Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/q7Ebc_muVqtdN6cj02qQJFdyNkc.roa
File: q7Ebc_muVqtdN6cj02qQJFdyNkc.roa (raw, json)
Hash identifier: UfJiIUgFTg/4ue0uF4IDr0CYEN2TtMixdnrEoHB8VGU=
Subject key identifier: AB:B1:1B:73:F9:AE:56:AB:5D:37:A7:23:D3:6A:90:24:57:72:36:47
Certificate issuer: /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial: 018570C2B4081FF4E391C36B0194EDDF0C17
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/q7Ebc_muVqtdN6cj02qQJFdyNkc.roa
Signing time: Mon 02 Jan 2023 04:34:46 +0000
ROA not before: Mon 02 Jan 2023 04:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47957
IP address blocks: 194.1.183.0/24 maxlen: 24
91.208.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:b4:08:1f:f4:e3:91:c3:6b:01:94:ed:df:0c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Validity
Not Before: Jan 2 04:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb11b73f9ae56ab5d37a723d36a902457723647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:9a:54:21:83:dc:f1:1e:d9:9c:5a:af:ae:
d3:47:74:1c:99:a7:5d:55:b4:cd:4e:8c:b7:8a:20:
cb:a1:60:a1:95:42:f3:ef:d8:0c:8c:1b:6b:3a:d5:
7f:a2:5f:dd:07:f0:ee:ef:c8:8b:12:cd:29:b4:60:
44:ad:00:ea:bd:12:65:d8:98:cd:8a:4e:24:2f:7b:
9f:7a:de:15:ac:32:b1:74:0e:d6:22:14:16:de:8c:
e5:82:e4:d3:ab:fe:e5:e8:3f:9a:a8:fa:68:cb:8c:
01:f3:14:0c:29:0e:c1:63:a9:38:87:df:dd:8f:d4:
b3:12:ca:98:da:08:65:52:9d:f1:01:20:3c:b1:c8:
30:a2:00:17:be:1c:41:89:4d:50:25:1f:d6:ec:7b:
f4:77:1d:33:cd:90:0f:38:a5:c1:8a:0f:92:c2:ea:
6c:9d:a3:2f:d9:60:23:0c:2d:89:63:43:19:b7:b5:
98:3e:e8:68:60:83:02:ba:57:bf:69:2c:72:98:a3:
0e:e5:77:29:e6:0b:9c:99:c3:81:1c:d5:77:ef:0c:
e1:73:af:ae:ed:23:76:f2:09:22:32:46:c8:e1:76:
d4:a9:42:d0:56:a8:cc:42:93:b2:04:24:10:b6:de:
af:ab:38:8f:64:2a:6a:1d:e3:07:44:09:b9:62:57:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B1:1B:73:F9:AE:56:AB:5D:37:A7:23:D3:6A:90:24:57:72:36:47
X509v3 Authority Key Identifier:
keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/q7Ebc_muVqtdN6cj02qQJFdyNkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.51.0/24
194.1.183.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:69:c1:b0:48:7f:d5:7c:29:8e:49:c7:1a:f2:39:ab:80:8d:
03:60:d7:9f:fb:52:9f:5d:6a:21:41:0a:18:44:94:06:8f:be:
77:2f:23:bd:f7:6a:b8:08:cc:ce:2f:61:f5:ac:23:e7:dc:d4:
32:09:e3:74:ae:e5:05:25:aa:90:8b:f3:7b:0c:48:8a:e0:5d:
06:ac:60:4e:7b:93:96:04:ba:60:46:13:ae:6b:3c:c0:fe:22:
0f:0a:73:99:3e:92:a2:dc:6b:30:83:74:c0:cc:cc:d5:26:df:
3e:02:89:37:6b:83:8a:2b:25:ae:a2:32:fc:5c:eb:2f:8b:06:
db:9f:27:d6:5e:f8:37:93:a1:bb:55:4a:e9:1f:c8:e8:83:d6:
fc:ba:1f:0b:d4:f2:63:39:29:f7:87:3e:82:72:40:21:bf:3d:
98:04:1f:0c:ab:8f:99:bd:82:05:c3:e4:b9:79:05:78:cb:b1:
41:f7:6f:d0:43:ba:60:a3:77:32:e9:b1:a0:f1:3d:ed:55:86:
4b:cc:dd:65:d5:db:20:a0:e3:11:42:30:4b:41:da:e0:25:32:
4f:d9:93:7b:5e:98:74:63:8a:5d:37:42:a1:44:9b:87:3e:69:
ba:f4:85:54:c0:5c:a7:7a:50:2f:2c:3d:fa:73:66:65:36:20:
f9:2f:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org