Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/1-w3FZuNAl_42IN4PpZqeXl4qFQs.roa
File: 1-w3FZuNAl_42IN4PpZqeXl4qFQs.roa (raw, json)
Hash identifier: 24l9Gynf9KAn7zB+kUhE0XoSdSgnPiG/nG91hXqtwS4=
Subject key identifier: FB:0D:C5:66:E3:40:97:FE:36:20:DE:0F:A5:9A:9E:5E:5E:2A:15:0B
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 0189D4BA7DCB40085DF0EDB9774822218907
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/1-w3FZuNAl_42IN4PpZqeXl4qFQs.roa
Signing time: Tue 08 Aug 2023 10:38:58 +0000
ROA not before: Tue 08 Aug 2023 10:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 91.198.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:ba:7d:cb:40:08:5d:f0:ed:b9:77:48:22:21:89:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Aug 8 10:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0dc566e34097fe3620de0fa59a9e5e5e2a150b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:62:5a:28:72:fc:22:61:42:bf:63:7b:a9:
d7:a2:75:57:71:e8:35:07:86:3f:36:27:46:53:95:
2b:24:a8:ff:18:38:ab:d0:05:5a:7a:86:87:55:5b:
41:df:32:94:7e:b1:8d:2e:fb:7f:75:e6:2f:d3:46:
8c:9f:0e:1c:95:fe:45:1e:75:c8:8d:99:f6:dc:a8:
36:a4:f7:42:24:b5:41:e5:7e:93:c8:c3:ca:b4:45:
7a:3d:de:44:26:51:46:bc:6e:f5:6e:81:71:40:1b:
41:33:22:04:2f:52:f7:12:57:e6:61:ec:f7:a3:dc:
46:19:f8:8e:15:5f:19:56:57:ff:c8:78:01:12:0b:
32:b1:12:60:26:f5:a4:db:7b:81:fa:e8:26:2e:9e:
0a:36:f4:65:fe:1e:af:da:c0:20:7d:f9:21:b2:48:
5d:9e:6c:30:e4:39:fd:a8:fd:d4:9e:cf:68:19:79:
14:3f:7e:c2:63:4a:42:f7:3a:90:f3:2e:a4:72:60:
c2:bf:50:39:8a:9a:ad:c1:cb:6b:fa:ca:b3:0d:7b:
7d:50:7f:a0:a0:40:28:3b:c6:ad:94:ce:b9:66:89:
cd:63:bc:52:c4:c7:2b:a7:8c:22:65:7d:83:96:b7:
d3:2a:13:d0:ba:9a:26:1c:b7:20:fe:58:7b:36:3c:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:C5:66:E3:40:97:FE:36:20:DE:0F:A5:9A:9E:5E:5E:2A:15:0B
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/1-w3FZuNAl_42IN4PpZqeXl4qFQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2b:ad:f4:e7:74:45:fb:4a:99:a8:2e:6c:eb:a0:81:c6:7c:
aa:52:2f:f7:75:43:e6:c7:21:a0:fe:68:ba:33:25:e9:f1:d8:
df:0f:bf:52:be:04:95:c9:7e:e8:e2:44:16:83:39:e9:8d:61:
c8:86:ee:fc:71:10:86:30:08:b3:c0:6e:db:5f:10:88:02:04:
2e:59:1f:92:ec:a6:27:c0:9b:88:4c:bf:b2:9e:43:1c:3e:5a:
df:db:0a:3a:f8:a1:56:5b:cb:d3:57:2f:21:bb:5e:af:f4:71:
6f:f3:41:3c:80:1f:e7:42:4e:64:2b:0e:00:da:87:b7:a6:8f:
f4:d6:57:9c:56:3f:61:aa:4a:3b:94:4a:b7:6a:33:1e:bb:cd:
d6:3a:6b:a9:60:a4:ff:d5:72:b7:fd:a8:2f:45:85:66:e9:cc:
04:fd:cb:f7:c3:81:f2:ac:c4:71:bf:75:fd:96:bc:15:83:80:
81:1b:df:c0:32:3e:97:ac:44:d1:d0:10:3a:ce:ba:d3:16:09:
f4:51:ae:25:f8:a4:6b:31:af:68:47:27:dd:28:78:bb:a9:54:
2b:84:64:bc:9d:a0:5f:65:0a:1b:76:c3:cf:68:56:b3:80:80:
fe:d9:9f:04:90:75:de:f5:7f:b3:88:47:24:44:de:fc:f1:d2:
24:4f:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 07:03:22 2023 by rpki-client on console-fra.rpki-client.org