Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/Isscqs_1TKlgxA2lWlgH6ePdBLc.roa
File: Isscqs_1TKlgxA2lWlgH6ePdBLc.roa (raw, json)
Hash identifier: 2GiU51X952afzMzytN3/1+Di511u0hiMrEFva/Kiidg=
Subject key identifier: 22:CB:1C:AA:CF:F5:4C:A9:60:C4:0D:A5:5A:58:07:E9:E3:DD:04:B7
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 01856ECBA121ED07A8161F96A4408359928C
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/Isscqs_1TKlgxA2lWlgH6ePdBLc.roa
Signing time: Sun 01 Jan 2023 19:25:16 +0000
ROA not before: Sun 01 Jan 2023 19:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206314
IP address blocks: 91.226.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a1:21:ed:07:a8:16:1f:96:a4:40:83:59:92:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Jan 1 19:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22cb1caacff54ca960c40da55a5807e9e3dd04b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:7e:ce:72:1c:60:18:5e:b4:5c:de:f1:0f:
fd:15:f1:0a:57:75:0e:c0:0a:52:51:30:d3:42:2d:
a0:8f:6e:a0:56:b4:2b:18:16:36:5e:d6:43:1f:ad:
17:cd:1c:33:df:22:89:f8:7d:f2:41:87:5b:69:4b:
6d:db:4a:5d:a6:7f:e0:77:dd:7a:4b:b4:9e:99:14:
87:e9:d0:3b:1c:6b:63:9c:65:b9:57:99:12:f4:74:
93:12:76:f3:3f:60:3a:8c:d5:01:25:b4:e4:19:9a:
2e:cf:d1:28:6e:44:10:f9:7b:c6:06:b9:d4:c7:aa:
c4:83:e9:32:08:0a:d2:4f:a2:1b:5d:b2:1f:64:c5:
b6:31:82:d2:e3:ad:cf:42:4b:b4:d8:a4:4f:b4:3e:
57:84:68:a4:0f:c2:6e:0d:1a:2d:78:a6:3f:96:91:
a8:27:73:1b:34:08:42:9d:95:b5:a0:89:b0:d5:1f:
3a:cb:00:be:e0:ef:3a:70:26:bb:56:12:af:5b:12:
51:f1:58:4a:08:ec:e2:6a:cb:29:17:32:48:17:97:
02:2f:7a:91:0e:15:9c:34:ff:73:fb:94:83:4a:68:
41:cf:97:ed:86:77:b3:ae:3c:bf:39:1c:43:0f:b1:
88:4b:96:47:b4:48:84:a7:51:5a:76:95:be:02:8f:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:1C:AA:CF:F5:4C:A9:60:C4:0D:A5:5A:58:07:E9:E3:DD:04:B7
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/Isscqs_1TKlgxA2lWlgH6ePdBLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.236.0/22
Signature Algorithm: sha256WithRSAEncryption
19:c9:f1:02:14:7e:0a:54:20:00:8b:d8:42:45:57:80:a8:2f:
06:5d:f8:d8:0c:27:33:17:6c:6b:a9:f5:2f:39:90:f2:12:ec:
e8:7f:6b:6a:82:58:2a:f2:3c:25:83:01:26:88:e5:66:91:eb:
78:d8:d9:61:97:23:c9:d3:70:9f:d0:c7:b0:58:52:25:48:e7:
e8:74:78:b4:b1:2a:3b:8d:7b:48:d4:d1:41:c1:cb:2b:2f:2b:
97:8a:90:23:b8:53:df:1f:87:44:3f:5f:38:68:3c:54:23:da:
88:1e:1e:ac:d9:92:58:b6:6d:a8:79:68:f3:10:c5:b0:f4:d7:
4e:ce:0b:ab:af:dd:6d:c2:90:9c:9a:1a:c4:db:fc:1d:9f:1f:
cf:a3:42:67:9c:56:2b:e0:95:cd:62:34:4e:85:af:0d:ce:b7:
44:be:da:00:0a:f9:3f:a1:6f:27:7d:c9:67:93:02:a6:c5:91:
3d:fc:e8:26:c9:51:04:df:ca:3b:e3:2e:5c:36:bc:97:8a:9d:
dd:0b:b4:53:04:85:3a:45:8e:eb:bb:76:be:77:77:56:d1:6e:
fe:b5:e6:e9:01:ee:8c:bd:ab:03:18:f7:d2:92:c4:01:65:96:
47:33:21:22:28:b7:97:ae:57:30:c8:3b:55:03:1f:61:76:6c:
ac:f4:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:42 2024 by rpki-client on console-ams.rpki-client.org