Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/fnUX9Lks4hdHWbgGDUNAeFumd68.roa
File: fnUX9Lks4hdHWbgGDUNAeFumd68.roa (raw, json)
Hash identifier: fQofXrjDmvm86MakWuhVj8P0zBzrhbIGGZT+Vaj+vzg=
Subject key identifier: 7E:75:17:F4:B9:2C:E2:17:47:59:B8:06:0D:43:40:78:5B:A6:77:AF
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 018570B980C0BD751A05E84C524ADA641E2C
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/fnUX9Lks4hdHWbgGDUNAeFumd68.roa
Signing time: Mon 02 Jan 2023 04:24:43 +0000
ROA not before: Mon 02 Jan 2023 04:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.239.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:80:c0:bd:75:1a:05:e8:4c:52:4a:da:64:1e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Jan 2 04:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e7517f4b92ce2174759b8060d4340785ba677af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:7d:74:4e:59:81:ac:8a:8a:74:ff:0a:76:
af:69:8c:27:04:86:d1:14:ee:a1:15:91:9e:b3:8a:
94:c4:46:3a:7d:b5:70:1c:6b:f0:6f:ba:69:c0:36:
67:a2:c2:70:bc:87:f3:c9:df:7c:a8:e4:5c:7d:07:
e7:eb:2d:d6:1f:a1:ab:ed:6d:cc:c8:82:2e:b9:fc:
b6:d3:39:69:a4:b8:3d:5a:ca:fa:ca:8a:9a:ab:cb:
7d:25:ab:79:41:da:4a:ab:1a:d4:22:00:8d:b2:5f:
70:1d:30:72:3d:59:85:1d:43:ec:57:a6:11:d8:ec:
c1:d1:fb:6b:43:67:1e:41:2e:3a:5b:26:ad:2d:a2:
6e:ca:2e:54:ff:18:1b:af:e7:7b:e8:65:6b:21:bc:
df:34:cb:95:b8:84:eb:7c:35:57:ef:6d:68:ec:ec:
1a:4b:16:90:6f:6a:ab:ad:14:64:de:99:ba:33:62:
ca:ab:d1:22:aa:1c:d1:2c:64:87:c8:27:c0:c7:63:
37:7b:ed:4e:4a:88:dd:f1:17:18:d6:1f:a9:39:d5:
35:68:95:dd:d0:50:82:9f:c8:da:ef:b4:7e:3b:59:
02:d4:69:e0:35:bd:8b:16:73:ee:fa:1d:6e:40:e0:
0e:48:f4:0b:4c:6a:ec:ef:69:05:fb:01:37:50:03:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:17:F4:B9:2C:E2:17:47:59:B8:06:0D:43:40:78:5B:A6:77:AF
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/fnUX9Lks4hdHWbgGDUNAeFumd68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.58.0/24
Signature Algorithm: sha256WithRSAEncryption
03:47:3c:ed:b2:a4:cf:7f:5d:63:f7:18:72:68:a2:19:8e:96:
d6:99:f3:6f:0b:ae:fe:5c:d6:6a:48:f0:e7:f3:4e:63:a4:d0:
6a:7c:01:8b:22:93:69:f9:9a:4b:73:29:8d:dd:47:86:8c:5f:
aa:8b:64:37:bf:bc:39:4e:0b:65:d7:05:7c:42:54:e2:c3:69:
50:d5:aa:89:69:b3:e1:8c:5d:10:6e:02:84:59:95:21:2e:f7:
29:bf:4d:48:42:59:4f:0c:3f:ff:09:bc:c1:f7:85:4b:fa:3e:
06:31:14:8d:6f:21:ca:3c:22:1a:2a:ac:8f:5c:5d:2f:ee:8a:
9a:dd:c7:85:81:f9:9c:0c:83:15:1e:24:71:c2:29:95:5a:68:
43:5a:58:6a:90:ac:3b:05:db:ae:83:af:95:41:2e:18:8d:53:
16:40:74:10:77:b7:02:05:78:b5:6c:09:f8:10:2a:37:f2:44:
89:d4:5b:5d:dd:2e:cd:f0:e6:4f:fa:ba:46:21:af:77:c0:9d:
3c:a5:a1:75:f8:94:00:e3:e1:67:fc:07:2f:40:ec:c8:12:a5:
eb:d7:b7:69:e8:5d:10:5f:84:53:c0:71:7f:1c:2d:fd:d2:76:
50:4f:50:57:64:17:a9:4b:b6:8d:53:12:de:52:f2:19:86:60:
f2:34:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:56 2024 by rpki-client on console-fra.rpki-client.org