Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/K-Tu66Q7sMjbhK0qIJqkmGqxke4.roa
File: K-Tu66Q7sMjbhK0qIJqkmGqxke4.roa (raw, json)
Hash identifier: xHhjKA6Og0ZSz+I0/vNs9JIcn1XfsbOwMlMNwDD5/DY=
Subject key identifier: 2B:E4:EE:EB:A4:3B:B0:C8:DB:84:AD:2A:20:9A:A4:98:6A:B1:91:EE
Certificate issuer: /CN=3fdf2cf8659206d8e6f82c24ec6f9d9e6d673e07
Certificate serial: 018570798B1F7C3C4F24C7690F2D9E5AC23E
Authority key identifier: 3F:DF:2C:F8:65:92:06:D8:E6:F8:2C:24:EC:6F:9D:9E:6D:67:3E:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98s-GWSBtjm-Cwk7G-dnm1nPgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/K-Tu66Q7sMjbhK0qIJqkmGqxke4.roa
Signing time: Mon 02 Jan 2023 03:14:51 +0000
ROA not before: Mon 02 Jan 2023 03:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.198.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:8b:1f:7c:3c:4f:24:c7:69:0f:2d:9e:5a:c2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf2cf8659206d8e6f82c24ec6f9d9e6d673e07
Validity
Not Before: Jan 2 03:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2be4eeeba43bb0c8db84ad2a209aa4986ab191ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:dd:15:5c:1a:5d:95:40:95:f8:9f:f1:05:
0c:5d:d1:28:16:6e:70:a9:f1:61:50:5a:cd:0b:eb:
64:a1:fc:01:99:3e:51:b2:30:97:29:55:b1:58:3f:
9e:41:4b:a5:59:a5:be:44:cf:e2:02:9c:7a:6a:39:
89:3c:81:93:73:10:aa:40:36:37:12:05:d8:2f:a7:
c3:4a:8e:78:c2:85:3f:54:50:a8:db:e4:83:c1:1e:
db:e1:44:82:08:4b:2b:a5:2e:67:d4:4e:24:4d:6c:
c8:c7:6f:fd:bb:f8:ce:39:ca:5f:41:e9:75:51:db:
91:19:47:81:5e:f1:35:eb:3a:3a:9a:52:6e:32:bf:
35:56:96:ba:f2:27:96:6a:05:22:84:64:f0:3b:1d:
d3:33:ea:d7:dd:e2:df:16:e3:74:40:b9:3c:bc:8d:
fd:3c:43:44:18:dd:5d:d3:36:79:53:5e:13:2e:9c:
74:d2:2e:c8:0b:1b:fb:ee:f3:2d:88:c2:8d:e3:dc:
3c:1c:6b:26:9b:8a:5b:6a:cc:c7:63:27:6c:21:57:
a6:9d:58:92:9f:cb:d3:c7:66:78:e9:b7:dc:4c:ce:
51:fd:7f:f2:08:00:26:b8:96:7c:13:ce:d2:a5:b0:
ac:9f:86:94:a2:81:da:b3:8f:93:34:8b:4b:7a:22:
64:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E4:EE:EB:A4:3B:B0:C8:DB:84:AD:2A:20:9A:A4:98:6A:B1:91:EE
X509v3 Authority Key Identifier:
keyid:3F:DF:2C:F8:65:92:06:D8:E6:F8:2C:24:EC:6F:9D:9E:6D:67:3E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98s-GWSBtjm-Cwk7G-dnm1nPgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/K-Tu66Q7sMjbhK0qIJqkmGqxke4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63efc9-5e1c-4773-94a2-e60de555a8be/1/P98s-GWSBtjm-Cwk7G-dnm1nPgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:6d:4e:26:ff:64:56:c9:67:9d:e5:3e:98:31:ae:0b:d4:9c:
d3:ff:95:ba:a1:f3:43:cc:cb:2d:4d:78:a3:bf:80:ed:e9:13:
f0:03:d5:88:52:00:9e:dd:80:df:58:ad:d6:ac:8c:77:39:b3:
6a:79:74:8f:14:31:8d:ee:90:b0:c6:5d:92:37:07:66:73:4a:
dc:cf:3e:85:a8:3c:5a:95:40:6f:f1:72:96:f5:29:d0:7b:47:
3d:50:ac:c9:e9:f7:84:79:fd:89:7a:6d:5f:77:8e:52:5d:aa:
96:ab:b1:48:9a:3c:ee:7f:b7:c4:ee:cd:b2:a9:ee:9f:60:46:
3f:f2:3e:5d:8f:6d:7f:2b:1c:8c:ad:3b:a5:5d:f3:5e:ee:cc:
9c:d4:8b:5e:68:08:61:59:82:3d:2a:86:29:32:1c:8b:31:70:
65:65:2b:ee:f7:15:35:8b:1b:cb:b7:0e:8c:1f:07:3b:1c:4d:
f3:83:4f:be:ee:04:87:fd:59:6a:1b:9a:62:34:46:40:6c:cf:
a5:ca:76:a0:c8:f7:c6:4a:30:b5:bb:b7:d8:a3:5a:c7:e8:88:
c5:c1:ea:d9:63:ae:fc:9b:64:68:24:3c:f7:34:9f:49:c7:e8:
99:e5:50:3b:90:7f:30:db:3b:65:f5:fb:7a:83:27:a4:17:c0:
bc:19:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:56 2023 by rpki-client on console-fra.rpki-client.org