Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/84zNpca-iSA8BScKNf7OUoimWno.roa
File: 84zNpca-iSA8BScKNf7OUoimWno.roa (raw, json)
Hash identifier: dSCPMhaU6qL9CW/J3uSKi33uXCLh1b3u+JLK6CXczJI=
Subject key identifier: F3:8C:CD:A5:C6:BE:89:20:3C:05:27:0A:35:FE:CE:52:88:A6:5A:7A
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018902C341498AACED5EFDA5F3C22C2FEAAE
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/84zNpca-iSA8BScKNf7OUoimWno.roa
Signing time: Wed 28 Jun 2023 16:08:17 +0000
ROA not before: Wed 28 Jun 2023 16:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.92.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:c3:41:49:8a:ac:ed:5e:fd:a5:f3:c2:2c:2f:ea:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 28 16:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38ccda5c6be89203c05270a35fece5288a65a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:8c:78:40:e7:58:6b:67:8d:5e:b2:14:f1:
d1:13:b4:44:77:f0:f7:f5:45:7a:c4:99:85:48:36:
2a:bc:7c:9f:c4:72:8b:d7:d6:7a:4f:ac:84:59:ee:
2f:0b:4d:0c:6f:6f:11:05:85:7a:89:aa:8d:e9:95:
9f:2a:40:05:c4:89:5c:d7:20:19:71:ab:d6:bb:84:
37:e6:c6:35:10:47:05:f9:5d:95:05:05:e6:44:af:
05:2d:95:57:de:9a:b8:15:51:48:c0:bc:d4:bd:72:
ad:03:db:5b:89:50:fb:16:8f:39:b4:f9:18:ef:d6:
9b:a0:12:16:db:f9:5b:9a:e0:8b:87:be:15:3a:d2:
a6:aa:56:0b:25:2f:50:22:59:10:93:ec:b9:70:a6:
c2:94:f3:69:69:f2:69:d4:81:ef:c8:7e:5a:4b:b3:
0f:e9:30:3f:b0:83:66:b9:cc:9f:91:86:81:4c:49:
5d:f1:07:1e:3a:65:27:91:86:8a:20:60:f9:64:de:
f1:dc:a7:5e:47:3a:f6:e9:e8:f5:76:c6:83:33:e6:
54:e2:47:b6:66:b3:7d:90:35:1a:79:67:70:6a:19:
00:b2:67:e7:d8:e0:2b:0e:c8:a3:52:89:61:3c:c7:
7c:b9:3b:b2:bb:e6:2c:0c:d9:f2:2f:72:ce:82:2d:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:CD:A5:C6:BE:89:20:3C:05:27:0A:35:FE:CE:52:88:A6:5A:7A
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/84zNpca-iSA8BScKNf7OUoimWno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:23:4f:c1:2a:6b:5a:43:23:d4:5c:07:ee:46:92:7d:4e:84:
41:4c:83:0b:dc:8f:d1:47:4a:3f:39:7d:7f:00:57:4c:11:96:
46:30:64:ea:8e:b8:e2:0d:c3:1e:3a:8d:73:a7:cc:1e:14:c3:
04:ab:51:36:d9:32:6a:99:0c:dd:2e:c7:7e:06:ff:f1:7b:01:
1b:de:31:2f:d9:f4:62:25:f6:cf:e7:fe:f6:12:90:00:5f:f1:
98:b7:d7:f9:d6:e3:2c:39:1e:c2:2c:0a:1b:ee:f5:ee:75:42:
3f:bd:06:30:ef:19:da:70:1d:44:84:6a:24:77:9d:c4:cd:f2:
1f:41:ec:65:a5:fc:d9:c5:33:03:9c:52:82:d8:20:54:31:28:
83:bc:0e:b6:81:4a:d3:81:09:90:35:f7:05:a7:d0:d9:89:e8:
d9:ec:29:21:e5:eb:51:59:a7:1c:3f:b5:27:a7:0d:f8:83:7d:
9f:90:fa:a2:69:9e:89:e6:69:93:75:6f:f7:1c:d0:a3:4d:d1:
00:3f:97:ff:88:22:90:d9:a9:dc:4b:e8:8e:80:38:ad:dc:e5:
36:14:53:d7:42:6e:41:d1:4c:9e:71:cc:9d:fb:b8:92:20:1b:
1e:bf:a4:c6:65:7f:f3:50:69:9a:65:ba:c1:77:93:18:08:88:
65:8f:ec:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:41 2024 by rpki-client on console-ams.rpki-client.org