Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/wC9RBM_UeqGAvsBfkt-MDy-IWVE.roa
File: wC9RBM_UeqGAvsBfkt-MDy-IWVE.roa (raw, json)
Hash identifier: 48h4eLYm6brLQX3LBSYAoufAaJDbR+bUVnFc2JT+08E=
Subject key identifier: C0:2F:51:04:CF:D4:7A:A1:80:BE:C0:5F:92:DF:8C:0F:2F:88:59:51
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01856F8B75582DE42A98372B75B3951C40F1
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/wC9RBM_UeqGAvsBfkt-MDy-IWVE.roa
Signing time: Sun 01 Jan 2023 22:54:48 +0000
ROA not before: Sun 01 Jan 2023 22:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208937
IP address blocks: 91.231.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:75:58:2d:e4:2a:98:37:2b:75:b3:95:1c:40:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Jan 1 22:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c02f5104cfd47aa180bec05f92df8c0f2f885951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:88:4e:b6:73:23:0d:3f:ca:cd:0d:fa:1d:
5c:c3:ec:dc:44:fc:02:b7:5e:f0:3f:7f:e4:f7:db:
68:5e:71:5c:5f:b1:1a:94:dc:85:d8:fd:b7:3b:6a:
8d:a5:44:26:e2:0b:c4:f3:06:94:c7:4a:9d:c9:b2:
b4:fe:66:22:3a:ee:e1:46:c6:a1:5c:dc:ad:1b:ea:
f0:d1:9d:70:58:62:b4:9e:06:70:7b:14:90:dd:9d:
25:cd:a1:49:b8:4e:10:d8:83:17:2a:d5:8c:5d:0f:
97:87:12:73:df:62:24:f9:2a:c2:78:89:f4:67:ee:
64:f0:70:8f:69:c0:21:f0:a0:88:ef:e9:4f:43:e5:
c7:6a:59:dc:f1:8b:b7:56:84:1b:a3:f8:9e:1b:27:
03:1a:6c:b3:96:f9:71:8d:3a:9d:a8:7a:d8:57:c7:
8c:ee:f0:ba:8e:f9:f4:6a:cc:79:49:8f:c4:a8:c7:
07:d9:71:7b:6a:b9:80:f8:a4:76:87:56:e7:fc:38:
47:77:f8:48:c4:c2:e8:c6:87:98:23:95:79:bd:78:
41:b7:3f:0b:56:94:9a:f8:54:54:07:a5:76:cf:a4:
39:8a:0f:a2:e6:69:88:ce:4e:81:9f:8e:d4:4e:2b:
d9:89:16:7f:95:31:c6:9f:69:71:55:f2:6e:48:9d:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:51:04:CF:D4:7A:A1:80:BE:C0:5F:92:DF:8C:0F:2F:88:59:51
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/wC9RBM_UeqGAvsBfkt-MDy-IWVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.126.0/24
Signature Algorithm: sha256WithRSAEncryption
83:35:8a:a9:24:d7:e7:0c:52:38:2f:2b:7f:b9:8a:1f:a2:31:
98:e7:7f:22:8d:9c:5c:01:71:c9:63:0c:99:12:aa:09:3c:94:
f3:af:21:32:b6:7c:86:98:2d:d4:35:c3:ee:f6:d1:3a:88:31:
3c:db:16:da:07:10:a4:f7:f5:be:76:8c:ba:8c:44:ab:48:89:
c7:05:6a:81:81:e5:b7:c9:cc:1b:a3:0e:55:44:7a:52:13:50:
ee:d6:ef:d9:47:8c:db:17:3d:57:d2:fe:6c:d0:48:b7:43:08:
2c:b1:63:e0:5f:41:e3:08:5a:65:4c:99:b8:99:69:91:2b:ef:
f0:92:e0:9a:16:81:70:31:a3:ee:4c:3e:3e:46:8a:50:4a:8b:
67:ba:08:a6:56:b8:c5:0f:e3:74:eb:94:e3:8c:85:71:d6:22:
35:d5:1e:cd:d5:0c:4e:7c:6c:98:53:8a:5e:61:c6:57:6b:aa:
3a:47:2a:2c:b3:a3:14:1a:9a:26:b1:00:f5:fa:92:1c:c8:45:
49:05:31:08:24:4b:82:f5:b3:64:9f:1f:b5:81:4e:e6:77:2c:
f5:6e:63:1c:51:d8:66:31:19:d3:e0:a9:92:67:86:38:fd:19:
b9:ef:e3:bb:4a:e3:c0:9e:b3:28:e8:34:97:c3:54:8a:f4:85:
57:56:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:50 2024 by rpki-client on console-fra.rpki-client.org