Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/EahS9CnUZCSxSz2KhMBnsJImEnk.roa
File: EahS9CnUZCSxSz2KhMBnsJImEnk.roa (raw, json)
Hash identifier: pJJH1+xhXd6dWm/mJ9VLBI2JBbJ/YGSSm791zC46anU=
Subject key identifier: 11:A8:52:F4:29:D4:64:24:B1:4B:3D:8A:84:C0:67:B0:92:26:12:79
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 01856C135D42F74EEBC5A1F52D0149F35606
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/EahS9CnUZCSxSz2KhMBnsJImEnk.roa
Signing time: Sun 01 Jan 2023 06:44:46 +0000
ROA not before: Sun 01 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47511
IP address blocks: 91.206.82.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:5d:42:f7:4e:eb:c5:a1:f5:2d:01:49:f3:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Jan 1 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11a852f429d46424b14b3d8a84c067b092261279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:90:68:f2:15:2c:76:16:aa:4e:5b:84:ac:30:
f9:d9:34:00:ff:3e:74:66:25:8a:f9:63:82:de:c1:
b4:99:44:91:db:ac:56:24:40:3d:df:0a:49:e4:d6:
5d:19:8b:ac:36:1d:f0:64:72:ef:90:03:3b:1d:42:
a6:89:0f:8f:57:17:16:dc:ff:8b:a7:45:3d:97:45:
cd:48:a7:83:61:7d:7a:b7:c1:74:8d:2d:18:50:2a:
05:4a:27:7e:15:2e:59:55:cf:de:7d:48:41:94:6d:
7d:00:2a:2d:68:44:62:82:ad:75:53:20:25:18:93:
aa:fb:77:fb:3f:d0:93:43:6e:e4:ff:a3:09:42:f6:
32:40:7c:9e:92:9b:fb:fd:ee:6c:84:cc:9f:e7:7b:
63:65:db:af:9a:f2:42:c2:5a:da:4e:e4:68:6f:61:
d1:da:8f:1b:9b:18:21:c6:6d:8f:10:8c:0b:41:42:
3b:c9:34:3d:74:ab:6b:c4:be:4a:0c:7d:b5:d4:52:
34:1a:36:c8:91:94:5c:23:46:90:74:6a:06:ff:b2:
67:44:48:e9:dd:e8:1e:f0:a0:5f:37:b1:3d:08:ae:
67:3a:91:40:f7:ee:26:33:bc:6d:b4:f4:38:b7:94:
c1:b0:bd:13:95:7c:7f:68:b6:5e:c2:54:31:5c:45:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:52:F4:29:D4:64:24:B1:4B:3D:8A:84:C0:67:B0:92:26:12:79
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/EahS9CnUZCSxSz2KhMBnsJImEnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.82.0/23
Signature Algorithm: sha256WithRSAEncryption
20:77:65:e3:e2:f3:06:99:8e:7b:26:b9:0b:c8:2f:d9:f5:cf:
43:dd:6f:64:e9:77:85:10:d6:c4:9e:f9:d7:7d:7c:85:61:0a:
0d:6c:d9:c0:4e:12:2b:e5:21:90:78:e5:3b:21:8e:64:e4:06:
32:8b:d8:ca:9b:6a:b6:67:91:9b:5d:4c:37:ea:8b:5f:9c:dd:
5d:fb:93:62:53:ce:92:88:6b:39:3c:48:08:4d:97:44:e3:27:
d3:0e:d0:e2:d4:de:85:02:c3:c7:cc:e1:d6:26:f3:8d:e0:ad:
39:68:4b:f7:44:5e:d9:4b:7a:42:28:cb:4b:dd:5e:77:3e:55:
f4:8f:86:b1:1d:6d:9f:b2:84:b0:f0:fe:3d:c6:9b:b2:54:b2:
f5:46:1f:e8:38:9f:9b:73:3e:65:ef:cc:32:c5:3c:d7:f6:91:
e5:90:ea:95:4f:5e:40:9b:94:9a:5f:bf:c3:f6:30:f9:77:91:
61:ae:a6:7b:e1:82:26:49:dc:4f:1d:c0:50:fa:44:44:e0:76:
6a:c5:cf:fc:7e:71:70:8e:54:1a:55:2d:e8:b5:10:44:00:3f:
e7:78:03:29:6d:d4:c6:01:04:c9:33:89:03:1a:2f:9e:ab:72:
79:7d:2c:b1:4e:b0:71:fb:00:ed:5b:85:97:10:5d:ca:5e:60:
99:fd:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:35 2024 by rpki-client on console-fra.rpki-client.org