Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/A9BIKpyj27EplaSm4ZW033hHhYI.roa
File: A9BIKpyj27EplaSm4ZW033hHhYI.roa (raw, json)
Hash identifier: 09/uKhvcakYatbJBFoR0NA70FAtDgiFY3sOVaYZJJ4U=
Subject key identifier: 03:D0:48:2A:9C:A3:DB:B1:29:95:A4:A6:E1:95:B4:DF:78:47:85:82
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0188EEC08DA63E47F1A57328C36294F9FC31
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/A9BIKpyj27EplaSm4ZW033hHhYI.roa
Signing time: Sat 24 Jun 2023 18:52:56 +0000
ROA not before: Sat 24 Jun 2023 18:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 91.190.185.0/24 maxlen: 24
91.190.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ee:c0:8d:a6:3e:47:f1:a5:73:28:c3:62:94:f9:fc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 24 18:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03d0482a9ca3dbb12995a4a6e195b4df78478582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:7c:ff:af:76:03:ad:fd:49:40:d4:e8:c0:
f7:74:42:39:40:17:14:b9:a3:98:41:9e:11:c5:5e:
68:38:f9:5a:19:62:6a:1e:43:f4:56:e6:ec:1c:3d:
ed:44:93:95:4d:ba:94:cf:df:77:ca:10:ab:c8:01:
57:8f:80:3f:3c:c9:42:e9:ee:96:60:ce:dd:13:f0:
2e:6f:f7:f9:b9:78:0b:e8:55:1c:50:b4:2d:22:a3:
52:94:64:10:13:5f:2c:d9:88:f5:b5:32:36:e4:c5:
c1:c3:10:b0:37:a6:ff:16:48:57:90:b7:4c:1f:d0:
68:43:93:ec:6e:21:96:88:4b:ac:2b:6f:44:b6:dc:
d9:bd:45:2b:a6:8f:10:21:c5:56:b4:f6:53:e1:67:
af:ca:3a:75:c8:ea:64:41:32:7e:fd:9f:b5:1b:1c:
38:53:bf:31:51:a5:67:2f:0b:48:d2:24:26:26:35:
2e:44:f1:52:1b:bf:8e:89:f9:0e:9c:99:04:3b:b1:
da:cc:be:b0:f0:f2:ce:30:93:4f:73:9e:a0:bc:ba:
97:7a:78:b8:5b:19:70:ab:91:57:2e:d4:0f:06:31:
20:00:b8:eb:1e:69:6a:d9:02:a3:8b:c5:a3:8c:e0:
81:6f:cd:bc:25:0d:ec:fb:5f:3a:67:65:76:bf:d8:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:48:2A:9C:A3:DB:B1:29:95:A4:A6:E1:95:B4:DF:78:47:85:82
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/A9BIKpyj27EplaSm4ZW033hHhYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.185.0/24
91.190.188.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3b:a5:3b:cc:d4:0a:06:aa:1c:fa:29:90:c9:b5:a1:c8:8c:
48:59:27:cc:0f:4c:98:95:4e:58:f1:49:ad:45:f3:a0:c5:0e:
c9:a9:42:a7:b6:63:c2:db:e9:5e:be:a0:68:61:12:45:50:a1:
eb:7d:7e:8b:ce:e8:8f:cf:c0:96:79:9e:b7:33:dd:77:60:12:
c2:8e:94:0c:7a:cd:fb:f8:5a:b0:70:c0:5f:5b:57:e2:74:a7:
21:14:99:96:89:ed:ce:96:68:7d:2d:f2:ff:22:45:2f:d3:37:
b8:d8:23:dd:84:d7:41:f4:b6:f8:64:00:38:4b:9b:fb:dd:01:
92:31:9b:21:5b:6f:dd:73:94:8a:5b:96:0b:1a:60:0d:d9:d9:
e1:a0:a3:8e:eb:12:06:af:77:2c:85:ed:4c:5c:06:7e:a0:2f:
e7:83:72:4b:14:a8:07:66:c3:3f:9a:0c:0c:4c:e5:e3:8f:e9:
cc:c7:ec:64:bc:8a:2b:76:16:e7:05:ca:26:7d:f8:3d:00:f8:
e5:dc:9a:4d:7e:66:e7:5d:f7:cd:c1:06:16:c4:89:45:cc:bd:
54:eb:36:76:0a:89:39:28:6a:31:f5:8e:09:e6:73:14:cd:f8:
ff:67:8a:d7:cc:4b:a7:26:d7:45:1e:b4:31:41:33:fb:b4:96:
b6:7c:fc:3c
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 21 11:56:15 2023 by rpki-client on console-fra.rpki-client.org