Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/s9mwe9DW0gDNdBALuJT_SXpJ8wc.roa
File: s9mwe9DW0gDNdBALuJT_SXpJ8wc.roa (raw, json)
Hash identifier: q8bkHi9dRr/lMIMY2KSOcphw+hzZ6nLeMJ7ZC3J2syg=
Subject key identifier: B3:D9:B0:7B:D0:D6:D2:00:CD:74:10:0B:B8:94:FF:49:7A:49:F3:07
Certificate issuer: /CN=f59c1624934a585b462118f15a4b0542b0673b87
Certificate serial: 01856FF95A06071EF23D5389E51606C41919
Authority key identifier: F5:9C:16:24:93:4A:58:5B:46:21:18:F1:5A:4B:05:42:B0:67:3B:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZwWJJNKWFtGIRjxWksFQrBnO4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/s9mwe9DW0gDNdBALuJT_SXpJ8wc.roa
Signing time: Mon 02 Jan 2023 00:54:50 +0000
ROA not before: Mon 02 Jan 2023 00:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 79.110.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:5a:06:07:1e:f2:3d:53:89:e5:16:06:c4:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59c1624934a585b462118f15a4b0542b0673b87
Validity
Not Before: Jan 2 00:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3d9b07bd0d6d200cd74100bb894ff497a49f307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:32:b5:ea:3a:be:55:84:42:f3:1f:0d:cb:
13:34:35:1c:39:15:a3:47:59:98:02:2f:6e:3e:60:
12:93:45:2d:c7:89:fe:86:6a:8f:85:c9:be:9f:5e:
01:d7:73:aa:fe:c9:81:4a:6c:e4:7b:39:cd:89:e4:
fb:92:b7:d5:ee:97:5c:6f:93:e2:8d:90:38:14:9c:
0a:f5:21:c4:bc:de:ab:44:c7:79:d8:b3:3e:6a:06:
0e:9c:fe:32:5e:7f:90:31:02:2d:df:ec:73:9d:2c:
98:af:b4:f8:27:d3:7d:16:53:3b:30:6b:11:73:18:
26:b0:7c:45:34:9c:f5:47:b6:08:fd:ab:a6:89:cf:
0b:ec:a4:b9:db:74:0f:6b:3e:0b:a7:e5:4f:63:22:
9d:35:45:8a:5f:d6:bc:fd:0e:75:03:15:cc:6e:00:
f4:28:a8:7d:06:2b:bd:bb:2b:b9:38:64:51:f3:19:
fa:d0:e2:62:5c:32:f9:7f:12:1b:15:70:9a:ed:69:
00:dc:cc:ad:a6:22:10:b7:30:09:a9:26:03:7b:c7:
cc:ad:3a:6a:83:c5:9c:f7:97:73:7f:09:f1:7d:21:
31:de:a2:af:27:b4:36:56:65:2c:d1:95:71:07:3a:
27:e8:2a:23:4d:c2:71:25:35:a0:a9:47:68:ce:28:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:B0:7B:D0:D6:D2:00:CD:74:10:0B:B8:94:FF:49:7A:49:F3:07
X509v3 Authority Key Identifier:
keyid:F5:9C:16:24:93:4A:58:5B:46:21:18:F1:5A:4B:05:42:B0:67:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZwWJJNKWFtGIRjxWksFQrBnO4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/s9mwe9DW0gDNdBALuJT_SXpJ8wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c74ae3-fef2-47ba-83da-28c8eee26279/1/9ZwWJJNKWFtGIRjxWksFQrBnO4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.230.0/24
Signature Algorithm: sha256WithRSAEncryption
52:f7:08:fd:e2:a6:ab:38:e7:25:26:0e:c4:b6:61:26:a9:49:
53:9d:c6:34:aa:3b:f6:27:24:54:9d:0d:b4:a4:57:3f:85:d1:
27:cc:e0:1b:22:21:4b:b1:96:b9:cb:30:a7:a0:89:5a:33:9c:
ce:e4:7a:5f:83:79:ed:e8:bd:32:10:69:f0:8e:e5:87:21:47:
7f:d7:05:31:10:90:d7:f1:0a:1d:94:15:55:1a:9d:d1:1e:5e:
21:47:bc:ac:c6:1f:22:96:50:22:8c:cd:27:df:6a:65:15:99:
d9:49:d9:c0:e3:3d:88:df:54:2a:2b:05:c4:23:8f:4f:43:d5:
99:92:e1:65:01:7f:59:e2:e3:22:54:28:bd:5b:f1:d6:94:66:
a4:9e:a2:92:50:2b:9d:b2:05:e1:fa:ba:2e:88:a9:0b:bf:ec:
61:87:ca:79:a0:e0:47:fe:3b:5f:ca:6d:77:8c:bf:73:f1:6d:
d2:35:0a:d1:3b:85:4a:44:6a:f2:f1:a6:0f:86:30:08:a8:68:
35:87:6a:7e:a6:f7:ec:f4:8f:c7:ac:07:12:71:b9:fa:ff:2e:
0c:d2:01:ef:e2:35:60:dc:e5:22:41:15:f6:c1:81:3e:15:4c:
90:14:5c:24:3b:5c:84:14:f6:23:a4:41:2a:4b:d3:78:4b:73:
cc:68:1a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:26 2023 by rpki-client on console-fra.rpki-client.org