Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/i8pleLFYAxqWB7drTlDCpaIaR_k.roa
File: i8pleLFYAxqWB7drTlDCpaIaR_k.roa (raw, json)
Hash identifier: o7vygDC7gY/cSAeH7x8C90Ciirj9/GgSLcOaDkPMM9k=
Subject key identifier: 8B:CA:65:78:B1:58:03:1A:96:07:B7:6B:4E:50:C2:A5:A2:1A:47:F9
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0189D5AE762F5F80F489B4465A6019143755
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/i8pleLFYAxqWB7drTlDCpaIaR_k.roa
Signing time: Tue 08 Aug 2023 15:05:27 +0000
ROA not before: Tue 08 Aug 2023 15:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44929
IP address blocks: 91.203.29.0/24 maxlen: 24
91.203.28.0/23 maxlen: 23
91.203.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:ae:76:2f:5f:80:f4:89:b4:46:5a:60:19:14:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Aug 8 15:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bca6578b158031a9607b76b4e50c2a5a21a47f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:7b:77:3a:c5:01:a6:5d:ec:5d:16:56:97:
55:52:cb:a7:7a:95:9d:18:98:de:85:df:0d:8f:76:
19:0e:e5:ac:2a:c3:d5:cb:c4:d5:4b:a4:52:40:af:
47:fb:02:60:7b:72:6c:56:19:06:bb:72:7d:9c:bb:
ba:af:24:60:4b:7d:1a:e9:b1:4b:83:9a:cf:28:d8:
1d:89:f0:4a:53:a0:8a:46:a7:22:64:c8:a0:f3:28:
8d:fc:b9:25:c8:19:96:3c:dd:cf:78:e4:c0:f2:92:
77:d2:9c:a6:7f:e1:0a:8c:8d:84:e8:72:7d:0c:2a:
e9:78:d5:1c:70:4b:d7:aa:d2:a9:95:97:86:98:d1:
69:33:ae:bf:22:27:d0:8d:c4:5d:e5:ba:45:e6:04:
b5:09:80:df:15:91:29:da:0e:97:f9:a2:ee:68:7a:
43:9a:38:b4:81:26:ff:53:55:33:c2:92:17:dc:27:
25:f6:2e:2d:ca:d7:7c:78:89:49:76:df:c9:a5:8b:
f9:bd:14:9c:15:83:7b:49:53:77:c2:b8:51:a9:36:
a9:a3:82:a2:18:a4:74:6c:03:95:53:ac:b0:fe:01:
38:f9:08:96:96:61:33:31:5b:17:ab:e2:28:85:6b:
ec:05:fa:c4:dc:0e:cc:f9:6b:9a:5e:5b:12:19:b6:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:65:78:B1:58:03:1A:96:07:B7:6B:4E:50:C2:A5:A2:1A:47:F9
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/i8pleLFYAxqWB7drTlDCpaIaR_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.28.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:d5:48:1b:2a:59:92:f3:5a:f9:8b:ca:7a:bc:bf:b1:e1:64:
b7:7d:10:11:47:2c:ef:a7:a2:ca:c1:c6:34:a2:68:ca:3e:e7:
47:df:e6:57:28:3e:41:17:43:72:58:d1:4f:1a:34:48:b9:c6:
57:47:b5:20:56:8e:d8:53:6b:53:a3:7f:cc:2e:a2:2f:20:68:
eb:56:f4:5b:f7:86:ca:8d:d9:34:89:03:3d:2a:c9:dd:f7:d3:
f3:0a:fc:b4:a4:f9:cd:af:33:0b:90:a3:86:9c:b4:5d:b0:91:
ac:a2:a0:e0:f9:d2:ff:48:bb:ca:ab:ad:bd:87:7f:a8:fc:e1:
3e:95:8e:e0:7b:37:c7:b4:14:61:a7:97:ee:84:3a:ac:fa:4f:
cd:5a:2f:8f:bd:f7:aa:84:67:72:e1:b4:c6:9b:28:48:b4:16:
63:38:01:d7:ba:8b:c4:87:0b:c5:5c:1e:4d:94:51:05:93:0b:
b2:7a:f4:cb:9c:1f:cc:bd:f0:9a:2a:97:11:cc:97:e0:f0:f8:
77:a4:1d:b4:d7:1a:7c:a5:eb:03:92:b8:1b:23:21:b6:59:39:
cb:f3:1d:a6:96:b7:02:82:e7:71:a5:c5:3c:9f:a2:5b:49:85:
9b:36:7f:91:fa:aa:78:a9:7f:93:c9:cc:b6:d1:da:b0:5f:c9:
32:28:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:28 2024 by rpki-client on console-fra.rpki-client.org