Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/p03qLoHY_AIsSjVVZHrXkPE_mq8.roa
File: p03qLoHY_AIsSjVVZHrXkPE_mq8.roa (raw, json)
Hash identifier: Jrfr7uFr4iTYTgIyef8EkmaAves6UGx27MgYKtc98jk=
Subject key identifier: A7:4D:EA:2E:81:D8:FC:02:2C:4A:35:55:64:7A:D7:90:F1:3F:9A:AF
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 018899DBFFF71D4B6E9559EF3766FE06EEC7
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/p03qLoHY_AIsSjVVZHrXkPE_mq8.roa
Signing time: Thu 08 Jun 2023 07:15:11 +0000
ROA not before: Thu 08 Jun 2023 07:15:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47922
IP address blocks: 91.216.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:db:ff:f7:1d:4b:6e:95:59:ef:37:66:fe:06:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: Jun 8 07:15:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a74dea2e81d8fc022c4a3555647ad790f13f9aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:83:13:c7:85:ad:a6:f9:cb:0d:a0:6a:8f:
52:f7:29:8a:fb:c8:55:60:3e:7e:a0:1e:01:4a:f5:
41:cf:d3:0e:3b:22:aa:61:ab:d4:0a:49:c4:bf:e4:
dc:a6:7b:78:21:4e:10:99:21:b1:87:10:4b:a7:bf:
c4:40:97:34:56:08:15:b6:86:55:47:86:11:08:7c:
40:c6:76:9f:7f:b8:04:1f:26:d9:b6:e2:1a:3e:3f:
6a:75:3b:db:c1:10:f4:4a:62:cd:2f:46:45:4d:0b:
61:3c:8b:ad:1f:25:be:28:2b:e2:8e:fb:5f:4d:1c:
c5:27:79:8e:c1:a4:c5:12:f0:74:f3:6e:ab:42:b5:
fe:f5:1d:6e:1b:fc:b5:93:ac:c2:7e:db:1d:64:79:
cb:c3:c2:7c:bd:f8:d6:6e:fc:ae:88:fb:28:a4:3f:
0f:71:08:1b:56:49:65:f0:f3:b4:9c:a9:19:52:02:
a3:f1:06:ab:bc:36:11:dd:60:c0:21:94:d0:9a:65:
86:a2:f5:61:cb:7b:1d:0f:cd:15:19:4d:ab:8a:e0:
61:c5:b4:e4:0e:c9:11:8b:34:e2:42:e7:cb:bb:37:
61:9d:73:6f:97:5f:45:c5:3c:f0:9d:10:ca:33:6c:
3f:55:c5:c4:e0:d6:e8:8d:63:4a:87:eb:bc:2f:14:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4D:EA:2E:81:D8:FC:02:2C:4A:35:55:64:7A:D7:90:F1:3F:9A:AF
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/p03qLoHY_AIsSjVVZHrXkPE_mq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.2.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a9:8c:77:13:df:85:37:6f:9a:b5:dd:1f:a3:c8:6e:94:bb:
3b:d3:00:c9:81:f6:92:33:b8:23:53:f2:87:bb:a1:db:e0:40:
7d:20:25:45:bd:54:de:2c:c6:5f:d5:d8:cd:6e:ec:79:b2:0c:
ab:07:5c:02:96:e9:52:0c:2a:ea:5c:bb:bb:60:3e:a2:b0:11:
cf:23:4d:14:fe:06:a2:22:15:e1:d3:30:7d:c5:4d:ea:03:1c:
cd:9c:ac:68:68:5c:1e:e1:a8:e2:54:d2:87:f4:e8:66:61:aa:
ed:9e:2b:e4:cc:07:e1:73:3f:e9:ce:56:83:ed:c8:01:bc:53:
25:28:2f:3a:2f:09:a7:04:27:52:1e:08:06:f6:48:c4:07:c9:
5d:22:60:6f:16:03:80:9f:3a:6c:a0:3b:b9:e0:b6:b8:b5:82:
e7:85:9f:31:97:ea:a1:32:b5:a3:1b:24:93:55:f5:b6:50:e9:
67:49:e1:3b:3c:f1:b2:b2:35:88:74:e2:32:13:ee:77:ec:c4:
4d:83:7d:48:97:e2:63:e4:f9:e4:64:d6:39:58:d0:3a:c5:9c:
03:99:c7:59:e0:2a:72:2b:67:03:aa:30:01:56:e8:3a:28:3c:
1e:71:12:0f:df:ef:6c:69:4a:6e:0a:af:2a:39:a2:5d:1d:ce:
4f:cb:f9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:26 2024 by rpki-client on console-fra.rpki-client.org