Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/bHibpTOGqIkNi462AoTkobdfKJE.roa
File: bHibpTOGqIkNi462AoTkobdfKJE.roa (raw, json)
Hash identifier: ydG5lundcO5LI1cnI+GDS/RjpBS8yoPFV7WAVpl1Gcc=
Subject key identifier: 6C:78:9B:A5:33:86:A8:89:0D:8B:8E:B6:02:84:E4:A1:B7:5F:28:91
Certificate issuer: /CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Certificate serial: 01877364A6344D2B69A69CC3D04D6B4CC9F1
Authority key identifier: 27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/bHibpTOGqIkNi462AoTkobdfKJE.roa
Signing time: Wed 12 Apr 2023 02:56:28 +0000
ROA not before: Wed 12 Apr 2023 02:56:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206336
IP address blocks: 91.188.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:73:64:a6:34:4d:2b:69:a6:9c:c3:d0:4d:6b:4c:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793bde946ae936d3cacc136a5f3239edf2431f4
Validity
Not Before: Apr 12 02:56:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c789ba53386a8890d8b8eb60284e4a1b75f2891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:2a:af:b8:72:a1:f2:1c:16:f3:4e:b8:2e:
5e:89:ff:8a:96:91:1f:2c:0b:d9:ae:e2:9f:97:cc:
cf:dc:d4:84:af:84:d6:d9:af:fe:0b:0b:81:83:3c:
9e:25:cd:f8:c8:a7:3e:84:33:d1:df:1f:c6:f1:55:
aa:d5:b9:7b:96:b0:51:04:2c:4c:2e:fc:87:ed:a4:
3a:68:0e:e2:7e:ac:2a:8d:e3:e1:e2:eb:fe:df:60:
ca:34:70:32:4a:b3:0e:8e:42:91:af:04:cb:f5:4d:
d6:7b:61:f3:85:9e:23:3c:39:41:7a:57:3e:d3:26:
46:fa:1b:f7:ca:1f:e1:7a:45:97:15:5a:bd:a9:95:
75:9e:b3:84:c4:ec:09:da:25:7e:99:78:36:05:1e:
ec:2e:99:72:cb:a6:8a:e3:86:10:c0:23:ef:8c:59:
8d:da:9e:a8:5b:db:9c:9b:7e:54:05:74:cf:14:3f:
29:9c:3e:29:b0:d8:5b:bf:ac:b7:cf:ca:ee:ce:41:
ab:f7:b5:6b:92:d5:2d:a3:37:73:94:b6:06:30:47:
9e:53:8c:64:64:1f:bc:f2:ca:32:7b:52:0b:71:aa:
f6:20:d3:9d:8a:a2:21:2d:af:44:1b:5f:38:99:64:
3e:f8:9e:6a:70:8e:ca:63:a4:3a:a6:13:ee:37:09:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:78:9B:A5:33:86:A8:89:0D:8B:8E:B6:02:84:E4:A1:B7:5F:28:91
X509v3 Authority Key Identifier:
keyid:27:93:BD:E9:46:AE:93:6D:3C:AC:C1:36:A5:F3:23:9E:DF:24:31:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5O96Uauk208rME2pfMjnt8kMfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/bHibpTOGqIkNi462AoTkobdfKJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bf58da-a9d2-421a-b43a-92c3bf74a97b/1/J5O96Uauk208rME2pfMjnt8kMfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
04:85:21:20:d8:2c:8b:b7:2e:3d:92:a8:ec:33:67:63:b1:96:
e9:07:26:cc:2f:fd:52:6b:e0:18:bb:97:98:d3:8f:79:7d:2f:
e8:9a:d9:39:ae:6a:57:8d:c3:f7:61:1d:28:a4:12:42:64:9e:
1a:2c:7a:81:8e:d4:c5:38:c5:6f:0f:69:aa:0c:71:43:7d:1b:
fc:69:e0:e0:69:69:f3:5a:40:10:d4:0f:09:5c:69:38:b7:42:
ba:f8:5c:7a:6d:d2:eb:ad:d9:60:e5:d1:2b:09:fb:2b:5d:4f:
b1:58:7c:85:5b:fc:f9:ba:2c:1d:da:40:d3:48:7c:94:d2:b0:
b9:93:5e:5c:e8:da:6f:82:82:00:aa:a4:2c:2a:7a:d3:ab:c0:
90:d7:31:e2:60:b6:a9:34:45:b9:2b:5b:89:e5:9c:18:2d:7b:
6a:99:b0:22:e4:05:89:bb:6c:9e:eb:f3:f5:d4:b2:07:9b:f2:
af:a2:d3:e1:dd:01:47:35:84:c7:40:c4:a4:b9:af:b7:09:65:
46:72:0a:bf:78:92:21:78:2e:3b:76:95:de:b9:d5:c8:f2:54:
82:d1:39:1a:4e:5f:83:c7:0a:68:ca:22:e7:9a:31:24:b6:41:
d0:3c:90:53:32:62:34:4c:d9:b9:33:4a:aa:57:c3:37:5f:e8:
85:4d:f2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:56 2023 by rpki-client on console-ams.rpki-client.org