Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/wBcG851QoMXTVrGQYag9zeQbVlM.roa
File: wBcG851QoMXTVrGQYag9zeQbVlM.roa (raw, json)
Hash identifier: zBJUqjF3XtuFAeaJYxLD5kb3COPj6L/v0Dv6cc8vwq8=
Subject key identifier: C0:17:06:F3:9D:50:A0:C5:D3:56:B1:90:61:A8:3D:CD:E4:1B:56:53
Certificate issuer: /CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Certificate serial: 018CBF0B4E21D1361CB92FD14DF0D11F7DC4
Authority key identifier: 09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/wBcG851QoMXTVrGQYag9zeQbVlM.roa
Signing time: Sun 31 Dec 2023 08:43:58 +0000
ROA not before: Sun 31 Dec 2023 08:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207558
IP address blocks: 91.224.171.0/24 maxlen: 24
91.196.229.0/24 maxlen: 24
91.196.228.0/24 maxlen: 24
91.196.231.0/24 maxlen: 24
91.196.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:0b:4e:21:d1:36:1c:b9:2f:d1:4d:f0:d1:1f:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fecd7071b727db3d12f09efbb454e04d4f743d
Validity
Not Before: Dec 31 08:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01706f39d50a0c5d356b19061a83dcde41b5653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:88:9a:ba:47:ba:c9:c0:87:ae:a4:7b:bd:
81:b5:d4:82:be:6f:31:14:cc:6e:a5:45:80:63:42:
b8:7e:b7:6f:28:05:10:b3:e6:61:62:f8:95:82:bc:
ee:e0:96:44:9c:65:71:af:ab:6c:11:56:d1:5a:82:
e1:fb:7d:12:37:05:38:77:ab:ed:9a:97:e2:cc:98:
d5:ce:a0:33:0e:68:f7:86:f9:9c:3f:fc:c8:7e:08:
0d:46:a0:8c:a5:d5:bc:3e:50:e9:14:9d:41:15:61:
1a:b9:44:c3:b7:83:4b:66:c6:94:b3:8e:98:7b:41:
ee:1c:59:8a:7f:ec:15:3e:9b:1b:5b:c7:b6:e6:08:
b4:13:58:f0:33:a1:11:41:3f:31:5d:ed:aa:3b:4b:
e0:58:fb:e8:e1:d4:42:86:ac:e5:38:ca:43:bd:01:
e1:8e:e8:19:40:78:30:17:f1:af:22:be:12:f0:80:
98:21:9f:df:19:c5:35:c2:a1:94:44:5e:1a:1a:ab:
c8:e1:50:01:e4:d0:5a:8c:67:06:20:16:3e:6a:00:
21:cf:df:f2:53:27:79:9a:0f:57:3d:3f:52:62:26:
e8:97:0e:0b:59:b3:7c:35:22:34:27:1c:07:fd:b2:
0f:dc:f7:e7:cd:e9:4a:3f:30:99:60:a7:f5:e2:1b:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:06:F3:9D:50:A0:C5:D3:56:B1:90:61:A8:3D:CD:E4:1B:56:53
X509v3 Authority Key Identifier:
keyid:09:FE:CD:70:71:B7:27:DB:3D:12:F0:9E:FB:B4:54:E0:4D:4F:74:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/wBcG851QoMXTVrGQYag9zeQbVlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/72e3a1-906c-448b-98da-5a206e8b1369/1/Cf7NcHG3J9s9EvCe-7RU4E1PdD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.228.0/22
91.224.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:90:b4:66:30:36:f0:14:8f:8a:d8:aa:9d:89:81:89:88:e9:
15:36:74:ec:2c:43:e8:b0:ec:7f:91:15:77:67:bd:26:34:85:
2b:db:3c:08:c2:7b:a9:af:3f:be:8d:1c:10:46:dd:a5:50:24:
81:c7:45:a3:23:05:32:b9:ea:43:9a:16:a9:e1:71:4e:1a:37:
09:a4:26:96:3e:49:e9:19:dd:7a:73:9e:0d:b8:b8:9b:87:89:
bf:1b:d3:5c:95:4d:5e:bd:44:b3:94:af:fd:49:a5:3f:6e:74:
d1:1f:3f:cd:5c:16:94:13:01:0f:76:c3:23:b9:c0:05:f9:6c:
d8:e9:aa:d8:ff:38:a7:0a:a4:98:cc:2c:76:dc:45:22:77:21:
fb:fc:42:76:46:a2:1f:39:67:7d:ea:bd:88:be:96:bb:71:33:
9a:3e:47:56:04:c2:f0:37:bd:7a:86:33:88:b1:1a:fb:92:f7:
55:24:9a:a4:f3:80:7e:a0:e1:09:f9:0e:e7:c6:d5:d1:6f:42:
f3:8b:bb:8b:90:3c:0d:98:9d:96:ae:95:40:76:e1:0d:34:91:
a9:e2:50:04:a7:ac:56:31:07:8d:50:1d:62:d7:83:8d:9c:e0:
39:b8:70:cb:52:b1:88:09:62:3d:35:1d:b6:f5:86:23:db:76:
4e:f2:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:37 2024 by rpki-client on console-ams.rpki-client.org