Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/QU9LlJKE5tDeU6fGD_sLDtt0RW0.roa
File: QU9LlJKE5tDeU6fGD_sLDtt0RW0.roa (raw, json)
Hash identifier: CefEqKp4MIIedIOjbkZzhD5Yyj26iLxQux7N8qlyg9o=
Subject key identifier: 41:4F:4B:94:92:84:E6:D0:DE:53:A7:C6:0F:FB:0B:0E:DB:74:45:6D
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 01856DEF7B6962F7781AC223B9B73A1569BB
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/QU9LlJKE5tDeU6fGD_sLDtt0RW0.roa
Signing time: Sun 01 Jan 2023 15:24:49 +0000
ROA not before: Sun 01 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 91.212.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7b:69:62:f7:78:1a:c2:23:b9:b7:3a:15:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Jan 1 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=414f4b949284e6d0de53a7c60ffb0b0edb74456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:11:5d:ef:8c:f3:70:74:f8:ed:8f:88:31:
93:bd:d5:90:de:44:88:11:0f:40:f5:04:10:38:d8:
1f:2a:72:9f:25:55:c7:11:43:bb:f1:4f:62:84:e5:
bc:04:44:f2:d3:14:11:0c:0b:c9:eb:40:42:8e:d6:
fa:53:cd:21:de:fe:38:28:f3:42:21:73:56:37:d3:
7e:59:af:e3:a3:9e:0c:dc:1b:1d:1c:dc:cf:d7:f3:
d6:d7:c8:3e:d6:81:5c:61:85:5f:5a:e8:a7:9a:69:
e4:8e:22:91:2c:0f:53:01:a1:01:4a:46:c9:b3:06:
7b:1e:e5:c4:23:39:33:cd:88:a7:76:0b:8b:75:a1:
0f:fd:b1:0e:98:92:d3:2d:cd:a4:be:b4:61:fe:e0:
39:ed:fa:16:e1:b1:ff:98:7f:cf:60:cc:b9:96:07:
40:ab:2a:e9:15:89:c1:42:26:7c:59:3f:95:96:05:
1a:cc:b1:49:c7:21:70:83:7e:7b:21:7a:93:e2:ba:
01:fd:d0:74:18:49:34:1f:8d:30:b6:48:5d:b0:c6:
43:fb:0c:77:67:89:e9:0c:ce:68:4a:df:1e:89:4a:
ee:6c:9e:48:49:a3:1b:57:4f:de:2a:95:f3:ca:06:
77:b4:fb:20:fe:8d:09:3f:6a:4e:fa:82:77:05:45:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4F:4B:94:92:84:E6:D0:DE:53:A7:C6:0F:FB:0B:0E:DB:74:45:6D
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/QU9LlJKE5tDeU6fGD_sLDtt0RW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:4b:e3:53:54:6a:44:fe:1d:db:aa:8d:73:3b:56:bd:63:82:
4a:99:c5:27:9d:84:70:89:a9:89:dc:d9:e1:29:7e:38:7e:e5:
75:e0:38:95:ea:35:12:c9:16:33:f6:c8:5e:7a:e5:3a:60:2a:
1b:9c:74:97:2d:e1:82:20:6b:f5:56:01:e4:8b:97:65:bc:24:
81:54:2d:37:36:33:01:61:f5:33:e3:fc:11:56:67:d7:24:24:
44:e2:23:3f:d7:35:6b:96:4a:1b:7b:ae:2d:dd:e7:5d:4a:cd:
4d:d1:0a:e0:09:15:ff:83:74:57:cc:5f:56:56:43:03:8b:e8:
e1:43:51:1c:82:31:b1:1c:42:0a:35:5f:40:bb:83:f4:85:b1:
7c:7b:e3:f3:3a:45:96:a2:83:60:42:b9:5f:d2:60:40:d4:47:
9a:f4:79:5d:2e:ef:f2:01:64:51:69:18:ee:b1:44:67:39:e5:
cb:77:a9:05:df:79:7a:a9:08:14:bd:f4:56:af:2a:3b:cf:44:
16:cc:45:c3:39:ad:de:91:c3:d4:b7:56:c8:c1:8b:dd:66:7f:
fe:85:36:67:84:25:76:53:4a:cb:49:1f:27:c0:f4:96:68:27:
9d:71:62:68:1c:82:4d:5d:8f:0a:fe:e4:31:3b:0b:b8:fe:5b:
c5:f3:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:58 2024 by rpki-client on console-ams.rpki-client.org