Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/kzC2fjMYUefHH5r41-5A7nP2M4I.roa
File: kzC2fjMYUefHH5r41-5A7nP2M4I.roa (raw, json)
Hash identifier: T53LzVnHViZN3tMGU9dWlb9Tv4f1UykZxMenA78IfBY=
Subject key identifier: 93:30:B6:7E:33:18:51:E7:C7:1F:9A:F8:D7:EE:40:EE:73:F6:33:82
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01856DAF66C6EE86494FA0F0762EA7064D09
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/kzC2fjMYUefHH5r41-5A7nP2M4I.roa
Signing time: Sun 01 Jan 2023 14:14:49 +0000
ROA not before: Sun 01 Jan 2023 14:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 91.151.93.0/24 maxlen: 32
91.151.90.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:66:c6:ee:86:49:4f:a0:f0:76:2e:a7:06:4d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 1 14:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9330b67e331851e7c71f9af8d7ee40ee73f63382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:4b:fb:26:bc:3e:93:24:7a:12:7d:37:1d:
db:c2:ba:f4:61:5b:3f:c8:73:9d:67:8b:66:0f:70:
0d:ae:0a:07:34:7e:d6:16:87:1d:b4:55:2c:43:e3:
b7:f6:7f:5e:18:e9:0c:c5:6e:7e:3e:17:79:15:65:
a2:45:ef:93:57:d0:4f:67:35:b9:1b:d1:a9:a9:5b:
58:b3:91:4f:db:23:eb:0c:53:e9:16:9c:94:3f:26:
b5:cb:4c:96:9c:06:59:0c:5d:b9:04:94:03:87:61:
f4:1b:e7:30:fc:aa:d9:72:32:06:cf:c2:89:a2:48:
0d:fa:dd:f6:21:62:54:1e:ef:1b:12:1e:54:ed:02:
9c:dc:33:3e:86:b9:70:ca:24:e0:1a:76:10:f4:c2:
6e:6f:79:b2:ed:11:a0:cd:d5:7f:fc:36:3a:ad:0e:
70:b2:c2:a6:a6:d4:89:e1:b0:c6:3b:01:56:21:65:
63:ab:ef:1f:d8:20:69:f5:e0:ee:38:17:aa:49:61:
13:ff:ad:21:3e:3a:ad:bf:e7:73:e5:47:1e:45:de:
c2:87:d7:a8:11:58:37:76:01:51:4e:b5:d6:b0:8d:
41:e2:8c:b7:df:3b:3f:b0:c5:56:21:c4:df:2e:38:
b6:0b:38:8e:6f:85:c5:37:3e:d8:36:b2:db:97:c4:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:B6:7E:33:18:51:E7:C7:1F:9A:F8:D7:EE:40:EE:73:F6:33:82
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/kzC2fjMYUefHH5r41-5A7nP2M4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.90.0/24
91.151.93.0/24
Signature Algorithm: sha256WithRSAEncryption
98:44:d0:0b:7e:ba:e7:b8:f5:d8:01:22:64:51:43:cb:0c:5a:
9d:1a:37:0a:3e:81:b2:13:b2:dc:f2:c8:69:1c:a7:82:aa:38:
1a:35:06:a1:46:8d:e7:d0:40:5e:01:ef:4f:2c:af:ad:a2:83:
06:8e:fe:98:c2:a6:f8:35:71:e7:24:21:74:8b:16:df:72:03:
31:c9:66:bd:9b:c6:76:00:e8:2f:57:c4:a5:b0:e1:60:97:87:
d7:85:d7:6d:fb:ff:92:88:75:31:56:19:cd:0f:3a:a9:c7:7a:
45:2e:a4:d6:9e:b0:63:b3:48:9b:d7:87:69:49:b1:36:0f:80:
59:bd:87:1c:ec:f5:8a:bd:36:0f:41:d7:1b:66:50:ad:dc:7d:
7c:e3:29:bf:4c:09:e2:f0:da:35:e6:6e:b0:b9:3f:71:f5:ee:
fc:08:70:d7:94:13:50:82:10:e1:c4:68:ab:e2:8b:85:99:d8:
b1:95:57:92:7e:21:4c:a4:66:19:9f:36:59:e2:55:7d:a0:51:
6f:32:a2:99:f1:90:9e:38:0d:9c:e5:74:af:de:e0:99:26:2f:
5e:fa:7e:3f:4b:20:af:ca:62:15:8f:1f:30:5f:39:62:b0:fe:
15:ec:be:2c:bd:17:27:5d:2c:e7:a8:bd:c5:b3:69:cf:58:2a:
c6:97:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:24 2024 by rpki-client on console-fra.rpki-client.org