Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/m2feD_8L2AkZeKIQq9dyIStnhg0.roa
File: m2feD_8L2AkZeKIQq9dyIStnhg0.roa (raw, json)
Hash identifier: TsYCcZEYNMEi1d8woloz1HmHwv8IAYg8nN5BCc5IuLw=
Subject key identifier: 9B:67:DE:0F:FF:0B:D8:09:19:78:A2:10:AB:D7:72:21:2B:67:86:0D
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 01876A0AC00969451EDB23FB9F71C96747B3
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/m2feD_8L2AkZeKIQq9dyIStnhg0.roa
Signing time: Mon 10 Apr 2023 07:21:42 +0000
ROA not before: Mon 10 Apr 2023 07:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57601
IP address blocks: 91.233.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:0a:c0:09:69:45:1e:db:23:fb:9f:71:c9:67:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Apr 10 07:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b67de0fff0bd8091978a210abd772212b67860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:fc:42:6d:e4:45:fd:8f:2b:8d:01:7c:4d:
21:9a:a3:72:f6:93:ab:db:f8:bc:fd:60:d6:7e:c5:
13:ae:5e:44:b7:01:6e:4c:60:e1:dc:8f:28:96:a6:
47:4f:52:cc:5f:d0:37:73:b8:b5:8e:a6:dd:f4:19:
4b:e8:79:70:b1:2a:15:05:e2:45:3d:14:d5:79:a8:
e4:da:fb:be:70:1f:72:43:23:a3:03:e1:81:d0:60:
24:6c:6a:16:62:20:4a:dc:1c:ea:8f:63:80:64:b6:
65:11:46:23:f4:89:e7:00:b9:70:26:4d:67:97:26:
6e:63:36:e4:e4:6e:26:dd:a7:69:f1:07:e1:60:bf:
b9:65:05:c8:8c:53:0b:6c:1c:49:c7:07:34:e0:19:
53:a6:ed:d8:0e:09:e9:94:c9:b8:b0:56:c7:2d:f2:
10:7c:46:e4:88:6e:c0:c1:aa:71:1c:97:db:86:83:
03:a3:65:83:74:c9:14:e3:ff:38:bd:39:55:11:6c:
30:45:37:9d:14:3e:eb:89:12:fa:13:72:e6:5a:7c:
ac:7f:60:68:1b:68:ef:9b:8f:54:3d:c5:f6:6a:25:
2a:27:7c:3d:35:76:b3:cb:e3:f1:49:a5:6e:44:5d:
bd:32:ed:98:94:00:ef:a0:4c:53:a8:30:15:dd:b4:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:DE:0F:FF:0B:D8:09:19:78:A2:10:AB:D7:72:21:2B:67:86:0D
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/m2feD_8L2AkZeKIQq9dyIStnhg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.103.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4b:02:17:3b:48:0f:c7:36:a0:00:c0:13:e9:d1:f7:8b:60:
37:0c:23:8b:28:a6:e0:37:49:f5:0e:a9:61:e7:63:20:dd:6f:
2b:4c:e3:ed:6a:49:35:5c:59:b4:4f:37:15:98:a9:e5:94:74:
c9:e8:09:d2:e5:24:1c:84:77:7c:66:26:07:bd:7f:29:7a:3a:
42:d0:9c:26:5b:8e:96:cc:eb:e7:c7:fc:85:24:54:e2:45:d5:
c7:52:83:69:c8:93:84:72:57:de:4d:9c:ac:57:2d:90:0c:c9:
74:fe:f8:9c:33:8c:8b:01:d3:b0:35:3b:67:54:23:f2:0c:26:
0b:68:ee:cd:b5:35:2c:e7:11:ae:fd:85:1e:9b:cf:cc:59:52:
79:f2:79:54:67:82:48:23:d1:b3:40:57:6a:b4:14:a8:fa:a3:
c6:c3:73:27:c1:23:65:ba:1b:a8:30:64:53:d0:9a:66:3c:78:
35:f5:e5:b9:bd:cb:1f:22:41:c3:80:e1:f6:f2:bc:2c:11:3e:
30:a3:d0:c3:b8:0a:c2:6c:b9:47:e4:16:fb:6c:d3:fd:26:e7:
6f:ca:aa:fc:a0:03:d8:1e:3e:28:2e:50:bd:4f:f8:f8:20:5a:
fb:89:4f:24:ed:5e:f0:70:4a:28:2e:2f:90:7c:42:9e:c0:26:
af:7e:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:30 2024 by rpki-client on console-ams.rpki-client.org