Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/o6NgJZRoTPwYp5UWiMJSN0WgXuI.roa
File: o6NgJZRoTPwYp5UWiMJSN0WgXuI.roa (raw, json)
Hash identifier: oTahOLBmNtapkK/fJACZZ7nbjMYdsOWz38nMRj7iDMg=
Subject key identifier: A3:A3:60:25:94:68:4C:FC:18:A7:95:16:88:C2:52:37:45:A0:5E:E2
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 01856D418E58F3AED21DDF0795DF928C9EBC
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/o6NgJZRoTPwYp5UWiMJSN0WgXuI.roa
Signing time: Sun 01 Jan 2023 12:14:50 +0000
ROA not before: Sun 01 Jan 2023 12:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62239
IP address blocks: 91.216.247.0/24 maxlen: 24
213.255.198.0/24 maxlen: 24
2a04:9300::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:8e:58:f3:ae:d2:1d:df:07:95:df:92:8c:9e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Jan 1 12:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3a3602594684cfc18a7951688c2523745a05ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:68:ea:85:97:35:10:15:1e:f8:ef:d3:50:
76:b2:dd:90:26:d1:8b:9d:cb:a1:52:70:da:7a:10:
af:d4:34:2b:93:e9:ff:11:d9:c9:54:fb:5e:54:80:
3d:24:15:46:d7:1e:6a:20:c0:ce:68:3e:b6:aa:ae:
08:8d:ec:e1:0d:6e:96:c1:21:5f:62:bf:92:7c:9c:
80:71:21:33:36:a9:9c:2d:1e:8e:96:e6:27:d0:79:
b0:81:62:f0:a7:13:e1:7b:d9:0a:01:d0:4e:d5:40:
ea:3f:4f:9a:09:99:a2:de:29:b7:77:58:25:a3:63:
76:ae:8d:05:10:ed:71:65:84:78:6a:32:2f:c6:05:
10:a1:18:b1:e4:ad:41:17:a2:77:5a:d0:60:e0:c1:
51:d4:49:7b:be:45:89:10:57:e1:e7:bf:59:5f:95:
21:7b:f1:df:1f:a6:bf:9f:64:67:45:b8:57:33:0b:
ce:79:ab:c2:bf:5b:52:c7:aa:c2:18:47:4e:51:3b:
84:eb:90:d3:62:5c:ec:b8:85:8e:24:5e:8b:18:21:
74:3e:5f:87:af:65:32:1b:54:06:0c:53:c1:2e:81:
ee:e0:d5:ae:6a:4e:b3:20:52:45:c6:0e:06:35:1d:
b6:9c:bd:84:fe:c7:15:da:3b:fd:a9:48:69:90:d9:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A3:60:25:94:68:4C:FC:18:A7:95:16:88:C2:52:37:45:A0:5E:E2
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/o6NgJZRoTPwYp5UWiMJSN0WgXuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.247.0/24
213.255.198.0/24
IPv6:
2a04:9300::/32
Signature Algorithm: sha256WithRSAEncryption
89:5b:5d:2a:f7:fe:70:06:9f:b4:2a:5a:2b:66:83:f7:83:6d:
52:ea:11:e8:e5:e9:3c:47:ed:94:d2:09:75:22:0a:3a:b4:b7:
8b:f2:d7:8f:fc:c4:56:84:8b:93:70:1a:e4:f0:9a:fb:fb:11:
7b:f0:06:97:af:ea:a5:2e:ed:98:45:aa:48:52:11:ed:5a:8f:
fa:b4:9b:1c:8d:a5:ef:be:2c:f6:57:b0:38:b2:73:d5:c2:45:
50:79:9e:96:e2:70:d9:fc:2d:b6:7f:94:f0:d1:86:24:97:4c:
19:98:34:d3:b5:6c:9e:6f:64:41:b8:9c:15:d2:10:99:ad:0f:
85:3b:62:31:22:7b:c3:b8:a9:88:dc:14:93:09:77:1b:0d:35:
28:4c:67:68:18:8c:f3:a7:f9:3f:29:88:77:a0:90:c0:03:d0:
49:f7:f2:69:e2:7c:d6:5d:3a:0f:39:f5:8d:75:17:5f:99:b7:
8a:13:06:20:e8:70:24:b2:0f:e6:0c:45:58:81:0d:4a:a0:a8:
14:39:53:ac:d4:33:8e:6a:f4:0c:a5:43:f8:ac:e2:ca:6a:12:
8d:29:1b:3f:09:2f:6d:bf:11:2e:89:d9:83:86:16:85:a8:4e:
6f:90:25:d8:70:19:00:31:5f:eb:ec:cd:74:13:b4:04:b0:84:
51:2a:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:26 2024 by rpki-client on console-ams.rpki-client.org