Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/bQF94lMgKTU9MxabMVltWo2gEt4.roa
File: bQF94lMgKTU9MxabMVltWo2gEt4.roa (raw, json)
Hash identifier: j5ptAzuaBEb/qqhLPOGr6i63PJFussA/kaqT/NpEXqM=
Subject key identifier: 6D:01:7D:E2:53:20:29:35:3D:33:16:9B:31:59:6D:5A:8D:A0:12:DE
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 01856D9D359F6C4D6B7A50D00728541C4976
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/bQF94lMgKTU9MxabMVltWo2gEt4.roa
Signing time: Sun 01 Jan 2023 13:54:57 +0000
ROA not before: Sun 01 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 91.204.183.0/24 maxlen: 24
91.204.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:35:9f:6c:4d:6b:7a:50:d0:07:28:54:1c:49:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 1 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d017de2532029353d33169b31596d5a8da012de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:dc:d3:bd:1e:dc:73:64:25:89:f6:48:91:
ee:b4:e9:a8:35:39:4c:6a:8e:1b:52:0d:46:c1:61:
a4:2f:51:aa:b5:1c:a9:39:c2:7b:44:91:25:25:b1:
06:a2:84:40:fd:ca:7d:6b:76:9c:3d:d7:da:32:fb:
80:df:cb:f1:81:e2:98:c9:43:a6:4d:fa:ac:5f:91:
9e:22:9d:c8:bd:12:94:57:ae:e1:70:03:cd:bb:81:
77:f9:b8:f5:76:5a:e8:e1:f8:9b:e2:be:09:2d:6e:
cb:cf:5e:4b:ee:d3:40:d6:55:c9:e1:0c:d1:61:28:
5d:68:cb:c9:f1:56:f1:98:71:06:3c:7c:2e:84:7b:
09:a6:81:c4:46:e4:5a:c3:bd:ba:45:f0:68:c6:fc:
3b:79:0d:de:43:7c:9a:64:a6:d9:06:61:dc:af:16:
a1:61:ef:ba:1c:90:e5:46:2c:b3:12:84:6f:c3:80:
a5:ec:70:62:45:2a:e3:82:0d:0f:21:14:5b:a0:58:
00:5d:8c:a9:80:9c:cd:a1:fd:0a:c7:03:67:29:c7:
de:a6:66:7f:9d:c1:2c:47:b7:6b:eb:d1:bf:92:5e:
fe:65:0f:67:d0:42:be:4f:9e:f8:0f:3c:d1:42:19:
db:46:28:26:1b:8c:95:69:d5:39:a6:a1:b3:77:b1:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:7D:E2:53:20:29:35:3D:33:16:9B:31:59:6D:5A:8D:A0:12:DE
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/bQF94lMgKTU9MxabMVltWo2gEt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.182.0/23
Signature Algorithm: sha256WithRSAEncryption
33:4c:92:88:74:65:dc:2e:a4:59:5d:3d:da:41:65:12:f5:e5:
fe:e2:fc:ab:15:12:29:f5:78:e8:76:66:b5:80:a7:9a:d4:35:
ab:05:fd:f2:0e:b9:3f:85:d7:9b:53:3b:6a:84:b4:b6:6b:57:
8f:ce:86:5a:71:17:31:76:32:32:7e:2e:4a:ce:34:05:18:fe:
1d:bb:8f:8c:1c:a6:1e:8b:e2:86:78:9b:f6:07:9d:d8:af:64:
ac:c3:9a:68:95:1d:1e:de:32:a6:41:87:3c:33:6e:24:fa:c6:
58:d3:fb:25:c8:c0:02:cf:5c:38:31:f0:14:c6:0e:51:22:36:
7a:12:55:4f:29:79:8f:98:e4:3f:cf:48:87:14:2e:db:f2:b5:
56:0c:36:e7:5b:46:d5:fc:18:c7:dd:ba:8d:fc:5f:59:ab:70:
da:80:bb:0c:94:92:4e:e7:35:bc:2d:ff:ab:3c:50:61:df:22:
79:bb:fe:cf:89:90:26:ad:1b:4f:89:c3:a4:35:fe:fb:24:01:
cc:69:31:e0:50:1e:49:50:db:3b:32:34:62:be:16:43:02:ee:
47:d7:b4:38:30:3e:da:f5:54:3a:d7:fa:ad:ea:e8:7a:ca:2a:
f7:25:bf:ed:f8:7b:31:6a:90:6e:dd:e6:bb:c6:71:d6:ee:37:
cb:91:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:03 2024 by rpki-client on console-ams.rpki-client.org