Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/7qJyX2WOIwMT4j26bjdjkd9nI24.roa
File: 7qJyX2WOIwMT4j26bjdjkd9nI24.roa (raw, json)
Hash identifier: KiaEMs0sj3c4tHQ0X6ILzgzmrpoG10JKCP35oXpizIY=
Subject key identifier: EE:A2:72:5F:65:8E:23:03:13:E2:3D:BA:6E:37:63:91:DF:67:23:6E
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 018570F0C759934E432B808B2F32E2C11FAA
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/7qJyX2WOIwMT4j26bjdjkd9nI24.roa
Signing time: Mon 02 Jan 2023 05:25:05 +0000
ROA not before: Mon 02 Jan 2023 05:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208810
IP address blocks: 91.216.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c7:59:93:4e:43:2b:80:8b:2f:32:e2:c1:1f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Jan 2 05:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eea2725f658e230313e23dba6e376391df67236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:2d:fe:20:d5:94:50:8f:16:e8:79:2b:dd:
10:f8:5b:4b:7e:da:4e:9e:d6:b4:cd:be:b9:3e:50:
26:0a:15:69:9b:c7:d3:4b:c3:c8:2b:0e:c0:6a:07:
38:ee:a4:b5:25:6d:b0:67:1c:5e:43:99:6f:58:8e:
69:18:8f:ad:4c:e7:5f:47:58:78:65:b9:d5:c2:b2:
60:e1:37:5f:72:79:86:4d:5e:6a:1d:a7:f4:66:21:
cb:16:24:87:68:34:38:da:ee:44:52:03:f4:a9:94:
1e:3d:8e:c6:d9:da:69:bb:67:30:3e:4c:5e:f0:fd:
04:01:bb:69:df:68:cd:c2:e2:91:45:44:63:06:74:
fe:55:82:3f:1a:50:1f:ef:55:b6:6c:ee:b6:0e:43:
ff:4b:dd:b7:91:3a:49:8e:45:21:00:32:6a:0c:c1:
e7:fd:23:1b:9f:2e:8e:3c:f9:ca:36:ef:1d:4a:bd:
dc:74:47:ab:a0:18:13:eb:46:76:3e:77:8f:82:d1:
29:d0:0b:aa:19:2d:01:3c:18:b5:55:b0:52:3b:11:
c0:f3:64:3a:5c:3c:30:e3:70:8e:86:bd:f8:2a:56:
3b:ab:ae:34:f0:7f:cb:1e:1b:0e:1b:eb:4d:61:86:
d6:00:4e:c8:13:a1:bf:c8:cc:e7:20:d6:e5:cf:56:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:72:5F:65:8E:23:03:13:E2:3D:BA:6E:37:63:91:DF:67:23:6E
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/7qJyX2WOIwMT4j26bjdjkd9nI24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:c1:28:12:55:d8:4f:19:96:39:d5:ad:0c:7f:76:55:cb:82:
cd:a8:3d:c9:82:ff:ff:cd:5b:de:d3:7c:58:31:64:1b:ec:06:
ea:5d:55:24:c8:ab:6a:33:e3:a0:1e:b4:84:e9:bc:2e:09:55:
fd:74:e4:3f:05:ca:18:af:18:ab:b9:cf:18:61:a8:02:8d:c5:
e2:96:98:38:3f:10:e4:08:c6:a5:cf:d1:1e:a7:74:c9:4c:b5:
83:f1:2d:a1:4c:4d:e8:00:e3:75:b0:28:1c:eb:b9:6d:ba:52:
d4:f2:05:f2:1e:78:3f:11:b1:84:28:fb:a6:a0:62:fd:c0:04:
54:c2:b6:f0:dd:36:03:64:2a:af:9e:4a:32:c0:32:4e:97:1f:
9a:8e:55:47:ec:dc:b2:01:03:05:82:87:51:63:99:9f:e2:44:
d2:a8:8c:44:74:ae:b4:62:01:6a:e8:88:a1:9c:82:44:5a:41:
57:0e:b7:a1:fe:79:d5:e6:ff:a8:5d:ab:d0:48:5b:15:04:3f:
0f:98:30:ee:76:66:40:83:8c:03:c6:e8:a3:5d:ab:2c:90:72:
2f:86:4d:c9:54:ad:d1:cf:d3:8c:83:81:66:33:72:4a:3e:8b:
1e:a6:ac:05:3f:b5:af:dd:48:36:55:93:a2:3c:61:75:04:cb:
94:39:51:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:47 2024 by rpki-client on console-fra.rpki-client.org