Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/3w8eErAGQ7WfxTC-K8x8W2t9c78.roa
File: 3w8eErAGQ7WfxTC-K8x8W2t9c78.roa (raw, json)
Hash identifier: 70RqHUKYzfpvYBleNBZi+GwfBaz/CXb8hlObdn0h50M=
Subject key identifier: DF:0F:1E:12:B0:06:43:B5:9F:C5:30:BE:2B:CC:7C:5B:6B:7D:73:BF
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 018A928DA21A2E9D13172A385D994A450CEE
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/3w8eErAGQ7WfxTC-K8x8W2t9c78.roa
Signing time: Thu 14 Sep 2023 07:17:50 +0000
ROA not before: Thu 14 Sep 2023 07:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 91.140.128.0/17 maxlen: 24
194.54.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:8d:a2:1a:2e:9d:13:17:2a:38:5d:99:4a:45:0c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Sep 14 07:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df0f1e12b00643b59fc530be2bcc7c5b6b7d73bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:9c:f7:f9:e1:0b:85:dd:b1:f5:fa:74:a3:
1f:11:3b:88:cd:32:63:34:06:e9:64:e2:6c:15:28:
62:0e:30:25:fd:85:2c:d7:88:06:4b:81:6b:0d:7f:
9b:71:0b:43:85:97:6b:de:dc:23:07:b4:2e:24:de:
7e:25:a0:5e:76:4f:95:ce:e8:7f:fd:76:92:d2:a1:
64:0d:ca:1c:cf:09:9e:90:d0:68:4d:2b:70:b5:f1:
6b:6f:2d:e7:c9:76:da:08:e4:dc:24:b4:37:ce:b3:
75:66:03:13:71:2b:09:c9:90:68:b4:10:ca:72:b1:
9b:26:56:49:bc:f4:b6:e4:6e:70:be:59:42:eb:b4:
f5:af:96:79:7f:1c:78:1a:b9:bf:27:d8:62:ff:8a:
93:e4:b3:a9:be:05:00:d8:57:f1:e8:68:a0:eb:0d:
6b:eb:d1:2e:bc:3a:73:7a:ed:10:b8:d3:c8:86:ca:
31:e4:54:5f:c6:99:61:5e:e1:e0:e9:6d:0a:4f:3d:
4d:83:d0:6d:d3:17:64:02:62:8e:04:6d:b7:b3:ec:
80:4c:f2:fb:18:64:af:92:09:ad:2b:26:e4:37:02:
13:00:0e:f3:9d:9d:35:c5:d0:c6:3b:bc:c8:72:92:
3e:ef:6f:45:8d:cb:e2:29:2c:4b:59:d4:5e:52:cf:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0F:1E:12:B0:06:43:B5:9F:C5:30:BE:2B:CC:7C:5B:6B:7D:73:BF
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/3w8eErAGQ7WfxTC-K8x8W2t9c78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
20:3d:73:68:16:32:e8:f0:82:73:82:4d:73:a5:0c:cc:f6:38:
90:f0:e2:85:df:2b:61:34:8a:8d:25:44:35:2e:7e:78:71:5e:
a1:12:3f:36:9a:b5:5b:97:3b:65:f3:c9:d4:75:69:0a:6c:a6:
66:22:82:33:9f:c9:17:fe:d1:18:76:30:22:89:20:25:f5:39:
b6:29:9c:f2:01:f4:e7:0a:21:36:7e:8e:95:a7:e2:1e:6e:9c:
e2:cd:12:06:0d:98:93:b7:29:fd:47:d4:15:12:3b:b8:a5:26:
bd:ba:34:de:d9:2f:2d:96:64:26:d8:83:82:0c:32:63:57:1f:
58:46:87:34:59:00:45:5f:9e:19:52:e5:b7:b5:5b:df:f6:9b:
bd:a7:c9:0d:4f:a4:ed:8a:09:bd:d4:76:c5:c4:a4:8c:bd:26:
f9:fe:b8:ee:4a:b7:df:1d:15:6e:20:e8:20:43:ae:1c:91:4e:
15:e6:e3:aa:7c:ca:f0:59:a4:97:fc:b9:37:7b:4c:1d:07:f3:
99:ae:32:a6:15:91:d6:bb:c0:5f:f2:c9:e9:68:53:a3:64:c6:
24:2d:e1:d8:ff:5e:1d:c3:00:0e:59:be:0c:85:88:db:dc:c2:
b9:82:98:45:3c:ba:0f:cd:9f:b4:0a:07:4d:e7:34:3a:2b:f3:
2e:23:4d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:19 2024 by rpki-client on console-ams.rpki-client.org