roa
File: xF0QsR_RBx_7Yq2uyNkN78D0xwE.roa (raw, json)
Hash identifier: IGRnrO7qGEx+uVHlc35LpFEwRt4zWMfSl/LKOe0LdVw=
Subject key identifier: C4:5D:10:B1:1F:D1:07:1F:FB:62:AD:AE:C8:D9:0D:EF:C0:F4:C7:01
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 018810BAFAD602511C730FD40008607ECBA8
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/xF0QsR_RBx_7Yq2uyNkN78D0xwE.roa
Signing time: Fri 12 May 2023 16:11:09 +0000
ROA not before: Fri 12 May 2023 16:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61234
IP address blocks: 91.198.224.0/24 maxlen: 24
194.145.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:ba:fa:d6:02:51:1c:73:0f:d4:00:08:60:7e:cb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: May 12 16:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45d10b11fd1071ffb62adaec8d90defc0f4c701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:ae:88:d6:31:39:73:a2:51:17:fc:1f:e8:
a3:19:86:2d:2b:da:11:aa:7e:f0:d5:8e:bd:1a:fd:
46:7d:69:a3:97:fa:40:a4:a9:ac:7a:32:dc:d1:3f:
65:6d:9f:de:68:91:e1:7a:f3:1a:3a:3f:ec:79:ed:
72:da:27:32:82:58:de:e1:bd:c1:c1:61:41:a1:ae:
dc:44:b8:a2:75:8c:a1:ac:a8:ae:c7:b4:2a:42:ff:
0b:7d:6d:55:8f:33:45:26:d6:3e:34:ae:39:bd:24:
0f:70:8e:18:84:78:b6:bb:06:33:45:58:d0:b3:42:
8e:d1:c2:3c:e4:61:59:20:bc:0c:ce:17:2d:7c:f6:
44:6c:93:0d:ac:66:7c:12:d6:5a:59:7e:7b:dd:bf:
cd:8c:5e:95:1e:75:08:27:a4:70:5a:a1:a0:0f:f1:
d1:d4:81:32:59:ad:2f:78:77:5d:68:3e:01:01:46:
af:1f:b2:fd:45:b5:53:7d:9e:dd:dc:f3:f9:ad:fc:
c2:98:a6:20:48:4d:e9:4c:84:ea:3a:a5:3a:e7:12:
f4:46:78:89:60:6a:c2:b4:d9:05:b6:c7:9d:05:dd:
c4:1e:28:67:6d:f4:83:e1:a6:6e:d7:3f:14:20:81:
1f:6c:e6:46:ca:61:8b:2c:6c:43:f2:a8:00:91:0c:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5D:10:B1:1F:D1:07:1F:FB:62:AD:AE:C8:D9:0D:EF:C0:F4:C7:01
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/xF0QsR_RBx_7Yq2uyNkN78D0xwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.224.0/24
194.145.224.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7c:89:d5:e3:a6:d3:03:58:98:cd:34:25:00:e7:6e:62:b4:
4d:3e:7c:b9:2c:5c:e5:4c:71:fc:df:08:bd:2f:b5:1e:66:dd:
57:33:7b:32:e0:13:07:f8:3a:44:70:ef:ee:14:ff:73:d0:12:
46:e8:83:7b:9e:27:82:ba:37:94:d0:e6:d7:65:cf:2c:2e:a2:
26:79:dd:b7:f2:97:b5:bb:13:7c:14:6b:e3:53:57:a7:d4:12:
40:40:a5:62:88:2a:c7:a8:f2:dd:48:f7:bd:f7:b8:6c:25:88:
72:31:61:a4:c8:33:c3:84:df:74:4e:48:49:37:0c:4a:49:9e:
b4:4c:4c:33:6d:e3:84:61:d4:51:46:80:8e:16:bc:8b:3e:87:
82:4c:a1:ef:52:12:b7:e6:ef:50:19:d2:c6:8b:1d:4c:22:b3:
99:41:c8:03:4b:a3:73:25:50:4d:f0:f0:e5:62:5d:c7:de:d5:
58:26:a3:1a:dd:8f:7c:5d:4e:08:47:3e:86:e5:14:28:77:6a:
4a:34:8a:fc:6c:31:a1:55:55:0a:5e:0c:52:5a:50:aa:4f:bc:
45:4d:f3:81:8a:78:e5:39:9f:89:db:df:b1:2d:65:fa:a5:a1:
c1:90:6d:25:78:63:dd:14:48:f9:5f:81:06:93:fd:e9:a9:fc:
6f:bd:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:14 2024 by rpki-client on console-fra.rpki-client.org