Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/h9DsT3kKEq5xwJZH94Zrn3_hX6U.roa
File: h9DsT3kKEq5xwJZH94Zrn3_hX6U.roa (raw, json)
Hash identifier: qef4cns7F6NFe8kAr7XfMrRjRhUFDo18ZhTF3dpb6zs=
Subject key identifier: 87:D0:EC:4F:79:0A:12:AE:71:C0:96:47:F7:86:6B:9F:7F:E1:5F:A5
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0185B0629901D1C1E95117E61E7F9E44674E
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/h9DsT3kKEq5xwJZH94Zrn3_hX6U.roa
Signing time: Sat 14 Jan 2023 13:05:29 +0000
ROA not before: Sat 14 Jan 2023 13:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202029
IP address blocks: 91.239.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:62:99:01:d1:c1:e9:51:17:e6:1e:7f:9e:44:67:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 14 13:05:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87d0ec4f790a12ae71c09647f7866b9f7fe15fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:02:49:c2:5a:00:ff:9c:29:cb:12:19:ac:
2d:ff:01:bb:cd:91:bb:80:b5:65:35:f3:7e:20:fe:
77:c0:fc:50:2a:bf:92:9d:b4:08:67:3c:f4:4e:a1:
89:7d:a0:6e:27:0c:fa:3c:52:a2:6c:3c:e6:c9:32:
e2:a4:4c:e8:b1:9d:e6:ea:89:1b:c6:79:c0:01:4f:
d7:78:4e:eb:d4:ce:4c:15:33:2d:84:fd:38:ed:2a:
97:4d:e4:eb:92:13:a6:0d:a5:c3:25:15:87:eb:19:
87:cf:fb:c3:a9:81:df:ee:75:c7:5e:07:ba:9b:72:
ce:c9:23:68:3e:8c:81:64:e2:d6:39:be:c7:ba:cd:
b0:53:29:5a:d3:20:46:40:45:42:d0:9d:ad:6d:15:
6b:b5:7c:46:40:55:90:72:e4:76:0c:ac:e6:ad:d5:
20:62:30:12:2e:3c:5e:47:61:42:3e:10:94:9f:ac:
58:20:14:27:1e:71:6f:d9:5b:b5:50:c8:ce:ce:70:
98:28:fe:eb:c5:f0:73:00:3f:fa:93:f8:24:e8:7e:
33:69:77:12:f4:f2:5d:ce:ff:5c:3a:50:1f:ca:52:
3c:8b:c3:82:32:4d:24:0f:ca:8b:bb:ad:6b:3d:8c:
02:8b:af:9d:cf:b4:ca:98:80:2c:52:36:65:b6:08:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D0:EC:4F:79:0A:12:AE:71:C0:96:47:F7:86:6B:9F:7F:E1:5F:A5
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/h9DsT3kKEq5xwJZH94Zrn3_hX6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.214.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ce:8c:f6:e1:97:7e:39:2d:5a:ac:9d:b7:cd:f3:2c:d4:38:
78:1f:ef:39:83:93:b6:f3:60:c2:83:67:53:86:8b:5e:cd:d2:
74:b0:56:97:e9:5c:b3:61:e7:00:91:6b:a3:65:10:1f:21:d1:
0c:00:93:9a:3a:40:7f:46:80:5f:61:e4:8e:6b:c5:c9:88:2e:
d2:5a:c6:f1:2e:d0:4f:cd:d8:9a:92:4d:3b:6e:0b:96:0d:d3:
78:01:60:8a:09:9a:19:52:db:50:30:d5:35:0a:e2:dd:d5:d0:
48:2e:ed:74:ab:53:32:95:4c:f0:c6:ed:cc:34:d9:b0:ec:fc:
42:4e:65:12:36:99:d0:24:88:d3:16:d4:98:63:6b:7a:97:59:
b4:8c:3e:eb:1a:70:89:d7:cc:2b:cb:d8:77:fd:9f:15:27:e8:
93:3c:69:09:0a:c2:9c:06:59:aa:dc:09:5c:02:0c:96:0a:e3:
ef:34:a0:6e:64:12:d7:02:f5:7e:4d:2e:a0:2e:14:7f:fc:d9:
d1:ba:96:51:e3:c5:50:e6:08:36:18:35:a0:a0:6d:33:5c:cf:
96:39:15:c6:9d:50:32:6d:e5:8f:16:1e:bd:86:89:a1:7d:33:
86:87:7e:aa:4e:4d:64:4a:ad:e8:67:7b:0e:0e:b1:bd:2d:ca:
86:6c:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 07:44:29 2023 by rpki-client on console-fra.rpki-client.org