Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/0SY9V8mY8MGGmPouRLcon0NP5UE.roa
File: 0SY9V8mY8MGGmPouRLcon0NP5UE.roa (raw, json)
Hash identifier: CmvZYhA3xQA7AqP5q13TJPXTw24Vv1ozzhBByrjDaQ8=
Subject key identifier: D1:26:3D:57:C9:98:F0:C1:86:98:FA:2E:44:B7:28:9F:43:4F:E5:41
Certificate issuer: /CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Certificate serial: 01856D4A9AA59D155649A06A8E22D07341D8
Authority key identifier: F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/0SY9V8mY8MGGmPouRLcon0NP5UE.roa
Signing time: Sun 01 Jan 2023 12:24:43 +0000
ROA not before: Sun 01 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60889
IP address blocks: 91.212.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:9a:a5:9d:15:56:49:a0:6a:8e:22:d0:73:41:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Validity
Not Before: Jan 1 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1263d57c998f0c18698fa2e44b7289f434fe541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:43:e5:b5:79:57:5f:e7:10:3a:69:6c:70:
67:b4:73:88:5c:27:93:b9:fe:ed:76:73:76:c9:85:
b8:c9:df:33:cb:68:20:19:3e:36:8d:39:f0:bc:c1:
ad:c6:3c:61:b7:94:1e:ff:17:c0:ba:1d:4d:00:da:
16:41:f9:0f:3a:e9:6c:2e:a5:49:15:f9:16:6f:8c:
de:8e:4c:dc:07:07:68:72:75:04:c8:70:b7:d9:cc:
cb:2f:c3:9e:90:de:8e:f5:c2:a9:e2:49:0e:fa:76:
17:d5:5b:2b:43:82:58:68:cb:47:f9:6d:bc:8e:d1:
f5:97:01:d3:04:27:64:e6:a0:de:4b:96:3d:74:54:
38:cd:89:1f:33:38:7c:a1:0e:98:b6:5c:d0:13:3a:
f8:ea:9d:e2:49:cf:c8:cf:62:f4:9e:1d:ea:a2:4f:
be:eb:af:f2:bb:52:fc:35:c7:d7:79:9f:ce:23:09:
8f:98:26:80:8e:cb:96:ba:6f:b0:dc:75:38:34:6d:
50:08:d3:d6:d1:e3:8c:c2:f3:ff:81:46:b3:e5:74:
66:9c:2d:f0:8d:cb:a5:f8:c2:17:7f:19:ac:32:7c:
92:47:8a:9b:c2:b0:f1:71:e3:e5:ec:95:34:11:07:
ac:b6:61:e5:8f:12:39:2a:f8:c4:25:0d:36:25:17:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:26:3D:57:C9:98:F0:C1:86:98:FA:2E:44:B7:28:9F:43:4F:E5:41
X509v3 Authority Key Identifier:
keyid:F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/0SY9V8mY8MGGmPouRLcon0NP5UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/8rHa_EVYgkK_muEFyRrog6HEA7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.61.0/24
Signature Algorithm: sha256WithRSAEncryption
93:88:01:e8:28:b0:7c:d5:55:34:23:2c:81:a3:44:c5:49:f8:
13:10:2b:57:53:7f:90:98:bf:f7:96:ed:fa:93:38:dc:33:2a:
83:af:64:de:74:60:5e:8f:da:e6:d2:73:54:54:34:46:04:98:
89:bf:ad:57:3d:27:63:47:1d:b9:34:21:da:b6:12:ee:72:95:
1b:11:b8:06:93:de:22:6b:66:96:d8:f6:16:b2:ba:b9:19:f1:
fa:8d:f3:81:f6:49:5b:53:32:2d:e7:18:07:f3:37:ca:5d:a5:
b7:2e:00:96:dd:ca:97:ee:0b:93:f3:04:b6:28:38:f8:89:39:
46:9b:1c:7d:39:0b:73:c0:24:c8:fe:47:55:c0:57:ba:46:59:
4f:b8:f0:a2:9d:c6:ab:df:be:66:ac:96:aa:cf:26:03:5f:e2:
8a:c9:ed:24:a0:ee:14:93:8c:c3:f7:d1:ee:c3:ca:3a:70:de:
5e:1b:c2:48:6b:17:71:a9:32:c7:a2:d3:03:ef:4c:45:75:06:
be:87:0e:27:0f:1e:1e:94:a3:97:83:a9:b7:e9:11:bf:8e:9e:
03:e4:08:58:da:dd:4d:00:95:6e:a3:59:ef:99:78:44:9f:2d:
f6:14:7d:84:52:df:e3:1e:51:ef:55:10:2c:a1:20:9f:dd:68:
3d:bd:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org