Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/AK_tExpo-BG0JLwkyxDPvOSgKu0.roa
File: AK_tExpo-BG0JLwkyxDPvOSgKu0.roa (raw, json)
Hash identifier: +sQ4DBYNd6gfruZ0Jp1/lmp6eE+OuVfZw7PQf4PhW9U=
Subject key identifier: 00:AF:ED:13:1A:68:F8:11:B4:24:BC:24:CB:10:CF:BC:E4:A0:2A:ED
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 0185729EC24BFFDE6736AD8A1ECBEA2F5C82
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/AK_tExpo-BG0JLwkyxDPvOSgKu0.roa
Signing time: Mon 02 Jan 2023 13:14:45 +0000
ROA not before: Mon 02 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61335
IP address blocks: 91.242.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c2:4b:ff:de:67:36:ad:8a:1e:cb:ea:2f:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Jan 2 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00afed131a68f811b424bc24cb10cfbce4a02aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:b6:da:c2:75:0d:56:b0:d3:68:ce:d3:75:
4f:b5:2f:a8:fe:c2:04:a7:9b:6a:83:66:4c:e8:0f:
a9:7d:87:ad:bd:fe:33:27:46:fc:95:b8:04:9d:1b:
51:21:0f:8b:ee:f1:ca:29:e9:c3:b7:37:7c:13:6a:
92:3b:4e:17:f1:39:0e:14:57:f7:73:ab:d8:a7:04:
1e:21:5b:a3:fa:ea:7d:a3:37:70:ab:d7:8f:63:b1:
4d:73:bf:c9:ae:2e:30:09:fd:43:66:ad:a2:11:07:
29:6e:c0:73:dc:83:f2:6c:d5:e4:9a:2d:4c:9f:ee:
8f:2e:4d:81:36:61:da:90:20:6d:b1:26:6e:93:4d:
65:d9:b6:a7:1c:0b:b8:b3:f4:3a:a6:7d:af:28:36:
56:57:47:bf:c4:b1:42:1f:a8:4c:fe:f9:f8:fe:de:
38:20:53:f8:7e:95:45:e5:b8:e4:3a:8b:ae:38:83:
16:7b:0f:fd:65:ca:a2:e1:6e:36:e8:f6:1d:4d:b0:
6a:b3:4c:7a:68:fd:d8:b7:b9:55:78:61:89:a0:28:
33:2d:a3:15:e0:2e:a6:d5:fa:ed:4e:0e:48:c5:9f:
53:e2:22:94:42:5f:e0:74:be:7f:c5:7b:36:84:fd:
80:96:01:8e:97:4d:a8:9a:ce:14:a8:77:d0:13:4c:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AF:ED:13:1A:68:F8:11:B4:24:BC:24:CB:10:CF:BC:E4:A0:2A:ED
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/AK_tExpo-BG0JLwkyxDPvOSgKu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.163.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e6:d8:06:67:2b:da:49:c2:be:e5:87:17:c5:6e:98:89:c4:
6b:7a:9d:b4:7b:65:8f:e4:35:47:43:1b:a4:28:be:26:d9:51:
3d:19:3d:1d:82:ec:50:0e:fd:29:8d:45:51:d5:2e:b7:b2:e8:
f7:4e:5b:b9:2c:f7:e1:bb:85:bb:c3:29:a0:32:51:ab:cf:2b:
c6:60:04:ad:a9:0d:e4:88:9e:1e:0f:5e:26:a5:1b:f0:49:59:
66:25:92:e7:96:68:cc:8a:99:db:9d:e4:5f:5e:b9:60:2b:6a:
21:42:c5:de:ec:74:d3:e4:c1:77:81:31:79:1e:cf:01:b6:34:
34:de:cc:72:d1:eb:35:bd:c2:d1:30:a1:92:b4:3b:da:9d:f1:
9c:95:96:82:e3:9f:76:c2:30:0e:e1:62:14:73:7b:cb:72:bc:
5c:2d:7c:e2:67:53:a4:b1:dc:f1:68:61:8a:ba:b3:26:8f:12:
dd:19:62:03:7d:88:cd:f1:a6:7a:ac:45:c6:99:56:4c:a2:12:
19:f2:69:e3:35:fc:63:4b:7a:86:0d:79:21:49:5a:19:e3:e7:
2c:e4:57:52:56:fc:d1:80:bb:60:db:90:47:2c:ed:56:29:98:
5b:36:05:bb:9f:10:54:89:6f:ca:db:b3:2c:2b:e6:0e:cc:cd:
5d:32:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:40 2024 by rpki-client on console-ams.rpki-client.org