Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/HtNulxijmsoKqfXKHzYNMHNrD5U.roa
File: HtNulxijmsoKqfXKHzYNMHNrD5U.roa (raw, json)
Hash identifier: BOrt/9KuP/bFu/f4UfBLKMRbxlSxVqhFypMiH+mJvxU=
Subject key identifier: 1E:D3:6E:97:18:A3:9A:CA:0A:A9:F5:CA:1F:36:0D:30:73:6B:0F:95
Certificate issuer: /CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Certificate serial: 0185C37E1D589CD8DFB55CD8A2F9B04ACBA7
Authority key identifier: D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/HtNulxijmsoKqfXKHzYNMHNrD5U.roa
Signing time: Wed 18 Jan 2023 06:08:19 +0000
ROA not before: Wed 18 Jan 2023 06:08:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58194
IP address blocks: 91.239.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:7e:1d:58:9c:d8:df:b5:5c:d8:a2:f9:b0:4a:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c81c62d3942033d0a74044b0c5a4f113e43df3
Validity
Not Before: Jan 18 06:08:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ed36e9718a39aca0aa9f5ca1f360d30736b0f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:ff:d0:97:a4:01:a3:3b:b2:4a:eb:23:31:
6d:60:50:14:8c:ed:b3:a7:27:32:fe:17:42:80:a7:
b0:67:c1:64:bf:f9:3a:6d:a0:34:42:46:c2:2b:58:
9e:3b:13:ac:62:97:b1:58:37:4b:c3:0f:6b:35:03:
b4:3f:f5:37:dc:3a:23:7b:34:d3:06:8f:4b:24:82:
4b:c4:15:fb:d3:c0:ce:6f:38:0e:6b:71:d0:e0:cd:
00:4d:43:98:ca:c7:65:eb:c4:1f:30:14:f1:99:f5:
7b:36:eb:3a:f7:17:72:8f:8c:73:2d:b9:77:f9:55:
58:4f:da:f0:b1:13:7f:ff:52:c9:d8:84:be:9c:d7:
2f:4a:9f:5a:86:34:02:be:20:72:5d:ac:43:ce:22:
27:5c:aa:7d:bc:fa:fe:b8:53:9a:df:0f:81:ec:81:
fb:d1:2c:fc:58:80:6c:ea:25:d5:90:32:ca:15:ba:
91:ef:59:2f:b5:fe:9c:77:e9:51:10:c9:85:08:a4:
34:a5:69:d6:6e:8d:53:38:ca:d2:3e:3a:f9:68:a6:
25:e4:39:04:23:90:69:c4:ce:b1:ba:04:b0:4d:77:
fd:a1:43:1c:af:22:52:26:95:7d:f5:48:c9:09:62:
6f:9b:f5:99:5e:3d:5c:59:99:83:c9:ff:fd:68:05:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D3:6E:97:18:A3:9A:CA:0A:A9:F5:CA:1F:36:0D:30:73:6B:0F:95
X509v3 Authority Key Identifier:
keyid:D1:C8:1C:62:D3:94:20:33:D0:A7:40:44:B0:C5:A4:F1:13:E4:3D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cgcYtOUIDPQp0BEsMWk8RPkPfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/HtNulxijmsoKqfXKHzYNMHNrD5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/87f973-ea6e-47df-b1b0-df3138b434c8/1/0cgcYtOUIDPQp0BEsMWk8RPkPfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f3:98:08:e2:fb:f1:62:75:d0:c5:c7:5d:15:f3:e8:bc:eb:
79:35:ab:f9:c8:24:77:a2:aa:d1:67:6f:e8:4f:ea:80:dc:e2:
c0:c2:45:66:b5:24:61:02:28:65:b8:99:80:f2:6c:0c:35:38:
3c:76:b2:f2:e3:2e:55:a3:dc:0d:0f:17:68:77:49:34:c4:cd:
28:8a:1d:f3:a4:e1:d9:16:f5:9a:3d:a3:6d:92:66:e4:80:46:
a1:c5:ab:e8:40:24:ee:33:59:e7:d7:4d:1a:ec:67:c8:94:ca:
c3:5d:c2:7d:de:59:f5:0f:4d:b7:b4:59:76:f8:e0:c5:e2:86:
8b:c6:b4:eb:53:09:50:94:66:01:26:f3:83:8b:2b:bf:e7:ca:
e0:1e:08:73:19:a1:4e:a3:88:f6:6e:9e:5d:25:80:e1:41:c0:
3d:4b:76:7a:ca:c9:56:50:09:1b:a4:f9:1e:54:20:73:1b:59:
e3:bc:f6:fb:73:9c:e7:0f:aa:09:fa:76:a6:1c:bd:e0:6a:08:
87:d7:04:eb:03:57:71:80:95:6b:df:10:42:78:f8:0b:57:33:
e6:e4:51:9c:27:de:c7:64:af:7a:fd:71:9d:f0:24:77:43:5b:
77:8c:09:ab:f0:38:a1:a0:2a:5b:cc:22:42:a8:60:8a:8f:d9:
da:95:25:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:11 2024 by rpki-client on console-fra.rpki-client.org