Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/FRjFi7nUCeOkZT0aMDVHigniyQI.roa
File: FRjFi7nUCeOkZT0aMDVHigniyQI.roa (raw, json)
Hash identifier: im5O0tPv+XOU1MrA1b0EBbZu4k3lDxdjF4RRABznqlQ=
Subject key identifier: 15:18:C5:8B:B9:D4:09:E3:A4:65:3D:1A:30:35:47:8A:09:E2:C9:02
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 01857082CD3BC3678EBA9DE8E721F6AA0901
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/FRjFi7nUCeOkZT0aMDVHigniyQI.roa
Signing time: Mon 02 Jan 2023 03:24:58 +0000
ROA not before: Mon 02 Jan 2023 03:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58186
IP address blocks: 91.192.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:cd:3b:c3:67:8e:ba:9d:e8:e7:21:f6:aa:09:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Jan 2 03:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1518c58bb9d409e3a4653d1a3035478a09e2c902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:4c:45:9a:7c:4f:d3:b3:1d:af:94:81:eb:
df:4e:18:1e:cc:7d:b6:77:73:2a:1e:24:6c:34:c4:
43:13:05:bf:0e:35:da:67:4d:45:97:f1:d3:15:4c:
d4:44:f9:1a:17:72:28:23:b2:d4:c4:ba:51:7d:71:
99:26:46:38:5c:68:b6:22:c5:75:94:a7:54:97:9c:
fd:92:b2:78:03:ea:a0:0e:f7:0c:82:7a:a9:bf:e9:
eb:36:57:47:da:83:85:6e:3d:c5:d6:f0:5e:ac:0f:
b7:b1:18:ed:3f:8f:08:71:2c:55:51:47:59:54:56:
af:e8:47:2f:89:aa:1d:3a:5d:cb:fe:40:be:c0:77:
81:79:3d:88:7c:54:6e:16:11:57:9c:9b:53:9b:92:
e7:43:3d:4e:cb:52:c2:42:c8:58:50:20:41:cb:5c:
57:69:38:17:0c:6e:76:2f:60:26:10:47:7b:86:b9:
0c:91:8f:d3:95:d2:5a:a3:2e:51:4a:d2:5d:82:92:
fc:f8:21:d7:a6:6a:7f:c7:6f:f9:5b:a8:f6:45:cc:
f3:76:c1:5c:c1:80:17:16:a8:48:3d:bf:64:10:0a:
de:04:08:7a:23:8d:a0:c0:13:22:96:a8:8a:2f:ad:
43:28:bd:1e:5c:98:9f:51:fd:c4:e8:68:eb:21:da:
fd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:C5:8B:B9:D4:09:E3:A4:65:3D:1A:30:35:47:8A:09:E2:C9:02
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/FRjFi7nUCeOkZT0aMDVHigniyQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.226.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6c:97:6c:b0:79:82:06:35:5a:a6:61:75:74:e2:2d:9b:3f:
6d:74:dc:33:e0:58:32:e2:3d:1d:6b:d5:28:1c:80:1e:fb:d5:
50:2f:25:bd:ca:95:ae:41:24:c4:12:a6:5e:34:82:68:07:7a:
3a:0c:92:f7:57:f6:57:64:c6:28:46:14:22:74:13:9d:97:31:
3e:66:4c:1c:44:1a:d5:5e:bc:14:fd:f8:23:03:a0:d3:78:9a:
75:f1:c6:0a:49:90:99:c0:34:c5:6a:6c:2a:8b:b7:cb:b3:b8:
0b:d8:db:0a:e2:60:39:7d:cf:5f:95:e0:8c:9c:9f:8a:1f:f7:
b9:74:f5:66:21:84:b0:a4:f1:97:f6:23:0e:17:e7:45:09:ad:
36:00:79:58:18:71:ac:2f:15:db:fd:bc:15:2a:40:4e:15:82:
9c:1c:d0:87:38:81:b4:5e:d2:d9:05:bd:dd:ab:28:53:c7:40:
cb:53:ed:1c:85:ef:ae:6e:1b:f1:60:54:c9:56:07:e6:b4:ce:
3d:24:13:b5:48:b5:86:6f:8c:68:45:2d:16:fd:9d:61:b7:70:
29:bf:1e:5b:bb:ca:66:49:91:bb:a3:eb:b0:0d:d0:6e:47:b2:
9f:0b:4d:73:85:22:28:66:5b:c8:bd:f6:22:59:ab:46:19:ce:
ca:95:3e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:59 2024 by rpki-client on console-ams.rpki-client.org