Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/_ImDOit0JKq596nXJKrDBFidjxs.roa
File: _ImDOit0JKq596nXJKrDBFidjxs.roa (raw, json)
Hash identifier: CEvcHn4HnyJ472Akv/Vt9iB57vLXOxtWZMM0XLX0ezs=
Subject key identifier: FC:89:83:3A:2B:74:24:AA:B9:F7:A9:D7:24:AA:C3:04:58:9D:8F:1B
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 01856B6E9F5F22038E82B82B2AAB9AFB2022
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/_ImDOit0JKq596nXJKrDBFidjxs.roa
Signing time: Sun 01 Jan 2023 03:44:49 +0000
ROA not before: Sun 01 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24776
IP address blocks: 91.213.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:9f:5f:22:03:8e:82:b8:2b:2a:ab:9a:fb:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Jan 1 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc89833a2b7424aab9f7a9d724aac304589d8f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:0a:15:00:03:68:0c:f6:14:8c:85:83:dc:
26:c9:f7:c0:65:37:9e:24:a1:15:11:66:35:83:89:
2a:7f:8a:22:65:48:c3:b8:29:84:8d:31:59:4e:06:
25:22:d7:22:d8:59:74:f2:fd:a5:06:b4:7b:f7:a5:
58:a5:36:54:b6:ab:c7:d7:8f:22:d3:f2:26:cf:e9:
f8:f3:f4:52:34:8f:df:20:94:4b:02:e4:42:7e:79:
5c:fe:49:a5:d3:3f:b2:92:3c:60:2d:38:4a:6e:90:
fc:48:8f:c7:bf:63:e0:a5:4c:ad:d8:c9:d6:dc:d5:
f4:f1:4b:23:9f:1d:f2:72:73:86:f5:1b:c9:24:6a:
78:db:d4:4e:ac:f6:c3:56:6d:5c:6c:83:48:6e:c6:
58:12:f7:fa:29:be:73:1a:8c:04:67:9a:0d:7b:c8:
ca:e1:f4:8d:93:51:4f:73:75:15:3d:6c:93:65:79:
33:30:aa:57:98:61:b8:52:9d:d8:fb:28:96:cd:f1:
ba:0f:3b:95:98:5c:d6:e6:d1:22:61:eb:6c:4a:5b:
07:0b:86:71:9a:8d:5e:4a:7c:b4:46:e7:dc:e3:14:
be:ec:18:78:b9:2e:b0:7d:e4:82:a5:66:4f:1b:8d:
47:d8:7f:c5:a2:fc:b9:bf:57:92:5c:4e:a7:5c:69:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:83:3A:2B:74:24:AA:B9:F7:A9:D7:24:AA:C3:04:58:9D:8F:1B
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/_ImDOit0JKq596nXJKrDBFidjxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3c:45:5c:3e:d7:d7:e0:8d:ca:40:6a:34:31:d3:41:d9:aa:
d4:ed:fa:a2:e8:72:5d:e4:3c:f7:fa:f1:c9:ab:da:3a:08:45:
29:b3:f7:db:33:85:77:52:18:c1:df:cf:b9:ab:9a:fc:72:bc:
42:d8:97:08:78:f6:67:86:1a:eb:96:c5:df:0b:6c:fb:66:d3:
3f:5e:2e:bf:40:15:cd:9e:91:e7:62:5b:40:98:23:b5:eb:30:
5c:84:67:d2:13:c5:5c:6a:30:73:1e:f8:61:46:0d:7b:c1:05:
fb:97:32:73:f1:f0:b5:c2:ac:6b:74:6f:e1:72:cd:b3:1d:ae:
7f:33:44:b3:f7:d8:11:4d:39:4d:ae:41:04:39:f7:b5:73:a2:
ef:dd:3f:ec:74:3b:c4:87:aa:f6:60:4b:4f:a5:8f:4a:bc:a3:
dd:50:6d:59:5a:b4:16:84:4e:1c:9e:85:fa:7f:3d:29:d7:60:
38:ca:57:82:e1:50:55:c7:69:80:ec:3e:42:30:b6:10:c2:5f:
80:fe:b1:8a:10:3c:22:78:48:21:78:f8:5f:d2:0c:21:10:d0:
ba:e5:04:32:c4:b0:93:f7:e1:15:47:6c:b0:24:17:37:eb:38:
7f:d9:b0:ef:f3:2b:6d:8c:45:8b:db:a4:b5:f7:ae:b9:67:49:
e6:29:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:22 2024 by rpki-client on console-fra.rpki-client.org