Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/pS1mYo9E1xjfOWDJ_Wdpnu--AaY.roa
File: pS1mYo9E1xjfOWDJ_Wdpnu--AaY.roa (raw, json)
Hash identifier: X6riCLg38S5sJIttyv+SXWeKTi3lenfqCzSjkW9+hB4=
Subject key identifier: A5:2D:66:62:8F:44:D7:18:DF:39:60:C9:FD:67:69:9E:EF:BE:01:A6
Certificate issuer: /CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Certificate serial: 01856DC19FAD8A6C49E3CB359CFEF9ED89E3
Authority key identifier: F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/pS1mYo9E1xjfOWDJ_Wdpnu--AaY.roa
Signing time: Sun 01 Jan 2023 14:34:43 +0000
ROA not before: Sun 01 Jan 2023 14:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61048
IP address blocks: 91.212.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:9f:ad:8a:6c:49:e3:cb:35:9c:fe:f9:ed:89:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Validity
Not Before: Jan 1 14:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a52d66628f44d718df3960c9fd67699eefbe01a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:f5:30:b6:f0:bb:59:7d:21:3c:3c:5a:95:
4b:42:45:fa:46:a6:f8:70:38:ef:b0:26:5e:c6:77:
6c:a6:2e:4e:6e:d3:cf:7c:33:7a:83:e0:c7:8f:cd:
81:b3:77:b4:5f:31:3d:28:11:4b:09:1f:40:c1:7d:
98:6d:f6:b3:56:b9:9c:f3:74:34:53:bb:25:70:92:
bd:a1:62:4f:83:98:03:6d:b4:79:49:3a:2e:06:f6:
1a:bb:2f:a5:c4:d4:c2:9d:9e:c6:7a:7a:c6:c0:fa:
aa:44:4c:f6:f2:1c:8c:fc:9f:21:c9:74:d6:10:55:
6c:f0:56:bc:b3:35:f6:68:cc:7f:09:c4:39:d9:25:
57:47:d0:af:f2:36:27:5c:b1:65:39:49:f5:8e:15:
43:7d:56:78:d1:f4:03:82:96:2e:43:6a:94:90:c7:
57:45:9b:36:da:b5:fc:95:81:09:2d:f7:b1:fd:06:
a7:73:5a:58:ad:83:d5:76:2c:88:02:f7:a2:22:88:
f6:63:07:d9:30:09:9c:43:dd:b4:39:c1:49:e2:13:
59:6e:69:3b:cc:2a:c4:34:55:e6:ec:9f:7a:06:cf:
d2:b2:81:0d:9a:70:0f:7f:97:14:e8:74:19:54:0e:
b9:b9:33:a4:9c:06:ac:9c:6c:ac:46:89:4c:ad:a7:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2D:66:62:8F:44:D7:18:DF:39:60:C9:FD:67:69:9E:EF:BE:01:A6
X509v3 Authority Key Identifier:
keyid:F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/pS1mYo9E1xjfOWDJ_Wdpnu--AaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1e:2f:fa:5a:34:b5:9a:9c:e7:27:ed:9a:8a:09:d6:c5:54:
77:fc:52:8a:dd:2e:22:95:53:8a:33:4b:ec:ab:36:34:85:0e:
ae:5e:6f:b7:88:7c:99:ab:9c:b0:c0:70:67:4e:47:91:e9:22:
2c:a9:4a:50:5e:78:ab:e6:99:5d:f5:2f:49:3a:39:65:2b:f9:
d6:36:4b:31:49:97:ec:74:30:83:6a:a4:96:b5:b5:8f:a6:f0:
03:68:42:6c:6a:8f:31:02:ef:9c:6c:63:7d:98:c9:21:a1:9a:
0b:4f:79:c7:84:bc:0f:26:c0:58:7c:85:87:32:49:1a:70:72:
d3:91:84:f8:16:e1:e2:b3:92:b7:2c:7c:65:e5:dd:ef:6a:fb:
af:87:24:e8:f6:df:f5:69:f7:7f:b3:20:0a:c3:97:7b:4f:ad:
a4:2e:72:2c:45:59:3d:2a:88:ef:24:a5:56:d3:90:4d:34:fa:
f0:ce:ac:e8:40:92:22:04:d8:e7:eb:df:f6:cb:61:7b:84:a4:
25:78:20:c2:fd:fc:12:f0:03:15:ee:15:7d:30:5b:ff:df:20:
91:96:f9:48:be:0e:ad:2f:13:ac:3c:b4:ec:a8:9b:86:74:98:
fb:88:02:7a:17:a4:f4:2c:87:d2:05:f8:d0:90:3a:ed:19:c8:
ac:86:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:22 2024 by rpki-client on console-fra.rpki-client.org