Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/pY2pzQmdrGOoauPHBIZa3lNDJqI.roa
File: pY2pzQmdrGOoauPHBIZa3lNDJqI.roa (raw, json)
Hash identifier: LTsPKlPbR6kbyHb3hS7/rTyEKiq+r8ppMEU5NZNA1Es=
Subject key identifier: A5:8D:A9:CD:09:9D:AC:63:A8:6A:E3:C7:04:86:5A:DE:53:43:26:A2
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 018BCA4984EAE00B98D097606F395BBBFB42
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/pY2pzQmdrGOoauPHBIZa3lNDJqI.roa
Signing time: Mon 13 Nov 2023 20:04:57 +0000
ROA not before: Mon 13 Nov 2023 20:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212982
IP address blocks: 146.19.59.0/24 maxlen: 24
91.219.23.0/24 maxlen: 24
91.219.23.32/27 maxlen: 27
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ca:49:84:ea:e0:0b:98:d0:97:60:6f:39:5b:bb:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Nov 13 20:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a58da9cd099dac63a86ae3c704865ade534326a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:75:42:87:17:fb:c3:19:43:7c:d4:7b:c2:
0d:02:4b:bb:d3:74:96:e7:a3:53:7d:e3:10:d7:b9:
2c:ae:8b:0b:67:0f:15:0f:6f:26:30:66:4d:5e:f8:
dc:b1:5c:0a:77:bc:61:8a:19:35:6a:52:2d:10:4b:
50:e0:4b:ba:9f:c6:43:0c:64:76:fb:39:5f:45:76:
0f:43:df:d1:21:c9:14:96:3b:19:58:61:ae:7c:96:
cb:79:6b:35:a6:77:a5:5f:3e:94:2d:d4:9f:8c:fe:
28:a3:42:35:fd:90:a6:ae:a9:16:f7:be:9c:58:f8:
bf:10:9f:75:34:60:a9:e4:23:71:1f:b7:c2:bc:c0:
dd:a0:f6:02:e4:12:b5:ba:63:30:9d:9b:0c:21:f8:
2e:6a:e9:08:66:2f:6d:e2:14:00:c4:b8:9c:1c:c6:
76:1d:a8:10:9a:e1:3d:be:e5:2d:e6:55:db:50:7b:
00:5a:5c:5f:a5:b0:d9:f3:14:df:cb:30:87:7f:fb:
c2:74:cf:42:a5:01:af:1b:e8:1c:2d:0b:1f:ea:13:
7f:02:f5:17:55:f5:0c:c3:89:ee:aa:3e:8d:60:31:
4f:25:33:96:1f:d7:1d:ce:e6:31:06:e8:13:b4:1b:
d4:d1:1d:76:c1:8c:16:4c:29:f3:1b:01:f7:37:8f:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8D:A9:CD:09:9D:AC:63:A8:6A:E3:C7:04:86:5A:DE:53:43:26:A2
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/pY2pzQmdrGOoauPHBIZa3lNDJqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.23.0/24
146.19.59.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6b:71:e4:81:9a:19:be:0d:86:72:80:da:53:72:49:a1:f6:
1c:eb:10:76:80:fa:fe:16:48:21:2c:e9:b0:cd:fc:3f:5a:73:
30:d5:0b:0d:b0:89:26:09:ec:93:46:fb:5a:ec:a6:5b:fb:97:
54:8a:27:ee:44:7b:26:90:bf:6b:b8:57:4d:41:67:f9:9c:ac:
2b:9d:c1:14:a8:c1:83:bd:0c:65:5d:13:30:e1:8b:09:b2:2d:
01:c9:7c:db:9b:e6:f4:00:66:0c:a7:59:87:f1:3f:a8:8e:e8:
5d:c5:2b:b0:f0:da:e1:bc:fe:23:1f:4c:f3:54:32:67:75:06:
33:d6:99:1b:d8:ec:d2:17:a0:2f:5e:b4:e3:3a:86:86:92:58:
e2:82:66:6a:d0:59:28:3f:3c:76:e3:99:a1:8c:47:cd:d2:ae:
2d:94:db:58:7a:79:00:96:9d:36:71:02:cb:4d:9a:49:d2:a8:
c3:37:49:ba:87:e5:91:d5:45:eb:9f:e6:e1:6a:8f:ac:8e:53:
f8:b5:51:20:7a:fc:01:20:cc:1d:39:80:39:87:68:d2:e6:1b:
6a:ea:23:70:37:24:4a:17:b8:2c:9d:a5:db:89:7b:7b:31:6d:
ab:7d:96:35:fb:db:2f:7c:00:9f:eb:c2:07:d8:9d:73:6c:c9:
b6:70:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:08 2024 by rpki-client on console-ams.rpki-client.org