Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/9GRi1Y3NV6JxjpPnF5ZAZuL2o4A.roa
File: 9GRi1Y3NV6JxjpPnF5ZAZuL2o4A.roa (raw, json)
Hash identifier: UlUcQHtp1dKQ+RDFbslET/Llw5GDbNvdTulaDIiMRAg=
Subject key identifier: F4:64:62:D5:8D:CD:57:A2:71:8E:93:E7:17:96:40:66:E2:F6:A3:80
Certificate issuer: /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial: 01856F79878B20B7D5F8CAC94D542A01A2D9
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/9GRi1Y3NV6JxjpPnF5ZAZuL2o4A.roa
Signing time: Sun 01 Jan 2023 22:35:13 +0000
ROA not before: Sun 01 Jan 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205307
IP address blocks: 91.236.19.0/24 maxlen: 29
2001:678:ae8::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:87:8b:20:b7:d5:f8:ca:c9:4d:54:2a:01:a2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Validity
Not Before: Jan 1 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f46462d58dcd57a2718e93e717964066e2f6a380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:ff:4a:ed:93:4f:b2:a5:fd:a8:80:09:7f:
74:0e:d8:ad:d5:aa:a8:eb:41:2f:9f:b0:8a:a0:15:
26:37:b1:c8:12:56:7b:e1:a2:c3:97:06:5d:0d:70:
3d:fd:e5:19:9c:f5:fe:62:74:84:ff:47:b3:50:66:
aa:2a:69:00:6b:89:9f:c6:30:39:40:06:7a:c0:50:
31:3f:9f:22:89:fb:1a:f1:47:be:53:3b:9b:58:58:
25:08:5b:ce:07:90:19:02:86:6f:88:22:b3:6f:11:
a9:61:f7:da:4b:ca:77:0d:ca:ca:f2:95:47:65:85:
ec:f8:91:f0:ab:bb:0f:18:90:dd:43:11:b4:5f:49:
bc:9e:aa:2a:5e:63:7a:e4:ee:08:ee:e7:04:7b:7e:
40:00:dc:7b:d1:b6:1e:f1:26:1f:29:fd:1d:92:81:
b7:18:8e:e2:72:9c:b5:c3:47:45:ac:5e:9a:00:99:
d9:c5:b8:d4:ef:45:c8:8b:0e:93:d8:24:03:b6:f9:
3d:88:2e:cf:c9:f5:81:f2:e5:4c:d3:6d:56:69:86:
26:9f:13:f5:ab:99:f7:0e:c3:a5:7a:96:30:63:7a:
e2:73:e6:fb:c8:62:cf:43:13:ee:53:5d:12:b6:8e:
4d:31:06:31:9f:ce:21:b2:89:f5:3d:3d:6d:43:ff:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:62:D5:8D:CD:57:A2:71:8E:93:E7:17:96:40:66:E2:F6:A3:80
X509v3 Authority Key Identifier:
keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/9GRi1Y3NV6JxjpPnF5ZAZuL2o4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.19.0/24
IPv6:
2001:678:ae8::/48
Signature Algorithm: sha256WithRSAEncryption
77:ca:9c:cc:48:14:03:4b:3b:6c:c3:a6:ae:78:0d:3a:02:7d:
0f:08:4f:2a:01:72:9f:af:ec:d3:fb:2a:dd:0c:50:95:e2:6d:
0b:3a:c0:1c:71:a4:87:7c:03:ed:42:a3:ef:6f:0c:c8:95:81:
2e:ac:e9:87:c2:00:b1:0b:f7:0f:7e:09:2f:00:b9:de:e4:e3:
a6:a7:80:1e:25:2e:32:8c:a6:5d:3d:10:1f:9e:19:04:ca:92:
b2:88:1f:f2:ce:e7:e6:a9:03:95:79:84:c1:fc:cb:ab:ca:00:
ef:2a:e0:1c:18:06:b5:65:46:f3:f5:c2:71:eb:c0:e0:49:ee:
c4:4e:8f:90:49:87:1c:f6:14:f6:4d:3e:e6:bb:ea:73:17:c9:
d4:da:08:be:20:93:af:4e:b9:c1:7d:e9:c1:e1:c8:50:9e:68:
18:20:37:ab:b6:4e:03:ea:5c:ef:2d:02:f9:a4:1b:b2:29:2a:
3b:66:af:10:45:97:3d:c2:ce:9b:9d:62:b6:cb:b8:99:58:0f:
ca:4d:ec:a2:05:94:5f:ae:75:22:d5:5e:01:62:28:b7:29:ac:
a5:7f:8a:4b:96:05:1e:ff:4b:7b:77:ab:1a:93:61:ed:6e:fb:
7d:66:8b:46:23:78:55:18:13:c0:ce:e4:7a:f3:43:0a:29:cb:
c2:65:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:21 2024 by rpki-client on console-fra.rpki-client.org