Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/iQJcLuJlUO90LdzoLSpwUqRWpkE.roa
File: iQJcLuJlUO90LdzoLSpwUqRWpkE.roa (raw, json)
Hash identifier: XJ8iKGE+wRjMiEpZ5v3M7c9Bo6VPaVhqlfGQ+ZDD//c=
Subject key identifier: 89:02:5C:2E:E2:65:50:EF:74:2D:DC:E8:2D:2A:70:52:A4:56:A6:41
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 01856E2FC8784A7E46CE08C8F496BD850FF9
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/iQJcLuJlUO90LdzoLSpwUqRWpkE.roa
Signing time: Sun 01 Jan 2023 16:35:03 +0000
ROA not before: Sun 01 Jan 2023 16:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50399
IP address blocks: 91.209.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:c8:78:4a:7e:46:ce:08:c8:f4:96:bd:85:0f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Jan 1 16:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89025c2ee26550ef742ddce82d2a7052a456a641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:0a:70:16:90:e9:67:39:2f:a9:54:c7:87:
8c:ff:71:74:a2:df:44:af:50:55:ba:63:c2:1b:67:
c7:76:5f:4d:69:23:a5:cd:37:a6:5a:74:f0:6d:d2:
63:a5:47:c8:10:89:60:81:69:8a:e5:52:8a:b9:ac:
c2:94:92:85:2f:64:20:8d:84:61:79:17:03:d8:46:
f2:c0:26:09:85:a5:c0:25:83:cd:d3:e8:ea:34:88:
56:d0:35:ab:03:ad:f0:1a:be:27:14:de:52:1f:9d:
24:e6:53:01:80:92:b4:8f:72:c3:80:12:a6:48:27:
0c:ec:c3:bf:cd:97:7e:fd:12:f0:e9:32:77:ca:98:
94:85:9d:42:9e:22:92:3c:02:89:58:d8:c0:3c:bd:
74:c2:df:e5:5e:72:0e:10:a1:ab:9c:d6:f2:b9:6d:
51:c7:11:d7:86:f4:c0:6c:5f:5f:98:7d:6a:b6:e0:
a4:04:38:13:37:96:b3:f3:45:e1:e9:3f:a4:7b:a0:
89:a0:93:66:1e:30:e3:ac:04:9d:fc:39:31:0c:b2:
6d:2c:5b:c4:c7:30:ae:13:dc:07:57:4c:e0:89:66:
7e:c6:1a:ea:10:b1:24:e7:b9:fc:63:04:f1:c5:dd:
48:9e:8f:2d:a1:71:90:8b:31:c9:be:90:5a:9d:9b:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:02:5C:2E:E2:65:50:EF:74:2D:DC:E8:2D:2A:70:52:A4:56:A6:41
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/iQJcLuJlUO90LdzoLSpwUqRWpkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.213.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:59:4d:0d:a6:2c:d0:d8:93:f0:2a:08:ef:be:50:6d:83:6a:
b5:a9:e6:42:cf:dc:f2:7a:55:b6:70:b2:c4:2d:af:58:4d:4c:
44:73:b9:17:db:b4:f6:3d:7e:42:70:0f:64:28:d1:2f:a5:25:
86:db:d8:a4:81:b2:4b:b6:cc:29:1c:8d:49:67:3f:ee:c5:23:
76:b4:a1:2a:ff:b5:46:e6:0e:50:fe:d1:a1:4a:85:b8:22:bb:
7f:83:8d:37:1a:88:09:78:e0:93:39:cc:43:74:8d:96:ef:12:
4c:f9:89:ed:e6:e1:4c:04:f3:9e:95:a2:69:33:fe:d6:1d:c2:
cb:cf:c6:bd:dd:a3:7f:a8:9c:4d:d7:64:c5:5d:00:07:54:c2:
b8:98:a8:af:52:37:21:b9:69:4c:ee:c0:05:2c:66:7a:31:d1:
af:d5:ab:da:4a:0b:54:46:fe:49:86:69:df:38:d5:22:d5:30:
44:4a:91:91:d5:b1:aa:cb:b3:cc:41:5d:c6:44:e3:1a:47:99:
fc:9d:2a:77:ae:50:66:4f:0c:a4:62:8d:4b:52:86:35:75:0d:
5a:de:f7:41:da:e7:5f:91:8e:59:3b:9c:2e:13:da:bc:d1:fd:
38:d4:ae:e7:c3:cb:38:1c:0c:b9:a6:91:af:cd:4a:69:67:30:
7e:60:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:15 2024 by rpki-client on console-ams.rpki-client.org