Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/_wjN89z0Kxl7URj5Aa6i2kt26Wo.roa
File: _wjN89z0Kxl7URj5Aa6i2kt26Wo.roa (raw, json)
Hash identifier: qKjAKQeVXUp5uCWkX05qeT0JjknsVYLxszg4rvHX0m0=
Subject key identifier: FF:08:CD:F3:DC:F4:2B:19:7B:51:18:F9:01:AE:A2:DA:4B:76:E9:6A
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0188B5B6E9354AADCD969DE1BB152FB7410C
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/_wjN89z0Kxl7URj5Aa6i2kt26Wo.roa
Signing time: Tue 13 Jun 2023 17:04:03 +0000
ROA not before: Tue 13 Jun 2023 17:04:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17018
IP address blocks: 91.221.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b5:b6:e9:35:4a:ad:cd:96:9d:e1:bb:15:2f:b7:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jun 13 17:04:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff08cdf3dcf42b197b5118f901aea2da4b76e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:bf:78:c6:0c:0f:ee:d8:06:c4:16:80:2b:
84:66:35:f6:b3:6a:4c:ca:3f:3b:17:1a:38:8a:99:
af:05:93:7f:fe:ff:ae:62:ca:3b:fa:12:e4:11:8b:
4a:ea:1e:d8:33:18:0f:a3:c4:11:77:cf:a2:09:33:
71:64:4e:7d:38:fe:1a:df:da:41:74:16:be:d2:2c:
9b:ee:54:97:c5:e1:0c:de:69:12:8e:88:b5:6c:e1:
3f:00:61:63:3b:f5:8d:4e:20:8d:65:e9:70:15:54:
71:8b:23:42:a8:24:2d:c2:33:9b:0f:65:e9:8f:26:
31:58:0a:fe:b5:8c:00:6a:9a:eb:3e:62:db:9f:7b:
d1:99:de:d8:c8:24:21:8e:f7:68:57:77:d2:be:91:
e3:09:07:62:31:31:07:b1:d4:92:22:ac:19:35:28:
17:bd:02:e2:d7:c8:50:4d:5d:14:1b:5f:78:a1:76:
56:1a:11:83:94:43:87:07:e3:c1:6e:8b:9b:1f:62:
8e:1f:5b:e0:3d:14:cd:09:6b:5e:42:65:10:70:ca:
74:4b:3c:4e:5b:24:06:b6:c3:69:87:82:6e:31:3a:
eb:13:d2:5d:a9:e7:11:5f:48:b4:26:11:95:ae:a6:
c2:4f:69:03:60:4c:37:e4:22:7f:84:2e:e0:e4:a5:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:CD:F3:DC:F4:2B:19:7B:51:18:F9:01:AE:A2:DA:4B:76:E9:6A
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/_wjN89z0Kxl7URj5Aa6i2kt26Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.233.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2a:4e:59:ba:74:83:42:6a:bf:77:b4:96:4a:06:e7:12:01:
32:5d:be:2c:8d:a1:bf:77:ba:77:d8:6c:d1:1a:fe:8a:e9:f6:
78:1f:a1:e7:4e:54:f8:71:57:a6:2e:6e:bf:a1:5f:d1:ea:5b:
cd:9e:8e:fc:ce:0a:5f:19:56:e2:b3:b8:f5:d8:c2:5d:72:bf:
f8:ea:84:94:61:b0:93:7e:80:f8:b5:4f:be:4c:c5:6e:c6:84:
31:a8:ae:2f:4e:94:ea:92:08:cb:df:d3:47:85:da:31:c3:6d:
0a:e4:c0:3b:3e:fd:f1:d3:ff:da:2d:f9:57:1c:63:28:39:bd:
cb:c8:05:a2:12:b6:3c:15:33:25:f4:39:bd:71:4a:82:3f:a6:
d9:33:16:c0:1d:20:cd:51:9a:b9:a2:bd:cb:c8:98:ab:32:31:
ed:16:d0:a1:92:70:0e:ae:27:1d:c6:42:3d:e2:5b:ed:6f:a6:
59:0a:2f:32:30:67:67:1a:f3:c4:d2:aa:74:28:51:2f:6d:2d:
9c:f3:df:11:f9:92:50:cb:93:fd:c4:ea:da:b5:8b:32:26:fc:
64:0d:ba:8f:12:eb:fe:27:2b:84:88:d8:16:c3:7d:6b:09:b1:
06:55:46:f4:fa:4b:9f:0d:9a:23:ab:fd:48:42:ce:18:53:5c:
f4:fb:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:45 2024 by rpki-client on console-fra.rpki-client.org