Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/1-_HsDRyx7Oz_kTp1WJytPk8Ir5Y.roa
File: 1-_HsDRyx7Oz_kTp1WJytPk8Ir5Y.roa (raw, json)
Hash identifier: Azdo9TOTF1GNgdhDZtRmDJ0x8XJQCS51UXFqTvNiyJc=
Subject key identifier: FB:F1:EC:0D:1C:B1:EC:EC:FF:91:3A:75:58:9C:AD:3E:4F:08:AF:96
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 0185728CAE6B8EC7239FBB1BCEEE1D95EC7F
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/1-_HsDRyx7Oz_kTp1WJytPk8Ir5Y.roa
Signing time: Mon 02 Jan 2023 12:55:00 +0000
ROA not before: Mon 02 Jan 2023 12:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211892
IP address blocks: 91.196.232.0/23 maxlen: 23
91.196.232.0/22 maxlen: 22
91.196.234.0/23 maxlen: 23
185.116.61.0/24 maxlen: 24
2a04:6d00::/29 maxlen: 29
2a0c:8040::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:ae:6b:8e:c7:23:9f:bb:1b:ce:ee:1d:95:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Jan 2 12:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbf1ec0d1cb1ececff913a75589cad3e4f08af96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:8e:c2:a4:4a:46:e1:00:ac:76:87:8e:de:
e4:0b:5c:21:96:6b:97:6e:d3:9b:77:7f:02:7f:78:
8d:30:2e:c8:83:43:a4:bc:a7:c0:e8:78:72:df:ef:
4c:fd:d8:af:cb:75:af:d0:ab:b6:c8:89:0f:0e:01:
c2:7f:3c:ac:28:9c:ea:01:cd:69:04:14:46:b7:24:
4a:2e:93:88:75:d2:02:0e:6f:92:66:8e:0a:00:5e:
27:2f:c2:8d:8c:7f:40:21:ca:62:aa:c9:79:76:c1:
7c:b5:51:6a:b4:89:8a:49:5a:ec:40:40:24:ab:93:
84:64:02:ad:ef:f4:a6:45:1c:6f:71:51:27:1f:f5:
33:af:9e:a9:f4:98:d4:98:d2:fb:6c:91:32:a4:e2:
11:26:cd:ce:9e:af:d4:a3:a8:60:f1:bc:94:a8:75:
2e:e2:a6:89:df:fa:34:47:06:02:be:8b:08:32:e6:
3e:23:fa:93:e4:6c:43:58:00:2a:55:5a:f8:46:8b:
dd:99:df:8d:42:52:8c:9c:e3:36:e9:17:55:0b:67:
86:06:7f:63:d2:c1:31:4a:5d:f5:54:36:73:a3:67:
58:e3:1c:e3:74:de:5a:a6:7a:84:a9:d7:6e:08:f9:
bb:ac:7c:72:9b:26:4b:20:3d:62:d4:a1:5a:34:5d:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:EC:0D:1C:B1:EC:EC:FF:91:3A:75:58:9C:AD:3E:4F:08:AF:96
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/1-_HsDRyx7Oz_kTp1WJytPk8Ir5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.232.0/22
185.116.61.0/24
IPv6:
2a04:6d00::/29
2a0c:8040::/29
Signature Algorithm: sha256WithRSAEncryption
16:0e:bc:bf:49:22:81:47:58:47:7e:45:d2:1e:b3:66:53:d4:
70:ba:e7:61:86:13:66:7a:a7:cf:81:30:ff:92:4d:aa:72:96:
cf:dc:7b:b0:1e:9e:e0:02:ef:08:54:56:0d:f0:25:3e:27:cb:
a2:4a:98:8f:f9:07:bc:5f:82:be:13:e8:54:53:5d:27:fd:c6:
2e:5b:04:87:6b:6a:fe:ac:cb:d8:a6:f8:f0:77:b7:a1:bf:44:
46:d7:5f:e1:3c:96:a1:48:1b:b6:b3:28:65:89:46:99:a6:c7:
e0:6b:2f:82:64:72:a5:58:47:2f:15:36:d9:17:46:39:91:75:
21:47:d2:97:0f:72:94:55:5d:d3:e3:36:8a:a1:42:f7:0d:d9:
2e:34:b6:e2:5b:15:0f:24:fb:c4:bb:36:8a:ad:56:e5:16:bf:
61:5c:e8:69:83:9d:92:28:83:5f:72:bb:73:ec:81:38:da:03:
bf:d2:b6:3c:9a:32:8b:47:d7:ae:c6:f1:98:9e:9b:c0:75:b0:
81:c2:11:59:03:03:f0:6d:3e:c0:2e:4f:2e:a3:cf:40:b6:2e:
d8:af:4a:ae:f4:7d:06:66:45:b4:4d:75:2a:07:52:db:11:34:
70:40:c6:bd:07:97:ed:77:21:3c:c9:66:5e:e9:ad:fe:93:dc:
bc:ed:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:56 2024 by rpki-client on console-fra.rpki-client.org