Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/xoXcU9vmxT9U26QYNX4sq3ZBTTM.roa
File: xoXcU9vmxT9U26QYNX4sq3ZBTTM.roa (raw, json)
Hash identifier: /wkanix4L7VMgB4gNO7jOybVbuq1ifHK3usu8SPa9MU=
Subject key identifier: C6:85:DC:53:DB:E6:C5:3F:54:DB:A4:18:35:7E:2C:AB:76:41:4D:33
Certificate issuer: /CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Certificate serial: 018ABE51A9300B866C809C78C8E67CB3BD95
Authority key identifier: F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/xoXcU9vmxT9U26QYNX4sq3ZBTTM.roa
Signing time: Fri 22 Sep 2023 19:15:37 +0000
ROA not before: Fri 22 Sep 2023 19:15:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47270
IP address blocks: 91.212.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:be:51:a9:30:0b:86:6c:80:9c:78:c8:e6:7c:b3:bd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Validity
Not Before: Sep 22 19:15:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c685dc53dbe6c53f54dba418357e2cab76414d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e3:99:61:47:2f:5f:5b:ff:ed:f4:6d:3e:58:
9e:ba:b0:00:8a:ab:be:ae:a2:c9:30:6e:05:bc:99:
f9:a4:bc:c9:ee:aa:be:fc:1e:bc:53:57:74:2b:8e:
8b:88:5f:50:da:db:d3:36:a3:52:cc:75:02:b3:3a:
91:07:4e:1e:97:03:f3:51:bc:f1:b3:aa:da:3d:c9:
dd:6a:74:c5:0b:f1:71:94:1a:ab:8c:f7:49:b0:7f:
90:62:ec:56:57:44:c1:5b:a0:59:6c:13:2d:05:df:
f4:53:ef:72:7f:b9:c8:a0:8a:f0:10:4e:0d:e7:4a:
ec:b3:4c:30:cc:63:5a:70:99:a7:b1:85:dd:e4:83:
02:4f:1e:1f:67:be:fb:14:e5:cb:fa:f8:92:98:93:
d7:1b:76:b4:70:c0:e1:fa:5c:9c:5d:6c:b9:0c:cb:
2c:e1:bf:1a:8b:f6:90:63:ca:e0:de:c2:6e:73:32:
87:e2:8f:79:80:7c:04:42:26:35:ee:7b:ad:66:ba:
7a:c4:c8:03:e1:94:94:b7:95:44:9d:2c:59:cd:81:
58:69:06:ee:38:b6:e3:48:36:a8:56:76:aa:d8:76:
07:bc:c9:f0:ba:ab:d7:53:22:0d:26:b7:43:31:d8:
9d:0b:ad:06:35:36:10:c4:f8:d2:24:20:22:86:9b:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:DC:53:DB:E6:C5:3F:54:DB:A4:18:35:7E:2C:AB:76:41:4D:33
X509v3 Authority Key Identifier:
keyid:F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/xoXcU9vmxT9U26QYNX4sq3ZBTTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/8rHa_EVYgkK_muEFyRrog6HEA7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3a:16:9a:e6:08:5e:b9:d8:22:53:69:b7:52:4b:4f:61:40:
c5:d9:93:b5:09:f8:b5:d5:bf:62:0c:f0:4a:3f:a2:fa:51:3d:
e1:9e:10:f8:d3:82:c3:86:49:0b:8f:a0:e2:85:e4:0b:a4:56:
3b:ce:d4:2a:d4:61:2f:73:b4:63:22:9f:3d:3c:50:18:2a:85:
91:63:38:a0:8f:6c:12:98:3a:1c:9a:2e:07:a2:31:e3:d6:6c:
5b:40:60:44:eb:d5:37:d2:85:02:b3:2c:78:4b:c4:2c:17:4f:
c2:58:fc:7a:9a:69:93:29:37:e1:be:2b:76:72:58:98:67:8b:
3f:94:49:38:09:98:5f:ed:75:52:3c:3b:f1:7c:e3:9a:f9:a1:
4a:40:a9:ed:7b:c9:ee:41:a8:be:e7:65:6b:33:8a:93:9b:4a:
8c:6a:4d:76:06:d3:4b:93:c2:7d:b4:74:c8:ce:0e:b9:4c:b7:
d6:f4:c9:c3:68:18:28:d7:ad:73:3d:50:af:25:78:e1:95:e8:
1d:eb:0c:e5:97:f0:b1:0e:ca:c7:f5:83:50:ff:6c:ea:4d:39:
c1:29:c8:40:b4:3b:6e:36:e1:91:9c:12:f2:79:9a:90:fa:a3:
63:21:cb:dc:ef:ef:18:62:90:cd:ab:8a:2d:29:0f:bc:7b:37:
f5:33:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:41 2024 by rpki-client on console-ams.rpki-client.org