Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/FnUvXdWdiH0-qlzYIgHO5CeIRdg.roa
File: FnUvXdWdiH0-qlzYIgHO5CeIRdg.roa (raw, json)
Hash identifier: 1s3KIImiqOqI3v6X/08HIPAJyE9DrQ/6hA4DfPitrd0=
Subject key identifier: 16:75:2F:5D:D5:9D:88:7D:3E:AA:5C:D8:22:01:CE:E4:27:88:45:D8
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 01857139E7A1A5F7CF049ED5810C3CC7AA0C
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/FnUvXdWdiH0-qlzYIgHO5CeIRdg.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209913
IP address blocks: 91.199.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e7:a1:a5:f7:cf:04:9e:d5:81:0c:3c:c7:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16752f5dd59d887d3eaa5cd82201cee4278845d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:9f:f9:03:33:8f:91:84:6b:ef:8b:5c:3a:
8a:c5:7f:6a:39:9e:b4:38:7e:33:b2:74:e1:c8:f4:
53:be:6b:f7:a8:ea:39:5c:e9:21:09:24:39:70:97:
f2:d0:2c:03:bb:a9:1f:1b:d1:90:bd:d9:27:ed:09:
d2:b8:1e:59:26:36:e5:e1:3c:5d:76:4c:57:28:c4:
aa:23:6b:17:6d:7c:16:fc:ec:40:0d:1f:d9:6a:25:
5d:1d:26:12:e2:55:4b:28:cc:d5:0f:18:5a:b2:ae:
88:75:2f:a8:35:a1:e7:00:72:8a:c4:f5:1c:9c:21:
43:5e:ea:49:69:d5:8c:1d:4e:bd:ea:9d:ab:08:69:
7e:be:13:b1:fa:d2:9d:16:1f:4a:c0:5e:31:8b:1b:
1a:29:15:d7:d9:c8:01:0a:6b:f6:ba:50:87:fc:0f:
d1:33:06:95:71:04:90:22:d2:7e:02:d8:9e:a4:91:
d0:95:49:00:e2:24:f3:2f:f3:16:6a:7b:d5:96:6f:
a8:8d:9d:a8:75:e4:e2:eb:db:02:df:e0:fb:b2:ff:
f1:b6:21:de:8a:a9:dd:33:7c:5e:f3:97:0a:c2:c7:
60:d1:38:88:df:d2:19:68:26:45:21:ee:f6:22:9e:
f1:03:db:cb:23:a3:f8:86:22:4e:8e:9b:b9:f3:c6:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:2F:5D:D5:9D:88:7D:3E:AA:5C:D8:22:01:CE:E4:27:88:45:D8
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/FnUvXdWdiH0-qlzYIgHO5CeIRdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.186.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:09:a2:5b:21:73:4f:77:df:9a:71:db:44:c8:c0:77:ef:b9:
6d:bf:43:c3:85:2f:c9:06:44:e9:6e:ba:62:ea:39:04:4d:a2:
24:7d:cf:60:0f:e0:25:31:10:67:13:26:4a:8f:fb:23:c9:82:
5c:e1:d9:c0:96:e3:19:3a:d4:fa:76:55:d2:83:99:d2:9f:da:
69:18:40:5f:0f:84:27:db:d7:00:6a:67:0d:eb:6a:99:e8:2d:
48:ba:e2:44:a8:63:3a:34:1d:83:d5:b2:a6:36:f0:30:8f:98:
bf:1e:ff:63:ef:56:a1:68:62:de:29:d8:0d:96:32:be:91:7c:
53:43:66:d7:0f:c5:2f:1c:ca:73:ac:f8:63:93:20:db:92:27:
4c:59:dd:83:12:44:61:49:95:e8:bb:6c:11:71:f5:94:4d:4c:
20:fe:8c:28:b6:83:ee:f1:29:61:72:79:9a:9e:b3:6a:4f:01:
6c:f6:52:fd:73:6b:7c:87:69:4a:ec:25:e5:47:9e:6c:c0:a0:
a8:d0:38:0b:dd:25:12:e2:f5:25:08:de:6d:0c:3a:ad:3e:67:
db:ed:a3:57:e3:96:2d:b0:93:05:9d:d0:2a:28:ef:64:86:3d:
07:b2:d1:a1:ca:3f:8b:8f:fc:4d:a8:76:19:82:64:03:5c:91:
e2:d9:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:21 2024 by rpki-client on console-ams.rpki-client.org