Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/xijY9mSUgGndfD-UdIo6cxJe1Jc.roa
File: xijY9mSUgGndfD-UdIo6cxJe1Jc.roa (raw, json)
Hash identifier: Dy5Hn0JcwjTyTlVkDvnCHsR2QzM42tNyf4t1Ud6Icv8=
Subject key identifier: C6:28:D8:F6:64:94:80:69:DD:7C:3F:94:74:8A:3A:73:12:5E:D4:97
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 01856BA58A4AF697A1FC4F0D65E1E8B398F8
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/xijY9mSUgGndfD-UdIo6cxJe1Jc.roa
Signing time: Sun 01 Jan 2023 04:44:49 +0000
ROA not before: Sun 01 Jan 2023 04:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51399
IP address blocks: 91.218.200.0/22 maxlen: 24
91.218.208.0/22 maxlen: 24
91.103.144.0/22 maxlen: 24
91.103.144.0/24 maxlen: 24
185.157.12.0/22 maxlen: 24
91.217.0.0/23 maxlen: 24
2a07:a080::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:8a:4a:f6:97:a1:fc:4f:0d:65:e1:e8:b3:98:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jan 1 04:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c628d8f664948069dd7c3f94748a3a73125ed497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:dd:5b:84:64:8f:f9:fc:79:6b:3d:6b:44:
b5:45:4d:c0:3b:53:a4:21:07:0a:80:70:b0:8a:b8:
33:c9:c5:65:51:95:2f:e4:9d:01:b8:67:1b:e5:c0:
12:06:12:48:41:bd:b6:19:a4:b3:3f:1d:1e:40:62:
48:a9:f8:05:4d:b7:87:6d:65:e3:fb:44:ab:6e:78:
82:07:ed:cb:b0:3c:bf:2b:d2:a8:17:56:bb:79:b9:
d3:09:ec:7b:0d:ee:5e:8e:05:88:de:0b:9b:ee:dd:
94:32:d7:a3:9e:f4:21:94:75:7f:70:7b:d0:a6:96:
0c:7c:06:90:72:0c:f1:96:06:68:97:02:6e:d3:07:
9f:c0:b1:7d:14:6f:60:ac:de:d3:51:2e:3e:1a:e8:
f0:bb:db:99:6b:96:b2:de:d4:23:e0:46:d6:52:73:
eb:8e:6f:18:08:74:bd:48:92:e2:01:d5:d3:b6:b6:
4f:e2:70:0b:8c:ad:b1:ad:f3:7e:f0:0b:68:f1:53:
74:1f:12:8c:36:9a:1f:f0:12:db:01:a0:bb:1c:a7:
09:79:6f:42:4a:e8:d5:0a:dc:89:88:c6:8b:53:b3:
95:dc:37:64:05:06:b5:aa:82:49:99:9b:b9:e0:a2:
b7:71:2b:47:18:7b:ad:ea:a2:e6:05:12:55:73:98:
39:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:D8:F6:64:94:80:69:DD:7C:3F:94:74:8A:3A:73:12:5E:D4:97
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/xijY9mSUgGndfD-UdIo6cxJe1Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.144.0/22
91.217.0.0/23
91.218.200.0/22
91.218.208.0/22
185.157.12.0/22
IPv6:
2a07:a080::/29
Signature Algorithm: sha256WithRSAEncryption
19:7c:bc:4d:b2:4b:52:51:96:35:77:57:c8:48:19:ea:25:6e:
46:2e:2d:5c:48:a9:3c:f0:cd:04:5b:38:f6:63:8c:2a:a4:ed:
a2:9d:cf:d2:13:02:8c:a5:e7:f9:db:c7:b3:d0:ad:a5:0e:8b:
3e:35:7d:9b:bd:35:31:61:7e:a2:d3:77:ee:e0:d1:b0:32:65:
91:36:66:25:42:35:b9:25:4d:9d:29:dc:07:94:cc:80:da:75:
fe:ab:0f:4f:dc:ff:8e:59:ac:88:02:b9:03:4b:1f:60:1e:26:
19:5f:4f:0e:e9:8c:3a:5c:7f:8c:a4:9f:93:e1:c2:bc:e9:0f:
08:88:21:ac:14:33:27:e0:30:43:d2:23:a1:87:13:42:44:bc:
8b:38:e0:cf:db:d8:31:1a:86:53:0a:cd:e0:db:d7:f9:48:5f:
89:ca:d8:68:03:02:31:77:99:1f:7e:35:05:19:37:04:66:2d:
f3:59:a2:9a:e4:a8:ba:d6:71:4f:2b:bc:7a:3d:89:fd:1b:7e:
5b:e7:23:a6:bc:7f:65:ac:38:31:84:66:c9:36:e2:5f:43:79:
5e:15:c9:d8:4c:8e:6c:88:8f:b2:7c:2d:16:2c:e9:67:2d:c6:
fd:6d:ca:1e:bf:3e:0e:6e:12:95:4b:0f:00:cc:89:96:51:44:
ce:42:67:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:08 2024 by rpki-client on console-ams.rpki-client.org