Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/RqqHh_ONNc0rIDQNB4Bqjbq-XRk.roa
File: RqqHh_ONNc0rIDQNB4Bqjbq-XRk.roa (raw, json)
Hash identifier: A3oCMg0T0mkLsUDq0fzXZJbp7+MYzgD7dPVurivPFzo=
Subject key identifier: 46:AA:87:87:F3:8D:35:CD:2B:20:34:0D:07:80:6A:8D:BA:BE:5D:19
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 01856BC116118857DE4BF8A3CF1B3B7BDFAC
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/RqqHh_ONNc0rIDQNB4Bqjbq-XRk.roa
Signing time: Sun 01 Jan 2023 05:14:54 +0000
ROA not before: Sun 01 Jan 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199718
IP address blocks: 91.221.50.0/23 maxlen: 23
91.221.50.0/24 maxlen: 24
91.221.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:16:11:88:57:de:4b:f8:a3:cf:1b:3b:7b:df:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Jan 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46aa8787f38d35cd2b20340d07806a8dbabe5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:af:ed:f0:e3:ad:29:66:e1:26:cf:51:fe:
ab:fa:63:58:15:71:16:1c:7a:c6:a3:9a:db:60:f1:
af:2f:ce:b0:2e:65:5b:ee:3a:f3:30:52:6a:7f:e6:
21:b5:ae:cc:80:51:6e:38:9f:29:e7:42:59:45:29:
d3:45:c5:36:65:96:66:0c:27:8b:45:12:52:8d:ab:
25:be:c5:3a:cd:39:c0:62:5e:06:aa:52:48:a0:44:
e8:7a:3d:6d:4d:d5:20:fc:89:80:c3:54:1d:14:85:
49:6a:5c:40:8c:d0:43:a1:82:4c:dd:56:ad:c1:b5:
c1:46:c6:f6:00:fd:0a:cb:d8:0d:b8:a6:ad:59:be:
65:32:da:cf:46:a2:ec:ec:85:d6:b1:fc:2b:12:9f:
ee:75:4b:32:d4:68:c0:d1:b3:55:2e:c9:29:e9:01:
9d:1a:c6:6f:6e:52:3c:ec:54:7c:ad:89:ef:50:78:
74:9c:0a:e1:7e:1d:e7:58:7d:ce:c8:ef:34:c0:79:
46:fc:21:53:ae:1c:e6:50:6f:9e:5f:4c:1c:6c:7b:
b4:45:f7:d4:3a:ec:76:5f:e4:bf:30:0d:f9:61:a9:
5b:b4:af:5c:5e:0c:6d:ee:1b:59:40:be:a1:66:10:
8f:1e:11:5a:01:65:63:24:23:9f:68:2e:33:d5:4e:
3d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:87:87:F3:8D:35:CD:2B:20:34:0D:07:80:6A:8D:BA:BE:5D:19
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/RqqHh_ONNc0rIDQNB4Bqjbq-XRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.50.0/23
Signature Algorithm: sha256WithRSAEncryption
51:b9:12:30:7d:b1:98:f8:e8:52:25:62:53:cc:87:3e:31:79:
e8:6e:a5:a5:fa:fb:fa:a8:a2:91:dd:87:e0:be:f7:4a:08:49:
c2:b5:1e:bb:9c:ff:48:55:dd:7b:f4:8b:94:1f:d0:db:ae:35:
09:bf:cc:57:00:32:a1:26:45:f6:c8:4d:a3:ae:91:f0:3e:9b:
23:80:f6:68:c1:98:20:5f:cd:a5:72:21:78:d6:cc:4a:e8:57:
2c:97:78:09:e4:10:a9:98:69:7a:0f:ec:0b:fd:a2:c1:c5:d8:
c8:90:e1:1c:e6:57:18:ca:27:a2:92:c1:9f:a8:65:47:0a:25:
9b:2e:12:86:e4:4a:74:6e:09:f8:fa:09:ac:d0:2b:7b:d6:76:
b3:b0:bd:fa:f1:53:ef:21:2f:56:e9:4f:af:de:cf:75:17:ee:
fb:6a:88:cc:d8:e2:00:55:e7:6b:29:27:a3:c0:0c:da:a1:48:
e4:3b:8a:0c:4c:6e:ea:ca:16:d3:ef:e3:74:4d:2b:97:f1:39:
86:7d:79:a2:7e:e0:e2:da:bc:10:52:18:74:df:21:bf:d9:c4:
83:68:a4:1c:8d:9e:02:3e:a9:9f:36:47:f2:50:63:27:39:88:
a6:62:e5:df:f9:dd:09:84:e8:87:fc:a2:62:c6:45:57:9a:28:
2b:79:13:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:39 2024 by rpki-client on console-ams.rpki-client.org