Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/CF_62vv044qD0NZrVxe34D7pRK0.roa
File: CF_62vv044qD0NZrVxe34D7pRK0.roa (raw, json)
Hash identifier: xzSD8ivEVKT+BPwAZvRaOfzrMdoRkFrCyo3JPhDOjIU=
Subject key identifier: 08:5F:FA:DA:FB:F4:E3:8A:83:D0:D6:6B:57:17:B7:E0:3E:E9:44:AD
Certificate issuer: /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial: 018571CC2A3C6DC9283AE6B6129A70625D32
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/CF_62vv044qD0NZrVxe34D7pRK0.roa
Signing time: Mon 02 Jan 2023 09:24:43 +0000
ROA not before: Mon 02 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39923
IP address blocks: 91.216.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:2a:3c:6d:c9:28:3a:e6:b6:12:9a:70:62:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Validity
Not Before: Jan 2 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=085ffadafbf4e38a83d0d66b5717b7e03ee944ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:6f:81:3a:f5:8f:78:ee:af:14:97:3e:13:
d5:a0:d9:28:b5:5a:f0:5f:32:6b:13:36:8a:f1:87:
9f:4d:99:11:fe:0a:80:63:a8:03:c4:61:41:a0:e7:
8a:3a:6b:31:40:ed:60:9e:46:3e:90:aa:1a:b6:77:
7b:74:e2:91:f9:27:47:13:6a:35:33:0b:3b:9a:5f:
df:58:9d:89:26:50:c0:ed:e2:c3:3f:b2:25:6f:09:
cc:46:f7:08:15:a4:2e:bc:c8:6a:db:39:f6:e0:19:
ea:1c:ba:9d:e9:2e:58:b8:83:e2:23:2b:58:b4:b3:
1e:d9:12:c1:7e:d3:9d:01:3a:33:ca:47:8a:b2:70:
91:91:01:97:ce:e9:f0:61:46:01:5e:c9:1b:1e:1d:
8f:85:25:bd:94:5d:56:99:d1:cc:69:c8:d7:ef:46:
22:d2:6f:dd:d1:fc:8e:90:bd:13:40:8a:db:d6:aa:
7f:91:95:25:c9:0e:af:67:bb:52:fb:48:d7:cb:4b:
7e:a1:2d:78:db:ad:12:e4:2b:25:a6:05:8a:81:85:
f4:b7:8c:a3:ad:b9:e6:da:e9:35:9e:83:40:61:fa:
e9:ff:83:53:f2:03:60:d3:d8:07:7e:3f:43:ff:4e:
b1:cd:7b:d0:5e:7a:38:ca:96:b7:8e:f8:a4:07:55:
54:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:FA:DA:FB:F4:E3:8A:83:D0:D6:6B:57:17:B7:E0:3E:E9:44:AD
X509v3 Authority Key Identifier:
keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/CF_62vv044qD0NZrVxe34D7pRK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2c:31:f6:d9:17:85:ee:32:11:5c:11:30:f6:0d:9a:3b:8c:
3d:a4:bb:db:c8:8d:92:e7:c8:ac:7f:cc:7d:9c:03:f7:76:2a:
e3:6a:dc:0e:ed:53:e7:63:ec:19:66:02:2c:fd:3e:25:2a:0e:
bd:d5:84:2e:df:47:97:42:7a:e7:95:5e:f6:d2:e5:6d:7c:5e:
18:32:f6:af:bf:da:0b:ee:c7:e7:26:18:7f:61:73:6b:2f:a2:
b5:1e:9c:1d:96:e4:35:18:11:cc:28:aa:61:01:ce:c3:9c:a8:
11:cd:bc:bd:e2:a7:4c:d6:b7:e3:9b:8a:c2:42:bc:ff:f4:3d:
c6:7e:f8:8e:8f:1f:9b:0a:dd:91:26:2e:18:c2:40:29:ad:3d:
ba:50:2b:cb:8b:fc:94:5a:8c:93:74:07:bf:9e:5f:77:41:2e:
39:2e:20:b7:ec:e4:3d:d8:c3:d3:28:d5:19:bc:d7:46:da:e1:
c3:e4:30:dd:d6:42:7b:3f:82:69:63:15:88:af:66:d2:4b:0b:
fe:d8:e2:8d:c1:ad:56:70:7f:37:4a:39:7f:93:c2:ed:ba:fa:
5c:d8:ae:0c:40:47:e9:e8:7e:35:11:ec:df:f9:35:7f:da:bc:
de:0d:da:ad:a1:c6:38:ef:f2:fe:61:5e:25:e6:11:9a:19:b0:
95:07:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:38 2024 by rpki-client on console-fra.rpki-client.org