Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L3pxZ070z1I9i02PG3m241ePmos.roa
File: L3pxZ070z1I9i02PG3m241ePmos.roa (raw, json)
Hash identifier: zTIchCvQ/+NmLlItQ6uCnohLLm3RoGnVAphtw41MvJU=
Subject key identifier: 2F:7A:71:67:4E:F4:CF:52:3D:8B:4D:8F:1B:79:B6:E3:57:8F:9A:8B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018857FA5B615CD32397F91A53C1DB0D0731
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L3pxZ070z1I9i02PG3m241ePmos.roa
Signing time: Fri 26 May 2023 12:13:25 +0000
ROA not before: Fri 26 May 2023 12:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198855
IP address blocks: 91.92.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:fa:5b:61:5c:d3:23:97:f9:1a:53:c1:db:0d:07:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 26 12:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f7a71674ef4cf523d8b4d8f1b79b6e3578f9a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:4a:5f:56:53:eb:c1:2d:e3:85:16:c8:39:
c1:73:7a:9a:25:92:8e:c3:09:82:85:4b:6e:95:e2:
fa:19:9c:88:6c:35:19:14:de:4e:95:73:b5:f5:a4:
b1:74:86:94:44:72:5f:fb:f4:96:fd:d4:8a:ec:4c:
43:cc:dd:8b:bf:f1:a6:cc:59:1c:e4:12:de:b7:a0:
b8:f6:8b:2a:cf:6a:13:c5:1c:d9:4e:c1:d7:4c:c8:
ea:da:d1:76:67:cc:8d:58:7a:26:dd:3e:02:44:cf:
e1:a5:e9:4f:10:18:b6:69:07:ab:71:0e:f9:bf:0b:
a2:8e:02:0e:3d:90:3d:c4:67:63:4d:bd:9d:70:05:
9d:de:16:f8:ee:bd:ce:c9:b4:8f:aa:48:b1:e3:4e:
9e:0b:53:a5:8f:ab:26:da:5e:2b:6e:db:3b:e4:c4:
19:9a:af:6d:e7:50:64:34:5a:fc:9f:f5:94:f6:6e:
28:a3:96:a3:c2:fd:b1:44:81:8e:cb:b3:44:fc:d9:
8e:53:0a:6b:f6:ef:27:5d:82:0b:91:61:1b:c4:20:
30:67:d3:c8:16:17:5d:78:4a:1a:5b:6c:df:73:dc:
65:41:a8:08:45:66:11:f6:d5:c5:b2:47:f4:70:75:
ce:a6:0c:f7:51:d5:f7:84:a2:dd:d2:8c:ca:7b:82:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:71:67:4E:F4:CF:52:3D:8B:4D:8F:1B:79:B6:E3:57:8F:9A:8B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L3pxZ070z1I9i02PG3m241ePmos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.21.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ae:27:01:af:45:d6:3b:76:46:b5:1e:2c:5c:2a:b8:5d:da:
48:d2:c4:0e:2e:db:af:72:47:a0:af:7e:20:d0:db:7b:ca:29:
a1:35:1d:ce:4e:55:83:e1:46:96:90:cc:77:b6:da:4a:06:cd:
6c:63:9e:46:ba:c6:8e:9d:d8:a6:06:a8:de:14:39:51:0e:36:
46:bc:29:04:eb:65:74:3c:fb:5e:50:f0:a1:7c:b9:8a:06:7b:
49:13:fb:cc:d2:b7:c3:77:35:fa:d4:a0:e1:75:6e:47:00:9c:
f1:7d:e8:a3:f1:08:d0:35:52:88:bd:2b:d5:45:f9:7c:e4:18:
78:8f:76:61:1e:f3:66:92:72:70:6a:3f:ed:81:bc:c8:f2:30:
5d:10:b8:66:04:ce:3e:b1:79:e8:a3:a8:c3:ed:49:35:a9:8b:
42:bc:8e:24:41:fb:26:a0:ba:0f:a8:4f:77:e8:68:dc:a1:71:
2b:72:3e:c3:c9:f9:d0:11:1f:0d:b1:89:c7:22:5c:63:f7:78:
52:ae:df:64:42:80:af:b2:ce:c8:c1:3a:8e:f5:fb:9a:31:ec:
2d:37:ae:07:71:b1:57:3f:ab:89:5c:dc:7c:1d:d8:60:1a:0a:
e9:de:8e:8b:15:44:a9:7d:2d:66:c0:7d:86:57:a4:c4:64:bf:
a6:24:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 11:33:58 2023 by rpki-client on console-fra.rpki-client.org