Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/RTKAGCvTqXg6CDKVHJykyCpY_1Y.roa
File: RTKAGCvTqXg6CDKVHJykyCpY_1Y.roa (raw, json)
Hash identifier: 8be8JlcQGMjk8TNBnlWidCQU3nmW1rByKKgKPilSh78=
Subject key identifier: 45:32:80:18:2B:D3:A9:78:3A:08:32:95:1C:9C:A4:C8:2A:58:FF:56
Certificate issuer: /CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Certificate serial: 01876F21E0712B9948C69C872F6A0AC9928B
Authority key identifier: 48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/RTKAGCvTqXg6CDKVHJykyCpY_1Y.roa
Signing time: Tue 11 Apr 2023 07:05:03 +0000
ROA not before: Tue 11 Apr 2023 07:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.179.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:21:e0:71:2b:99:48:c6:9c:87:2f:6a:0a:c9:92:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480bf1c136ecffd312fc39ba3c82aff939de24f9
Validity
Not Before: Apr 11 07:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453280182bd3a9783a0832951c9ca4c82a58ff56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:22:b6:47:21:f6:f5:95:f2:2b:45:20:d2:
af:e6:a7:b4:47:5b:6d:71:c4:14:2e:2b:c3:22:76:
27:26:55:fb:ec:9d:7a:98:fc:2e:66:e0:09:87:d5:
a1:9b:b4:a6:ff:3d:d7:f8:39:35:64:ad:14:c5:99:
0a:4c:09:b8:e4:2a:7f:46:04:24:73:28:dd:a5:05:
7a:4a:61:23:eb:1f:25:8f:85:d8:ce:c0:6e:8a:bf:
ec:7a:9c:41:ab:c6:f5:fd:05:4e:31:a0:dd:49:20:
0e:03:dd:e2:61:50:ad:2b:60:d2:77:73:62:be:9d:
ec:e0:28:85:dd:de:8f:c4:da:5f:3d:72:0b:d9:3a:
8c:8c:1b:33:d1:eb:16:dd:fc:59:59:3d:25:8f:52:
15:17:10:14:79:22:bb:b1:be:93:7d:d9:27:e0:a5:
99:78:41:bd:83:44:38:31:aa:e4:ef:c3:d2:61:0b:
1a:39:5e:0b:59:9d:7b:c1:40:11:e8:80:03:f5:cc:
12:0e:81:4d:ec:99:e8:e2:ca:29:6d:f1:4f:02:fe:
b4:b6:b7:e2:17:15:94:41:27:f8:2c:83:5d:cb:2e:
b6:37:2b:84:eb:f7:95:0c:8d:51:9d:1d:7b:76:70:
0a:51:bc:eb:7c:bd:78:16:fa:1b:de:79:fb:25:70:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:80:18:2B:D3:A9:78:3A:08:32:95:1C:9C:A4:C8:2A:58:FF:56
X509v3 Authority Key Identifier:
keyid:48:0B:F1:C1:36:EC:FF:D3:12:FC:39:BA:3C:82:AF:F9:39:DE:24:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAvxwTbs_9MS_Dm6PIKv-TneJPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/RTKAGCvTqXg6CDKVHJykyCpY_1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/18bda0-a885-4eb4-a00b-5be2451490f1/1/SAvxwTbs_9MS_Dm6PIKv-TneJPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.91.0/24
Signature Algorithm: sha256WithRSAEncryption
91:10:65:47:00:c0:d5:33:a7:f4:cf:38:a5:92:0b:f2:9b:64:
db:c5:cb:7b:fc:65:d4:21:04:3c:df:58:19:70:9f:23:e1:17:
5d:44:e1:ef:00:ea:d8:8d:77:eb:62:e9:36:e0:22:92:3b:05:
13:e9:ca:74:c9:a3:a4:0b:e8:c1:42:37:7b:1d:0a:0d:a6:00:
e1:76:7a:a1:ab:a8:c7:49:ba:6a:ce:cf:3e:1a:c6:7a:c3:64:
22:03:0e:a2:f7:40:8d:2f:04:97:78:31:3d:51:ab:b8:1f:26:
a3:39:b4:66:f8:9a:67:f1:3b:e0:f8:a7:20:e0:d2:b0:ab:98:
a2:e1:0f:00:19:c3:b8:ec:de:e2:17:d2:3c:9d:28:74:65:ce:
a2:53:96:a3:02:1b:bf:4b:9b:7e:62:56:68:ba:c5:27:a7:c8:
66:53:f4:57:ed:2e:81:c2:26:1f:37:16:10:96:05:f0:58:82:
59:6f:c7:2b:4e:13:17:11:d1:17:42:b1:f8:ca:ce:87:03:47:
bf:b3:f7:5c:a9:e7:9a:90:1f:a7:0b:fc:22:ba:c0:42:d9:53:
5c:9c:9a:81:c6:d5:a6:12:cd:c7:c9:3a:bd:36:22:13:94:4e:
76:91:ce:c2:90:05:78:e9:cd:92:fd:80:89:65:b8:26:e7:be:
b1:14:29:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:07 2023 by rpki-client on console-fra.rpki-client.org