Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/l9anZiEuNyPh9i7KSIxJVzT9F7Y.roa
File: l9anZiEuNyPh9i7KSIxJVzT9F7Y.roa (raw, json)
Hash identifier: Frhh+UhZ4vI22Vz9qtu3h23AsOqJhltfMcFxoDH5nz8=
Subject key identifier: 97:D6:A7:66:21:2E:37:23:E1:F6:2E:CA:48:8C:49:57:34:FD:17:B6
Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial: 01856F7008E22DD5D2B4C5F1B2F6237A6231
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/l9anZiEuNyPh9i7KSIxJVzT9F7Y.roa
Signing time: Sun 01 Jan 2023 22:24:51 +0000
ROA not before: Sun 01 Jan 2023 22:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48312
IP address blocks: 194.26.116.0/24 maxlen: 24
91.207.140.0/23 maxlen: 24
91.202.234.0/23 maxlen: 24
2a11:1a00::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:08:e2:2d:d5:d2:b4:c5:f1:b2:f6:23:7a:62:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Validity
Not Before: Jan 1 22:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d6a766212e3723e1f62eca488c495734fd17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7f:7c:53:78:c0:d5:78:8c:36:73:6b:d8:ef:
53:72:10:5c:6f:7f:3f:2e:f2:76:71:5e:c1:e9:57:
7d:39:68:4d:d1:dc:3c:0f:e4:e4:be:a5:c6:f1:50:
1c:04:02:7a:a3:0f:de:b5:bc:3b:87:c7:db:70:09:
8a:20:8a:84:97:87:59:27:4f:aa:02:90:ec:8c:6d:
78:57:63:8c:cb:ab:4e:37:9f:53:bd:cf:15:a0:01:
35:44:17:55:ad:83:f9:96:d7:c5:20:72:a6:ff:e1:
89:f0:d4:ae:26:a6:d0:eb:f7:8b:ec:ef:f8:f2:fb:
bf:c9:0e:8e:12:30:a4:44:04:57:7c:10:7d:d1:a8:
fb:8e:bc:07:51:7e:3f:f8:5c:85:d0:9b:d4:44:e6:
b5:19:0a:e6:0e:22:86:82:b4:47:6e:ef:b6:5b:58:
91:c2:fa:e2:44:9c:f7:f6:62:66:75:62:8d:ed:a5:
84:74:d0:5d:94:4a:04:4e:ab:e6:e6:4e:b6:4e:9a:
5d:2c:53:29:e5:c8:c5:d0:e9:ec:c9:f9:a2:ff:1e:
eb:dd:13:08:5c:96:04:47:b3:22:04:61:83:11:44:
da:4b:ca:50:f3:bd:28:fa:8f:6d:50:93:9e:ac:56:
8e:3e:53:2d:a1:10:fc:04:c7:21:50:b8:42:74:76:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:A7:66:21:2E:37:23:E1:F6:2E:CA:48:8C:49:57:34:FD:17:B6
X509v3 Authority Key Identifier:
keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/l9anZiEuNyPh9i7KSIxJVzT9F7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.234.0/23
91.207.140.0/23
194.26.116.0/24
IPv6:
2a11:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:06:cb:65:f0:0f:0f:6b:b7:38:21:31:dd:46:a8:85:9f:0c:
86:bd:5e:8b:cc:71:bb:8b:56:8c:53:d7:a4:a3:3e:9f:1e:f8:
52:95:80:f3:1e:a0:d3:53:16:ab:35:e0:77:d3:3b:cc:10:60:
05:ef:bf:77:7a:41:59:03:8c:4d:69:7a:bb:bc:56:58:d3:97:
7e:d2:44:f6:bf:af:c2:03:9a:56:34:02:5e:3e:16:8f:21:4a:
4d:22:bf:f8:d4:0c:10:70:24:e4:06:16:89:bf:e1:c7:2c:b0:
40:81:08:44:aa:77:f3:7d:34:85:29:31:6b:09:8a:0b:c6:f2:
70:44:1c:7e:c4:3a:4c:5d:ca:e8:e2:d8:c4:14:b9:63:30:13:
27:94:79:d6:0f:fa:01:3c:cc:5a:32:ef:11:6d:d4:28:18:bd:
b3:b0:81:f0:3d:35:46:a9:6f:a4:e0:88:4b:f6:46:69:60:b9:
95:5b:f7:92:60:72:e0:5c:5b:ef:d4:3c:b5:a3:ea:f6:da:82:
94:12:e6:2b:36:6a:48:6e:c3:a6:5c:fe:84:3f:16:1b:25:62:
66:13:0f:f8:0e:5d:8c:f5:11:99:2b:b8:90:d8:3d:a3:72:8c:
77:d8:6f:d4:73:68:9d:7b:c5:c7:b4:fc:dd:71:77:30:a3:89:
40:f7:84:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:08 2024 by rpki-client on console-ams.rpki-client.org