Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/iF--_VvPmh_jxNciQBfq4l8umN0.roa
File: iF--_VvPmh_jxNciQBfq4l8umN0.roa (raw, json)
Hash identifier: NM6syPUSn8WsOSVGY76i+P+R4fSCYZq4n56DIlTKzks=
Subject key identifier: 88:5F:BE:FD:5B:CF:9A:1F:E3:C4:D7:22:40:17:EA:E2:5F:2E:98:DD
Certificate issuer: /CN=39ce4c0abe2785d46a5571852170370423b5c59a
Certificate serial: 01856DD3FD5B6EBBBC93AE2F6E861EFBB899
Authority key identifier: 39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/iF--_VvPmh_jxNciQBfq4l8umN0.roa
Signing time: Sun 01 Jan 2023 14:54:47 +0000
ROA not before: Sun 01 Jan 2023 14:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204062
IP address blocks: 91.103.149.0/24 maxlen: 24
91.103.148.0/24 maxlen: 24
91.103.150.0/24 maxlen: 24
185.115.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:fd:5b:6e:bb:bc:93:ae:2f:6e:86:1e:fb:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ce4c0abe2785d46a5571852170370423b5c59a
Validity
Not Before: Jan 1 14:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=885fbefd5bcf9a1fe3c4d7224017eae25f2e98dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:f4:89:89:59:3b:da:d6:47:b9:01:11:38:
23:02:8f:55:5f:3a:54:61:d2:61:60:a3:8c:5b:a6:
03:a2:7c:50:80:8f:c2:85:f1:85:29:78:65:e8:b5:
d5:b5:58:84:28:bc:c3:aa:9c:00:e8:94:06:32:cd:
72:25:11:82:67:0c:99:4d:7a:31:42:cc:bf:d8:98:
54:4e:0d:ce:8e:2b:b2:85:73:12:0c:93:38:bc:79:
86:ce:0b:7a:d5:bd:42:4f:33:a5:7d:bc:c1:43:ce:
06:6f:bb:bf:7b:d6:b9:6f:69:91:01:06:75:eb:a5:
a6:61:f8:57:36:c5:1c:70:2f:b4:7e:5c:b7:96:7a:
a3:53:ad:a3:e9:a0:94:d0:92:b8:7b:88:a4:89:b2:
35:51:d9:41:1f:25:cb:89:88:e9:07:bc:3f:6f:44:
11:d9:88:81:4b:7a:2b:cc:1d:d4:6d:a1:f3:c4:f2:
a1:43:b5:34:b8:69:60:dc:f8:0a:4c:51:d2:63:13:
de:5e:34:b7:2a:9d:3f:e7:22:41:e5:32:19:ec:32:
5e:02:52:ac:36:33:99:aa:ea:23:da:ae:91:43:3c:
d9:c6:34:4a:36:1c:21:6f:55:63:a8:d1:95:f4:11:
23:b5:63:9a:fc:88:e1:c9:8c:23:c5:74:ed:66:ff:
b1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5F:BE:FD:5B:CF:9A:1F:E3:C4:D7:22:40:17:EA:E2:5F:2E:98:DD
X509v3 Authority Key Identifier:
keyid:39:CE:4C:0A:BE:27:85:D4:6A:55:71:85:21:70:37:04:23:B5:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/iF--_VvPmh_jxNciQBfq4l8umN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/4923e9-4764-411c-8596-9f4429f3381e/1/Oc5MCr4nhdRqVXGFIXA3BCO1xZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.148.0-91.103.150.255
185.115.232.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b9:62:23:1f:5d:2a:eb:a6:7e:eb:9f:3f:d6:a3:40:a9:28:
ab:5a:0c:2d:21:c7:72:46:e7:7b:cc:97:60:d3:bd:66:a2:15:
bb:48:4e:da:92:08:e7:11:c8:79:dc:00:ad:cf:4b:5f:cc:ac:
e5:f8:fc:03:d0:7e:2e:97:ca:8b:66:28:f5:7b:74:4e:19:5e:
a2:67:40:72:b0:06:ea:8e:5a:c0:92:84:89:c9:53:01:8f:1c:
8d:9c:3e:2a:ee:b6:b1:65:44:3f:b7:01:14:aa:45:e4:c8:dc:
5a:47:57:5a:9d:2b:d1:ca:2b:9f:53:24:77:29:90:af:96:b9:
49:47:dd:d8:2c:28:82:16:09:81:c4:50:71:87:09:0f:69:8d:
d9:cf:bf:57:21:71:b3:ca:80:2d:23:2c:ab:2f:dd:39:b2:c6:
35:b5:f9:45:5e:97:8c:e9:75:11:5c:98:79:e2:4b:21:cb:00:
3e:ee:95:11:ef:c8:5c:9d:24:a9:26:ff:30:c7:8b:c7:94:85:
48:33:33:a2:06:fb:c7:aa:b9:cc:38:10:81:04:12:9c:ba:fc:
61:93:4f:ce:d0:18:1e:3a:ee:98:33:1f:08:1e:ce:7a:5c:39:
98:4d:c5:c7:05:ad:be:1a:01:e4:b3:12:5f:74:42:9f:2b:86:
37:ca:52:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:27 2024 by rpki-client on console-ams.rpki-client.org