Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/92uAfOphobXZaBTRiQMnjX31MjQ.roa
File: 92uAfOphobXZaBTRiQMnjX31MjQ.roa (raw, json)
Hash identifier: 8KHugiCp40+0eZnSc/Ia/iHiraQztFGGY2b3lg0TNh4=
Subject key identifier: F7:6B:80:7C:EA:61:A1:B5:D9:68:14:D1:89:03:27:8D:7D:F5:32:34
Certificate issuer: /CN=d4459dd6f7ccecfebeb434fc08db8e22d4569c23
Certificate serial: 01857102C1074683F918D07EAC0BD3EDA392
Authority key identifier: D4:45:9D:D6:F7:CC:EC:FE:BE:B4:34:FC:08:DB:8E:22:D4:56:9C:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EWd1vfM7P6-tDT8CNuOItRWnCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/92uAfOphobXZaBTRiQMnjX31MjQ.roa
Signing time: Mon 02 Jan 2023 05:44:43 +0000
ROA not before: Mon 02 Jan 2023 05:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47950
IP address blocks: 91.223.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c1:07:46:83:f9:18:d0:7e:ac:0b:d3:ed:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4459dd6f7ccecfebeb434fc08db8e22d4569c23
Validity
Not Before: Jan 2 05:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76b807cea61a1b5d96814d18903278d7df53234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:af:c4:02:be:de:20:c0:e2:4a:6f:ad:f6:
e0:82:3b:29:b6:df:5d:08:e7:d0:8b:9d:97:07:78:
d5:e5:b0:ef:10:4a:0f:be:b0:c1:16:bc:58:c8:95:
8a:c1:61:18:9b:3f:dc:4c:0a:eb:c4:65:93:9b:c1:
c9:2e:36:af:e4:ce:ba:02:e0:6b:8a:ef:bb:dd:e2:
b3:65:5f:82:ff:cd:bd:a5:0c:bb:f0:b9:21:83:ec:
98:0e:f0:d9:76:48:d7:63:d3:84:cf:b4:32:30:a5:
f8:a8:f5:bc:c9:39:43:a5:9e:40:8c:16:4e:28:31:
b1:af:db:d4:4b:5e:39:08:d5:41:9d:e6:8d:ab:5a:
06:51:bf:c3:53:0b:18:95:f4:69:35:9f:26:2c:4e:
6d:4b:e6:3f:98:e3:fa:a8:f7:54:ef:06:7b:ac:cf:
ad:27:bc:47:62:5e:a1:25:b2:76:a1:4f:bf:0e:d8:
4e:5e:31:fd:de:34:f9:d4:e4:49:98:8a:f5:50:f1:
31:2f:59:94:ab:6f:25:08:b1:11:6d:e3:fe:58:14:
75:98:bf:52:c5:af:04:7f:5e:32:26:41:1f:06:88:
6a:57:7d:47:13:5c:6e:e1:21:e3:ab:48:c1:27:26:
e2:a7:89:5a:98:7f:60:72:fd:d3:01:3a:d4:57:50:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:80:7C:EA:61:A1:B5:D9:68:14:D1:89:03:27:8D:7D:F5:32:34
X509v3 Authority Key Identifier:
keyid:D4:45:9D:D6:F7:CC:EC:FE:BE:B4:34:FC:08:DB:8E:22:D4:56:9C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EWd1vfM7P6-tDT8CNuOItRWnCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/92uAfOphobXZaBTRiQMnjX31MjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/0aeda7-6d3a-418e-96d5-1ca2d55e2061/1/1EWd1vfM7P6-tDT8CNuOItRWnCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.67.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fd:9b:c7:c5:d3:77:b6:16:6f:c1:af:f8:0e:74:7d:5a:b6:
70:b1:41:05:59:d4:ef:25:60:ac:58:95:64:51:17:2b:3f:d6:
6c:98:f7:d9:7f:91:22:44:58:7d:62:f3:17:5f:10:64:50:7f:
77:5f:a4:0c:22:8a:57:da:07:47:f7:ce:78:6f:b2:38:a4:93:
cb:e3:91:ee:e5:cb:03:8b:d1:b1:68:e7:93:2b:18:84:05:64:
7a:e3:99:2d:62:80:7a:7f:0a:a9:96:92:17:4a:9d:52:b1:d6:
42:6c:c8:a0:cf:4e:f4:88:3e:88:92:65:65:42:cf:7e:70:ec:
e2:8c:c1:d7:87:81:7d:f5:be:3d:30:fd:3e:0f:a9:50:c3:c6:
28:ee:4f:df:e4:58:dc:5a:f1:73:26:25:82:27:8f:9d:33:bc:
c2:22:e0:70:ca:8f:f0:63:97:84:10:07:ed:b8:cb:72:59:1f:
b6:81:02:32:4d:cc:60:4c:65:c6:4e:13:ab:9e:52:f1:95:7d:
f8:df:f2:79:09:8f:0b:a3:7e:97:e1:e6:cf:e7:42:a2:53:9e:
a9:6d:bf:a4:ef:6d:39:80:5d:0d:e0:c9:0a:9b:a8:9b:24:c1:
b7:12:45:fd:4b:7f:eb:d1:e9:3f:c1:6d:79:c0:cf:e7:7d:b6:
66:15:6b:2f
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 8 04:41:29 2023 by rpki-client on console-ams.rpki-client.org