Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/_Cyz_2rbawVOs6ShGAb9f7XCXd8.roa
File: _Cyz_2rbawVOs6ShGAb9f7XCXd8.roa (raw, json)
Hash identifier: XnaAJn/TBa7ROSlpQnIpoMw6xChtO4DGODqhL1O8uPM=
Subject key identifier: FC:2C:B3:FF:6A:DB:6B:05:4E:B3:A4:A1:18:06:FD:7F:B5:C2:5D:DF
Certificate issuer: /CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Certificate serial: 01857139E6BED7B03B2442F3A334149ADE20
Authority key identifier: 1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/_Cyz_2rbawVOs6ShGAb9f7XCXd8.roa
Signing time: Mon 02 Jan 2023 06:44:57 +0000
ROA not before: Mon 02 Jan 2023 06:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 91.199.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e6:be:d7:b0:3b:24:42:f3:a3:34:14:9a:de:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1de936ff1784b78296b8bc4b4b0381b293ed10
Validity
Not Before: Jan 2 06:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc2cb3ff6adb6b054eb3a4a11806fd7fb5c25ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:cd:91:b0:51:72:7a:c1:d4:cf:80:99:ba:
7a:3f:7a:a8:25:2b:c9:d2:f1:0b:6e:85:73:2e:a5:
61:de:7f:ee:86:31:22:7c:ce:ba:9c:66:6c:d2:64:
8c:11:08:e0:b9:e7:85:2f:e6:0c:74:b3:bc:33:56:
cf:63:ae:35:30:ba:a4:69:44:f4:00:59:ba:89:f7:
81:85:2a:fb:f9:29:10:8f:ff:6b:7d:c2:0d:2d:0d:
b3:d7:ad:14:03:f0:04:c5:5f:70:45:a5:1a:89:17:
02:8c:5a:a7:c8:01:71:86:92:3f:de:4e:00:f5:ed:
2d:ab:d2:9b:78:ef:65:8a:2f:39:7a:39:98:c5:10:
e4:83:e7:10:6e:04:ce:67:f4:75:ba:ac:54:d9:cf:
82:d8:84:e4:3d:eb:9a:41:e2:2a:12:25:3a:0d:7e:
ca:fb:bf:53:fb:02:9a:f9:4c:f7:62:11:08:0b:27:
18:a7:1e:b8:fc:29:e2:60:aa:30:e7:dc:f4:2a:e4:
7e:60:20:a2:62:65:2b:62:ab:d5:cf:5e:37:47:e9:
5f:3c:1b:77:4c:45:db:fd:7d:f6:96:73:20:3d:4f:
94:2e:26:57:2c:a5:2a:aa:a6:b3:31:ba:8a:2d:fe:
e6:00:78:58:bf:9e:c0:0c:f1:1a:02:4d:50:b4:1a:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:B3:FF:6A:DB:6B:05:4E:B3:A4:A1:18:06:FD:7F:B5:C2:5D:DF
X509v3 Authority Key Identifier:
keyid:1F:1D:E9:36:FF:17:84:B7:82:96:B8:BC:4B:4B:03:81:B2:93:ED:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx3pNv8XhLeClri8S0sDgbKT7RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/_Cyz_2rbawVOs6ShGAb9f7XCXd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/449ae6-5943-46d0-b00c-927b86356fa7/1/Hx3pNv8XhLeClri8S0sDgbKT7RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.186.0/24
Signature Algorithm: sha256WithRSAEncryption
02:08:81:4e:8f:74:ad:20:8e:1b:3e:5b:c3:a2:88:b3:b8:c4:
70:cb:f3:33:74:7b:da:be:0d:0f:a4:ab:bc:da:1b:16:07:6a:
e6:ae:fa:0f:d8:59:82:c3:fb:07:0a:7e:df:3c:ba:88:18:33:
a4:08:39:37:9b:e4:1e:37:ac:c6:4e:c4:5d:a2:3b:20:24:9e:
42:da:44:bc:eb:3c:47:74:e3:e3:8d:b0:c5:c0:8c:b5:ba:dd:
95:98:6a:27:7e:8f:f0:a5:a2:00:10:61:8c:52:00:9d:f3:4b:
98:bd:f2:5e:ed:74:e1:33:c1:dc:cc:4b:1b:74:42:b4:2b:ff:
3d:c4:49:cc:ec:92:bc:98:5b:ab:b4:66:7a:a0:57:fc:95:26:
71:af:22:cc:d0:05:46:c7:bf:3d:bf:45:fb:0a:68:e0:72:72:
c0:9a:c3:71:cb:73:e1:d7:d6:d2:3b:f4:75:7a:39:cd:a1:e7:
6f:fa:b9:e5:81:dd:37:ef:85:7e:ab:f6:62:61:16:12:21:f6:
39:2f:f3:a9:0b:cb:9f:56:01:f8:90:24:7e:69:76:af:f7:77:
94:43:d0:e5:18:5b:00:c5:c9:67:b2:49:09:d7:77:43:53:e3:
c9:41:cc:3e:42:68:05:d3:a0:df:f5:b9:51:81:ce:98:09:e8:
fe:34:05:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:34 2023 by rpki-client on console-ams.rpki-client.org