Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/yGbeOYSFySSpGJCE1G18ftC_CzY.roa
File: yGbeOYSFySSpGJCE1G18ftC_CzY.roa (raw, json)
Hash identifier: 7W600nVE/HBs3asOna4OXdIwF75xaAhMcTatcpRYhxI=
Subject key identifier: C8:66:DE:39:84:85:C9:24:A9:18:90:84:D4:6D:7C:7E:D0:BF:0B:36
Certificate issuer: /CN=3db342062577169a63597e9e3a6425fcde6c1661
Certificate serial: 018589CC3E0AF5A38F821676E7353AE11837
Authority key identifier: 3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/yGbeOYSFySSpGJCE1G18ftC_CzY.roa
Signing time: Sat 07 Jan 2023 01:15:41 +0000
ROA not before: Sat 07 Jan 2023 01:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56400
IP address blocks: 91.225.162.0/23 maxlen: 23
91.225.160.0/22 maxlen: 22
91.225.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:89:cc:3e:0a:f5:a3:8f:82:16:76:e7:35:3a:e1:18:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db342062577169a63597e9e3a6425fcde6c1661
Validity
Not Before: Jan 7 01:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c866de398485c924a9189084d46d7c7ed0bf0b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:ef:c7:7c:1d:f2:81:40:ba:85:9f:ec:fd:
16:b1:ac:18:99:f4:6f:c4:97:28:f6:5d:cd:4f:10:
60:b3:5e:90:cd:56:66:c5:54:e4:56:0a:7d:e2:73:
af:5d:27:f3:3a:c2:39:c4:1b:cc:ca:da:b8:dc:b6:
30:26:c5:1b:95:34:35:ce:ef:50:f2:0b:d8:75:9e:
ce:3c:c5:ff:c8:06:02:a0:1b:47:a6:b8:31:44:1e:
7d:50:41:30:0b:8a:8f:4e:fe:a8:8c:3f:17:8f:09:
71:fe:83:38:81:c2:08:04:e2:86:89:89:02:ad:22:
d3:34:41:b3:87:f5:b2:8d:db:4d:0d:ad:01:dc:61:
66:07:49:50:00:29:99:06:6e:e4:86:aa:27:fd:29:
50:d1:ad:34:d9:80:30:c4:15:df:4a:7c:c4:0e:6d:
ff:4f:b2:e7:cc:8d:e9:bf:39:75:25:6e:f0:74:2a:
d4:28:04:a0:7b:d8:6d:f7:7d:2f:11:d0:97:ac:27:
b1:0c:44:83:c5:03:41:00:f7:ff:55:fe:ca:6e:dd:
0c:cd:13:94:bf:7c:97:b3:40:34:ec:d1:48:ca:ae:
58:08:34:22:e0:59:f4:b9:1a:97:f7:82:68:fb:00:
36:5c:cc:97:fa:01:d1:42:7f:30:92:09:94:2b:d3:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:DE:39:84:85:C9:24:A9:18:90:84:D4:6D:7C:7E:D0:BF:0B:36
X509v3 Authority Key Identifier:
keyid:3D:B3:42:06:25:77:16:9A:63:59:7E:9E:3A:64:25:FC:DE:6C:16:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbNCBiV3FppjWX6eOmQl_N5sFmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/yGbeOYSFySSpGJCE1G18ftC_CzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/510066-471e-472a-8978-497277afbaa5/1/PbNCBiV3FppjWX6eOmQl_N5sFmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.160.0/22
Signature Algorithm: sha256WithRSAEncryption
04:0c:da:7a:2b:95:a7:3c:a6:55:bb:a8:0a:8c:ac:d7:a2:9c:
06:d9:45:71:c1:6d:4c:03:6e:a4:06:f1:0b:87:5a:3b:da:82:
c6:07:9f:c7:93:6e:99:4f:38:90:bf:71:55:0c:1d:05:17:71:
cb:22:b9:06:6e:36:fb:a6:77:96:5f:a7:af:df:7c:13:e2:9c:
2d:8f:13:a2:c7:ba:77:b4:7d:8c:31:c9:7c:80:f8:98:4b:ad:
59:27:6f:18:b2:a0:84:30:ac:2c:60:04:92:c7:42:72:c8:9c:
23:5e:66:1f:79:2c:f7:76:07:50:bd:1a:60:57:a3:e5:53:da:
39:35:28:66:31:44:10:ee:66:64:2f:28:37:d0:c7:df:cd:fd:
65:91:a0:d6:a2:18:7a:90:2c:ef:da:3b:9b:8d:f5:5e:54:11:
dd:d2:a4:98:6b:6d:0e:f9:62:ce:4e:6b:8d:f6:57:08:4e:2b:
5b:06:52:14:31:a5:52:ac:75:ce:3f:13:42:c8:65:d9:59:e2:
83:4e:0e:36:e5:bf:64:61:e2:48:3d:af:28:7c:e2:0c:72:2a:
12:3e:b4:54:ee:cc:30:f5:7a:6a:a0:5e:e7:d7:6e:b1:01:77:
af:d0:2a:aa:77:86:64:93:8e:c3:34:ec:4d:11:96:49:5d:15:
6f:71:1c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:24 2024 by rpki-client on console-ams.rpki-client.org