Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/20L93NYv8DQT4MADt-XHxMoEw6U.roa
File: 20L93NYv8DQT4MADt-XHxMoEw6U.roa (raw, json)
Hash identifier: RI3fjsYgsVILhsijseXjB7luXy3M/xzkh+GivMq9DlI=
Subject key identifier: DB:42:FD:DC:D6:2F:F0:34:13:E0:C0:03:B7:E5:C7:C4:CA:04:C3:A5
Certificate issuer: /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial: 018571B0D5629EF4E4CB6FB07D6158417C53
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/20L93NYv8DQT4MADt-XHxMoEw6U.roa
Signing time: Mon 02 Jan 2023 08:54:52 +0000
ROA not before: Mon 02 Jan 2023 08:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48837
IP address blocks: 91.236.58.0/24 maxlen: 24
91.212.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d5:62:9e:f4:e4:cb:6f:b0:7d:61:58:41:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Validity
Not Before: Jan 2 08:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db42fddcd62ff03413e0c003b7e5c7c4ca04c3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:bf:33:7f:6a:04:69:3a:de:5f:13:3c:af:
d7:62:ef:e1:c1:0e:a8:88:68:85:59:46:d5:60:c6:
3f:84:46:ed:a5:90:0d:9e:e8:64:4f:ee:50:8b:6a:
c1:a1:92:7c:25:27:86:10:ae:19:63:88:40:10:a0:
f9:f5:d2:42:8a:93:bc:4d:62:e3:73:af:09:7e:98:
6e:8d:33:7e:de:54:4e:5e:3f:93:d5:06:6e:17:7e:
f3:31:5d:6a:f6:13:f3:41:56:d3:c7:43:01:85:de:
50:78:68:5d:85:af:02:85:4e:cd:ab:2d:44:12:83:
69:dd:25:d2:27:68:88:42:0e:a0:7b:9e:76:83:ce:
46:81:b9:50:de:36:e7:5c:f9:7e:36:49:0a:cf:76:
f0:be:bb:5f:64:16:bc:72:b0:31:e7:d2:dd:53:7b:
89:dc:ac:ee:13:c7:da:ab:7e:47:7b:ae:eb:ed:cf:
60:2b:50:04:75:2b:3a:08:ed:e4:19:28:3f:68:19:
31:99:1a:4c:30:2d:54:3e:d2:9d:8e:39:ab:34:a8:
40:19:19:3f:21:55:b2:83:67:19:e5:40:02:c5:3d:
3e:e7:d0:f5:72:c5:d6:6e:b8:64:7c:46:fa:e1:9b:
e2:15:77:7d:2b:3e:f6:23:42:68:3d:16:ec:33:1c:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:FD:DC:D6:2F:F0:34:13:E0:C0:03:B7:E5:C7:C4:CA:04:C3:A5
X509v3 Authority Key Identifier:
keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/20L93NYv8DQT4MADt-XHxMoEw6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.66.0/24
91.236.58.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9a:12:e8:23:49:cc:11:3e:a7:c2:27:35:32:cc:6a:e6:cc:
a7:f2:7b:4d:d7:5e:db:d5:35:f0:d1:56:3d:e3:92:9e:70:2e:
bb:25:f9:91:56:51:b9:11:c7:f1:b2:08:12:69:f7:00:d7:4e:
7c:6b:ac:41:7b:87:e2:4b:66:b4:bc:82:09:89:bf:94:bf:90:
4b:a5:9d:5a:47:dc:d1:dc:20:19:b6:b3:18:8b:3d:42:2a:cf:
2a:1e:50:07:99:70:89:0c:21:25:1a:59:d1:29:63:db:c5:46:
5f:cd:5c:25:ae:a3:ac:7b:89:4c:b9:a6:82:a8:14:64:ec:bd:
5d:10:cb:36:42:94:16:8d:0b:c0:85:c2:2c:6e:86:e8:22:a7:
40:36:ba:5a:c2:a1:87:34:a3:e1:b4:fa:bf:fc:9d:23:22:08:
31:68:1a:c9:86:90:7a:ba:27:cb:5d:d3:dc:1c:b4:89:c8:63:
4f:43:92:b9:b0:12:10:c8:0f:18:14:12:6a:83:df:0f:6c:bb:
f5:e4:6d:b3:e2:c4:2b:75:bf:35:90:72:f5:e0:f5:fd:54:26:
d4:56:10:40:ea:8c:f9:d3:04:d6:d9:5d:af:bf:2c:4a:0c:73:
c7:23:ee:96:8a:2c:2c:58:b6:15:6e:9c:41:e4:58:37:a4:13:
24:d3:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:18 2024 by rpki-client on console-fra.rpki-client.org