Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S-7IUObMg5704tZckYg-L1lpBsE.roa
File: S-7IUObMg5704tZckYg-L1lpBsE.roa (raw, json)
Hash identifier: 5RPUPXoQ6wdQXHf0Pdf3x5zXIYlxPM+MsD7ESJpiEIs=
Subject key identifier: 4B:EE:C8:50:E6:CC:83:9E:F4:E2:D6:5C:91:88:3E:2F:59:69:06:C1
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01899E12E5E5047AC524606CF038897D3E3D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S-7IUObMg5704tZckYg-L1lpBsE.roa
Signing time: Fri 28 Jul 2023 19:56:25 +0000
ROA not before: Fri 28 Jul 2023 19:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198556
IP address blocks: 91.103.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:12:e5:e5:04:7a:c5:24:60:6c:f0:38:89:7d:3e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 28 19:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4beec850e6cc839ef4e2d65c91883e2f596906c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:d2:e4:c5:8c:10:9f:a7:d7:eb:82:d1:50:
79:92:1b:1e:85:7e:15:00:1f:de:46:e7:5b:e2:cd:
17:a3:99:20:be:0a:ff:cb:82:d5:be:5f:d1:c2:36:
b9:6e:b5:9c:f3:a8:c3:36:9b:45:1d:e1:ab:20:f0:
7a:16:f8:38:6f:e4:21:ab:a6:67:46:0d:01:71:a2:
5d:d6:14:79:1d:79:6d:9c:c3:d8:36:a6:4c:8e:0c:
ee:61:39:b1:5e:d4:8d:3f:d8:4a:65:2c:aa:4c:34:
2d:1e:e2:35:20:b4:4e:ce:ad:b3:73:01:71:94:47:
5b:23:5b:d1:33:39:0f:54:ae:62:c9:11:73:4d:df:
ad:de:be:22:4e:c4:ac:4b:09:7f:1a:7b:e0:81:fb:
dc:94:fb:b9:3a:36:6c:96:06:fe:a9:7e:71:13:11:
51:9f:9a:a8:8d:04:7a:df:b6:50:f0:5b:a4:07:cd:
48:42:9d:f6:3b:73:3f:65:ec:c2:e6:0f:f3:4a:c7:
e0:95:81:35:a2:87:e8:49:6e:b8:06:3a:73:e8:fc:
ae:c1:7a:6d:db:7e:80:47:f9:e7:3f:e3:e4:9e:f3:
ac:67:49:f8:d4:60:31:15:ca:7b:80:a7:47:7f:0e:
1c:99:3d:8f:7b:93:7a:f2:cc:73:ad:b8:59:ee:6b:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EE:C8:50:E6:CC:83:9E:F4:E2:D6:5C:91:88:3E:2F:59:69:06:C1
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/S-7IUObMg5704tZckYg-L1lpBsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.253.0/24
Signature Algorithm: sha256WithRSAEncryption
08:08:e3:5b:23:ab:2d:1c:26:d6:b6:ec:c3:a1:ed:3a:00:ce:
5c:50:f4:c4:41:1d:16:d7:10:f2:11:c9:7d:09:d9:c9:79:be:
ff:57:1b:32:f9:62:92:db:6b:5c:a5:e3:50:d5:ef:5c:57:b5:
40:be:62:1c:93:28:f3:06:0c:23:09:6c:ec:36:36:31:70:3e:
c4:d6:ab:e0:9a:ef:ce:b7:39:bc:52:9d:cd:b1:eb:45:5b:57:
f7:d3:7e:90:73:08:a6:d4:a3:9c:0b:2e:56:98:b4:c1:1a:16:
2b:c8:91:08:84:5a:b5:4b:76:85:de:94:e4:6d:84:8d:a8:f7:
12:20:6f:d7:84:ef:9e:97:93:7a:77:2c:54:10:01:6f:c1:98:
fc:a4:53:2b:ec:71:fe:87:f9:b6:d7:0b:52:5f:5d:b7:a1:3f:
97:86:c1:b7:1a:59:69:42:f4:ef:95:2e:39:c0:8b:41:31:0b:
fa:60:a8:55:1a:64:bd:86:f8:f6:09:f1:cf:54:0d:af:6e:01:
3c:9c:18:84:cb:f6:26:9d:46:24:da:41:d8:33:48:86:d8:f1:
32:62:9a:92:f9:38:58:ae:db:c8:f6:4c:97:be:d3:8d:db:b8:
22:75:3b:c5:7e:6e:6b:cb:3a:f3:72:4d:a7:78:bf:60:3c:75:
f1:04:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 19:46:37 2023 by rpki-client on console-ams.rpki-client.org