Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/8FNQp_txlBq7bnnX2sv3xGe-154.roa
File: 8FNQp_txlBq7bnnX2sv3xGe-154.roa (raw, json)
Hash identifier: qhGMGx0QZj8/JlrScBiaAP7deHtkgIwLmmpixdhFI+k=
Subject key identifier: F0:53:50:A7:FB:71:94:1A:BB:6E:79:D7:DA:CB:F7:C4:67:BE:D7:9E
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C786617144EFB3B04293CEEFBD47F1E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/8FNQp_txlBq7bnnX2sv3xGe-154.roa
Signing time: Sun 01 Jan 2023 08:35:07 +0000
ROA not before: Sun 01 Jan 2023 08:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 91.244.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:66:17:14:4e:fb:3b:04:29:3c:ee:fb:d4:7f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05350a7fb71941abb6e79d7dacbf7c467bed79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:ae:94:e4:fd:b0:74:87:1c:a0:ff:29:98:
cc:04:91:65:79:63:57:de:0d:46:e7:24:63:2e:43:
74:18:f4:d4:3f:0f:17:d4:94:6e:a2:8a:53:cf:64:
37:7c:d9:91:84:d4:79:e9:58:e3:61:75:48:32:1d:
bd:01:d6:a9:7a:6d:94:f6:2d:06:e0:0a:c8:fa:23:
24:77:0c:fb:a3:0f:4a:7e:be:ad:5e:49:58:44:f0:
81:20:a4:66:51:14:90:8b:99:66:19:d8:f3:56:12:
e2:3d:fd:6a:e8:46:87:c9:a2:4f:88:6c:f9:86:fc:
9d:d1:61:74:ef:ef:72:40:75:49:44:50:6b:99:2d:
bb:ad:f9:18:8d:57:bf:4a:3e:54:a8:28:08:18:c2:
91:7c:76:98:e3:8e:de:c9:88:14:4d:e1:f5:5a:d8:
f0:47:9f:8c:3d:b3:78:28:e2:35:38:5f:15:22:c5:
0b:1f:43:ac:53:b6:14:4a:a4:d8:b3:fe:06:82:80:
ef:76:ad:d6:38:a4:77:3b:b9:29:ee:d3:f0:08:15:
5d:ce:74:dc:bb:55:02:12:d8:8f:28:27:49:a5:56:
bf:fa:ec:83:0d:a1:a2:63:f0:ef:8a:0b:16:45:b1:
90:b4:e5:69:f1:c3:26:e2:3d:21:88:ee:6e:c9:3a:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:50:A7:FB:71:94:1A:BB:6E:79:D7:DA:CB:F7:C4:67:BE:D7:9E
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/8FNQp_txlBq7bnnX2sv3xGe-154.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:00:3c:71:6b:d5:e5:70:1b:71:2f:10:75:24:a3:c1:f7:aa:
50:b2:41:47:cd:b2:56:71:05:c5:53:90:ad:9d:a2:7b:46:1d:
e9:f9:90:ac:78:01:f0:d4:93:88:41:8f:6f:3b:2f:62:42:90:
53:f0:a4:0b:d0:55:49:7a:eb:13:30:25:75:f6:3d:c4:59:b0:
d7:b9:45:1e:2a:7f:d8:6e:44:06:05:9d:07:29:a8:8c:47:87:
ad:b5:85:d1:de:80:0d:bc:4f:4e:a4:5f:6f:5e:8d:f4:58:a7:
c2:9f:1e:44:07:49:84:98:b3:17:c5:4c:fb:11:ec:24:1f:52:
3c:24:2f:91:47:ba:4d:27:0f:7e:c1:0f:8b:25:64:a5:67:8a:
65:73:68:c1:61:d2:7e:b3:b4:da:9c:14:52:77:ce:dc:63:a5:
82:14:89:52:20:a2:d7:fe:3c:23:ec:eb:f0:05:43:f3:53:c1:
97:08:fc:a8:46:3e:85:3c:02:00:86:fa:39:e2:dc:22:1e:c2:
a3:d4:88:28:3b:fc:5d:da:d7:69:e7:6a:d9:7d:19:bf:d1:93:
d9:dd:04:8a:8e:21:12:83:9e:be:34:d9:39:d5:8c:56:e4:05:
e7:91:db:30:5e:91:00:7c:59:44:6f:4a:a2:8b:83:93:b7:35:
7b:e3:8c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:13 2024 by rpki-client on console-ams.rpki-client.org