Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/_pjM8f9z55-y-SD9rURyY0DN6IU.roa
File: _pjM8f9z55-y-SD9rURyY0DN6IU.roa (raw, json)
Hash identifier: dqKsMsclgkUCwbOkCNaso69Tw1dNAFV01tymlDqp+uo=
Subject key identifier: FE:98:CC:F1:FF:73:E7:9F:B2:F9:20:FD:AD:44:72:63:40:CD:E8:85
Certificate issuer: /CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Certificate serial: 018BF09D974315C78FBE0C2FBD7A29B829F2
Authority key identifier: 70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/_pjM8f9z55-y-SD9rURyY0DN6IU.roa
Signing time: Tue 21 Nov 2023 06:42:21 +0000
ROA not before: Tue 21 Nov 2023 06:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 91.240.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:9d:97:43:15:c7:8f:be:0c:2f:bd:7a:29:b8:29:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705ee67d4a12d53c44e701cbd896a48575eb2503
Validity
Not Before: Nov 21 06:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe98ccf1ff73e79fb2f920fdad44726340cde885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:3d:d6:ec:2d:42:91:56:e0:1b:8e:8f:ac:
2d:c4:d3:00:6f:5b:b8:df:a3:4c:c3:66:6f:7f:b5:
cf:f8:3c:9f:32:e0:58:d9:29:5c:0a:d9:d1:5b:fc:
51:2d:12:6c:fd:40:5d:c3:72:a0:cd:33:ae:ea:0b:
8a:35:93:99:c5:fd:a0:95:06:b6:9e:4e:84:30:a3:
57:7e:be:4f:22:73:f8:24:85:c0:ad:57:f5:15:30:
53:f0:44:47:b8:9c:99:f1:e6:04:51:94:f3:59:eb:
b3:0b:41:a7:0d:0e:dd:b8:51:2d:2b:95:f5:b8:f0:
9e:d4:4e:94:a9:7f:4d:02:ab:d5:5f:aa:88:26:97:
72:7c:1d:72:3d:a6:56:06:fe:60:24:b2:a1:ff:27:
11:78:40:c0:50:98:a8:a7:b5:4d:a5:05:8b:84:7a:
b6:af:b6:65:08:49:e8:79:fe:7b:35:3f:29:1e:e7:
69:0e:fd:35:4a:64:f7:19:72:82:c1:24:89:34:5a:
7d:0b:14:20:c4:c5:1b:34:96:d4:5b:a8:b9:17:75:
19:5f:c4:a6:9d:ed:f4:16:1b:8e:22:54:32:2d:c4:
e9:e8:7a:f4:2c:6d:14:a1:a7:46:8e:d2:dc:57:ec:
c9:43:9f:8f:d7:12:c5:4e:b3:55:59:8c:50:35:76:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:98:CC:F1:FF:73:E7:9F:B2:F9:20:FD:AD:44:72:63:40:CD:E8:85
X509v3 Authority Key Identifier:
keyid:70:5E:E6:7D:4A:12:D5:3C:44:E7:01:CB:D8:96:A4:85:75:EB:25:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF7mfUoS1TxE5wHL2JakhXXrJQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/_pjM8f9z55-y-SD9rURyY0DN6IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d67522-6e21-437b-bd24-689a4d976f95/1/cF7mfUoS1TxE5wHL2JakhXXrJQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2d:29:a6:f1:a2:f9:c1:ef:58:df:d7:13:21:12:e5:78:99:
40:63:98:d2:44:8d:60:ed:ae:cc:f0:03:41:e1:a7:8f:89:47:
8d:da:9e:d0:f1:76:7a:ed:c7:cf:aa:78:f1:66:bf:ce:5b:09:
ac:29:07:87:7d:08:81:11:59:c1:b1:8e:fd:c5:e0:ac:72:7b:
7f:4b:16:fc:dc:b0:39:fe:fd:df:89:5e:1f:50:3f:f3:35:3d:
8a:86:ea:fd:f1:55:04:fa:5a:80:9b:04:52:f1:49:14:8d:c4:
a9:db:9d:1f:33:d2:99:d8:e5:36:0e:fe:40:15:92:cd:d9:d1:
5d:d5:fc:1e:aa:6f:ca:bf:2e:4e:79:77:69:0c:92:a1:71:01:
8d:9a:37:49:e7:3f:86:82:bb:39:6a:d9:be:65:67:af:1b:35:
1f:15:f6:2d:8e:66:2e:ca:ba:66:66:23:4e:ea:00:db:df:d8:
fa:76:fe:0e:41:49:fd:9d:2e:53:bb:92:60:e9:f3:41:69:da:
4c:18:80:b2:7f:60:c1:ac:5a:92:23:a7:13:81:f9:75:b3:75:
a1:68:5a:b8:3d:57:ca:8f:e2:f2:e0:a9:88:dc:9e:99:e8:89:
a4:58:cb:5b:44:cc:5c:95:c5:b9:70:82:ca:b1:eb:c8:58:fa:
8e:22:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:39 2024 by rpki-client on console-ams.rpki-client.org