Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/efrxxFpdjAPlM5qIPDF6u0ATxNk.roa
File: efrxxFpdjAPlM5qIPDF6u0ATxNk.roa (raw, json)
Hash identifier: 2NfMcs64o1sIvsdR6EgPZASFrVXaFbusFkDC21QVAvU=
Subject key identifier: 79:FA:F1:C4:5A:5D:8C:03:E5:33:9A:88:3C:31:7A:BB:40:13:C4:D9
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 01856DC1BF051BE9583056B5276225C35EF9
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/efrxxFpdjAPlM5qIPDF6u0ATxNk.roa
Signing time: Sun 01 Jan 2023 14:34:52 +0000
ROA not before: Sun 01 Jan 2023 14:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197263
IP address blocks: 91.225.80.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:bf:05:1b:e9:58:30:56:b5:27:62:25:c3:5e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Jan 1 14:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79faf1c45a5d8c03e5339a883c317abb4013c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:de:c7:bd:af:c0:e5:cd:39:d4:09:33:d2:
05:38:ba:60:5c:eb:c4:71:d2:a4:6f:cf:9e:4f:60:
26:01:7f:62:69:bc:7a:14:7d:31:18:f1:92:3a:60:
1d:06:3f:c0:fa:65:d4:84:69:0b:c0:ab:d3:95:fb:
d5:f8:4e:e4:54:56:21:29:19:8f:ce:8d:0b:d5:b7:
e3:46:15:39:79:36:ac:78:4a:52:07:1e:32:67:25:
46:10:7e:3b:94:16:77:94:7f:a5:e4:46:f8:ec:2a:
f9:4b:f8:9e:d6:cd:85:87:4c:7e:de:34:a0:ca:20:
f4:13:89:c6:6a:3b:ad:82:27:39:69:bd:66:be:74:
e7:23:07:f9:95:f9:36:b5:ef:70:72:62:ed:9f:41:
46:e8:38:2f:b0:c8:ad:41:67:1f:51:5e:b5:23:a9:
7f:54:ee:30:ee:03:af:8b:57:d1:c9:f8:71:44:71:
2d:f9:e7:7c:0e:0d:8a:d2:29:a6:5a:1c:0a:32:41:
b0:be:c5:38:5b:ed:e0:f9:c5:f1:e4:21:c8:cb:fb:
12:b9:3d:84:0c:ef:c2:c4:92:f2:82:76:b4:f2:cf:
a6:89:80:50:2d:3e:f7:2f:1c:ae:6e:a3:81:6c:02:
43:2a:fa:31:9d:00:52:f5:71:73:f0:e9:ab:de:78:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:F1:C4:5A:5D:8C:03:E5:33:9A:88:3C:31:7A:BB:40:13:C4:D9
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/efrxxFpdjAPlM5qIPDF6u0ATxNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.80.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5b:bd:58:56:9f:d6:6e:a1:1c:e5:0b:97:72:31:45:29:9b:
40:93:ff:37:fa:d2:2e:0a:31:1f:61:bb:b1:64:84:7c:f7:ba:
9c:03:8c:53:af:8d:a3:f8:1a:5c:69:d0:17:b1:38:7d:3a:d4:
cf:17:fc:59:33:fe:c0:4c:03:51:64:bd:30:34:d2:50:25:b6:
4d:f1:0f:bc:55:de:d8:ca:2f:2d:3e:ee:e7:32:e0:af:9c:23:
da:4b:ec:28:57:f7:18:88:9c:38:a4:e4:c8:20:b5:25:6d:c4:
f1:61:99:87:d0:e0:db:9a:7b:fb:e9:93:66:b8:0b:5f:de:99:
be:01:20:2f:30:9c:dc:c5:34:16:57:05:aa:53:1c:79:5f:c3:
ed:a3:84:92:f8:ab:6b:41:fa:81:57:c8:ac:c5:5e:99:4f:71:
dc:f1:9e:56:e0:1a:c6:b3:97:96:57:67:36:7f:20:f2:84:80:
7f:06:72:1c:2b:e2:bf:5d:ac:60:66:ac:03:9b:cf:ab:2c:e8:
fa:a0:73:cb:a9:7f:ae:25:21:4e:aa:4d:d4:e2:2f:fb:8e:80:
e8:a4:f4:54:1c:c0:10:8e:0c:8c:53:6b:55:c8:de:36:a8:1d:
4b:1a:6c:89:04:43:f1:84:45:ba:47:06:1c:4e:3f:44:9a:10:
23:34:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:03 2024 by rpki-client on console-fra.rpki-client.org