Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/m-sBJLsmyMBgkG4DpyFfGM9X9oo.roa
File: m-sBJLsmyMBgkG4DpyFfGM9X9oo.roa (raw, json)
Hash identifier: rvN/cmHyhjmqIJnAXmplflqhYzVaK3ocElfOrOnurho=
Subject key identifier: 9B:EB:01:24:BB:26:C8:C0:60:90:6E:03:A7:21:5F:18:CF:57:F6:8A
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0185720C7BFE42AC46B8C0D3EAD5A80AF359
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/m-sBJLsmyMBgkG4DpyFfGM9X9oo.roa
Signing time: Mon 02 Jan 2023 10:34:58 +0000
ROA not before: Mon 02 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 91.238.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:7b:fe:42:ac:46:b8:c0:d3:ea:d5:a8:0a:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9beb0124bb26c8c060906e03a7215f18cf57f68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:91:6b:9c:78:b9:c6:3f:2d:1f:42:25:15:
c5:4e:6c:9d:9c:98:45:c9:83:36:7f:24:77:07:af:
64:e3:fb:76:fe:84:30:94:b9:38:f3:7b:2a:3a:56:
3e:4c:a7:e7:a2:9e:5d:b6:9d:5a:5c:e7:26:5c:1b:
7e:7c:12:f5:b7:5e:12:21:75:3a:ed:c2:5f:44:5e:
cf:48:15:b6:0a:aa:4b:7b:36:30:d0:17:15:16:42:
f3:18:17:8f:b4:1a:4f:91:fe:67:0f:38:5a:12:3f:
b0:1d:10:81:79:5d:8f:74:1e:16:3e:d0:df:8f:55:
06:77:3c:9d:4d:b6:1d:1d:28:0c:75:a5:47:f2:be:
38:c1:36:80:55:52:a6:fe:14:ab:80:eb:a0:30:b0:
4f:b2:2b:7e:78:47:33:2f:0c:8f:1f:f5:94:31:60:
b3:85:85:16:79:0f:1f:37:e0:95:0b:84:90:4d:3c:
37:fc:32:5c:6a:45:b3:c1:47:82:a5:df:bf:c2:2b:
4e:48:d3:d3:87:3e:e0:ae:64:de:db:51:6a:7a:d0:
e2:cc:c2:10:7c:8f:cc:9b:2c:1f:4c:9a:7d:a4:a1:
9c:61:20:72:44:f9:4d:38:0b:72:0f:40:fe:85:b3:
05:66:ff:97:bc:5e:80:55:98:b0:1c:92:a8:64:96:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:01:24:BB:26:C8:C0:60:90:6E:03:A7:21:5F:18:CF:57:F6:8A
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/m-sBJLsmyMBgkG4DpyFfGM9X9oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.71.0/24
Signature Algorithm: sha256WithRSAEncryption
22:93:bf:de:fa:49:1c:be:ca:20:7a:2e:a9:6a:89:2f:d3:a2:
60:5b:8d:53:6f:19:b1:20:11:1d:f2:dc:df:f4:a4:cc:2f:f2:
2d:96:bb:00:20:72:48:d2:2a:9f:ab:dc:cb:5d:26:8d:0e:88:
e0:b8:75:c5:45:19:38:65:03:aa:9b:4f:68:c7:84:ba:43:ea:
72:55:6e:7e:d1:fb:7f:0d:70:46:19:45:26:22:5f:c8:c8:58:
78:41:53:d6:31:dd:12:13:98:90:d9:bf:36:be:7c:af:ac:0e:
be:de:f0:72:73:6d:17:b4:74:ed:7b:7b:a3:4e:bf:7e:70:f8:
37:83:ae:17:f0:6f:a8:9f:c9:52:e4:d3:0a:9a:0a:49:6f:b2:
46:a2:fb:57:eb:df:d4:fd:5f:72:ba:a4:33:01:c8:a5:a5:f2:
78:d0:6e:8a:03:c9:4b:f3:c5:ad:31:be:46:0b:e5:8f:15:ee:
df:6e:5e:aa:65:70:2e:76:0f:a9:eb:2c:28:c5:d7:00:0f:61:
2e:c1:3d:8f:09:c9:df:3b:c4:c4:5d:bb:e3:ad:6e:16:41:a9:
dd:6b:de:28:c3:87:37:b8:79:8c:88:fb:10:fd:d8:7d:6f:ae:
87:45:c1:84:4e:9e:f6:34:c4:51:d8:e9:b9:64:bd:13:14:f4:
fe:93:d7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:16 2024 by rpki-client on console-ams.rpki-client.org