Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/dX0EHTcN8gQ30vrnBPmFMeiuVCI.roa
File: dX0EHTcN8gQ30vrnBPmFMeiuVCI.roa (raw, json)
Hash identifier: RCFCzevBqHvEnh34glEEZeXYIqEwLzCFK2eAcRJ8X9I=
Subject key identifier: 75:7D:04:1D:37:0D:F2:04:37:D2:FA:E7:04:F9:85:31:E8:AE:54:22
Certificate issuer: /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial: 01856FB1235EC1EEF04144F11B379CD2503C
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/dX0EHTcN8gQ30vrnBPmFMeiuVCI.roa
Signing time: Sun 01 Jan 2023 23:35:57 +0000
ROA not before: Sun 01 Jan 2023 23:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47903
IP address blocks: 91.208.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:23:5e:c1:ee:f0:41:44:f1:1b:37:9c:d2:50:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Validity
Not Before: Jan 1 23:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757d041d370df20437d2fae704f98531e8ae5422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:a4:27:9d:1b:0b:a1:03:12:92:7c:1c:fb:
f3:f5:84:6e:fe:e6:5b:67:25:2c:39:a3:ec:0a:d1:
6c:c0:16:dd:ad:9a:56:a4:44:f1:d5:e5:62:7d:3e:
24:87:61:13:bb:74:ec:f6:a4:cf:56:06:3d:44:a4:
fc:97:47:5a:8e:9e:fb:8c:39:f5:2b:32:4c:f0:62:
49:ae:84:67:ee:a8:bf:40:56:69:a7:89:71:82:8a:
48:af:c7:55:a5:56:6b:e8:b3:41:7c:d6:e5:e4:fe:
d3:71:05:de:63:22:bd:3e:6c:45:c4:e1:4d:c8:de:
36:df:41:76:c8:22:00:8e:e1:84:11:1d:f7:11:f8:
a7:c4:fe:e7:b7:73:9c:f2:43:ef:eb:4d:67:74:e9:
6c:9d:32:ee:53:7b:30:37:74:cd:f1:51:e9:a9:40:
21:d8:03:89:1b:90:91:65:8c:1f:7b:15:e1:ef:e5:
6d:00:c6:a8:89:a1:0d:51:c4:31:b5:85:39:00:f9:
99:68:82:dc:12:4d:cb:46:08:b0:71:3b:ef:35:2c:
d6:12:7f:27:89:a1:e2:06:1e:bd:ae:95:ad:77:c4:
68:49:c6:87:19:9a:14:f4:ea:60:75:d4:be:cf:43:
56:0b:04:20:9b:96:63:de:8a:b6:5b:e8:05:f5:dd:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7D:04:1D:37:0D:F2:04:37:D2:FA:E7:04:F9:85:31:E8:AE:54:22
X509v3 Authority Key Identifier:
keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/dX0EHTcN8gQ30vrnBPmFMeiuVCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:73:8a:fd:89:e3:f4:49:98:07:a1:f9:5b:4b:13:6d:60:91:
e6:52:37:64:2a:d4:fc:a0:c6:63:cc:89:b7:66:19:b8:23:18:
52:6b:3c:5b:d8:a7:88:5e:09:2e:79:d8:99:21:e3:58:6c:bb:
41:10:92:d9:76:7d:83:8b:09:75:4f:c8:0e:f5:69:37:1c:03:
10:53:45:9f:27:63:5f:f2:36:86:59:8b:8c:c4:85:ce:f2:5e:
37:55:12:4f:a1:f7:cc:87:a1:2c:89:cb:eb:b2:ac:53:55:bd:
94:f7:ff:fa:e8:2e:be:ca:95:4f:81:fc:7f:1e:8d:ca:a1:5c:
32:97:e8:30:83:46:d7:7e:7b:4b:7f:5a:b2:57:db:01:64:2e:
9d:84:3e:1b:18:59:d0:28:63:37:f6:45:ff:26:37:5c:4f:6c:
11:48:04:fb:68:bf:47:2e:a0:f9:65:3f:73:34:85:46:5c:d1:
4e:be:84:56:37:f8:f5:07:d4:4f:fe:91:57:ab:bc:d4:36:05:
f3:d1:30:07:1a:7b:7f:bd:4b:10:b7:20:e0:b0:d5:a9:46:3d:
c0:7a:23:4a:78:14:a7:e4:95:ac:92:72:9b:7b:cb:99:77:f1:
b6:7b:5d:28:4f:d1:45:df:f5:06:10:7d:45:35:b0:8a:c1:84:
5c:ff:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:08 2024 by rpki-client on console-ams.rpki-client.org