Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/fr8MCdAW4HmLCtuauBp72jeP_7Y.roa
File: fr8MCdAW4HmLCtuauBp72jeP_7Y.roa (raw, json)
Hash identifier: qMnVgd/1gpm79K8tDvKFltaHgMAlhF7d8cxRPYbAQK4=
Subject key identifier: 7E:BF:0C:09:D0:16:E0:79:8B:0A:DB:9A:B8:1A:7B:DA:37:8F:FF:B6
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018C86D3F277633F4FA9EE3B85687CA50C7F
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/fr8MCdAW4HmLCtuauBp72jeP_7Y.roa
Signing time: Wed 20 Dec 2023 10:44:46 +0000
ROA not before: Wed 20 Dec 2023 10:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:d3:f2:77:63:3f:4f:a9:ee:3b:85:68:7c:a5:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Dec 20 10:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ebf0c09d016e0798b0adb9ab81a7bda378fffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:94:f2:7a:30:25:77:e1:43:ad:85:eb:82:
59:51:99:88:6a:8a:2e:30:71:15:2c:7a:41:27:43:
39:ad:cc:e2:93:3d:ef:69:54:5d:7c:75:4d:6e:1a:
f9:51:9f:49:e5:56:26:bf:10:29:bf:80:c9:69:f0:
9d:88:63:93:ae:cd:b0:bf:92:1d:59:f0:37:78:79:
f7:a8:5f:01:55:1a:13:97:a4:9e:51:2f:95:79:f5:
9f:4f:d2:23:66:48:a5:1a:cd:7d:b8:dd:2d:f8:14:
50:7d:fb:12:2f:db:28:a8:9e:ff:ac:36:57:63:bd:
f3:e4:33:93:0a:97:1d:18:7b:21:45:59:e1:06:b6:
99:1d:37:4c:7d:67:46:6e:0f:46:07:16:d3:0a:61:
dc:1d:37:fe:42:19:65:25:38:51:23:29:aa:0b:7d:
2d:e8:ca:51:a7:15:e1:f9:51:ff:8f:e0:c3:ba:f2:
7e:65:17:95:28:87:af:db:38:e4:7f:cf:96:f1:a9:
31:7f:78:3f:ec:d1:a9:18:76:51:34:24:15:35:14:
9d:3d:30:82:ce:18:8f:be:7e:12:0a:ca:72:ee:da:
9d:8c:38:df:39:43:e9:1c:0b:31:f8:df:85:57:a7:
d8:0b:37:20:54:54:97:ff:d5:38:16:89:02:30:a3:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BF:0C:09:D0:16:E0:79:8B:0A:DB:9A:B8:1A:7B:DA:37:8F:FF:B6
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/fr8MCdAW4HmLCtuauBp72jeP_7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.44.0/22
Signature Algorithm: sha256WithRSAEncryption
27:cc:b5:bc:ae:65:bd:11:ca:40:88:c9:eb:40:48:31:b6:6c:
a5:f5:94:a4:e8:55:16:28:17:9e:c1:01:23:5d:f4:11:fc:f9:
87:61:d3:4a:6c:a4:3d:79:74:19:8f:09:b5:53:ae:91:c6:ec:
7b:14:ef:6b:7c:cf:13:d5:a4:c6:9c:1f:e0:27:a4:b0:75:f6:
42:af:6d:7f:4e:9a:45:c7:20:db:33:3d:f2:4a:de:4a:98:66:
f2:ff:62:74:72:fb:45:17:d8:b9:96:d5:d4:74:b1:af:81:f9:
3e:26:8d:ec:78:e4:99:ef:40:fc:67:55:fc:08:60:f7:f1:20:
78:e9:a3:7e:2c:a6:5f:13:60:b3:c8:79:94:b2:47:e4:04:40:
a7:c3:c7:3b:8c:fb:f5:41:37:5f:5b:e0:6f:da:7b:13:bb:ed:
da:2f:25:bd:e1:3c:b5:02:85:16:30:c0:fa:3e:f5:5f:3f:7a:
66:e4:2f:35:6c:bb:45:d3:ba:be:55:5d:e1:46:17:26:68:f7:
24:e9:d1:d3:ef:24:8e:48:a1:83:ac:b5:43:d1:82:e4:22:51:
e4:34:44:2f:c8:9e:d9:fa:b5:aa:47:c3:a2:24:78:d7:1b:ab:
51:50:e4:0d:ff:f4:22:73:01:25:e1:f7:24:20:be:d9:35:11:
f1:b5:f1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:59 2024 by rpki-client on console-fra.rpki-client.org