Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/L10YguhgjlDi05KR6sZfSWYWSXw.roa
File: L10YguhgjlDi05KR6sZfSWYWSXw.roa (raw, json)
Hash identifier: hM43zfdh8ZUy6efdf+4KdYxuGDkogPuOCEusLrO0vUY=
Subject key identifier: 2F:5D:18:82:E8:60:8E:50:E2:D3:92:91:EA:C6:5F:49:66:16:49:7C
Certificate issuer: /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial: 0185730CB328B7F0269AD82E39020FCBFB49
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/L10YguhgjlDi05KR6sZfSWYWSXw.roa
Signing time: Mon 02 Jan 2023 15:14:50 +0000
ROA not before: Mon 02 Jan 2023 15:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 91.247.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:b3:28:b7:f0:26:9a:d8:2e:39:02:0f:cb:fb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Validity
Not Before: Jan 2 15:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f5d1882e8608e50e2d39291eac65f496616497c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:18:af:ba:18:5c:4d:02:1c:d6:90:fc:78:5c:
6e:2f:20:c8:47:18:b9:2c:f8:5b:d0:71:5f:18:b9:
82:d6:78:10:c9:1e:c3:ec:58:6b:f0:d4:8a:44:42:
fd:bb:f8:59:44:cd:b4:b9:b2:77:22:fd:7e:4d:02:
8f:61:0c:c5:e8:b4:0d:42:54:29:49:c7:bc:23:23:
dd:e7:2a:bc:d5:67:02:2b:d9:f7:2a:3a:91:a5:35:
de:0e:80:7c:fc:9a:ee:87:3c:8e:2c:a7:f2:b1:ad:
99:33:6a:87:fe:ca:66:a8:1b:7e:b3:f1:14:73:55:
90:02:35:d4:ee:8e:51:13:41:74:25:e4:01:e4:1b:
bf:f2:83:d6:68:97:a9:b8:b0:08:b9:6b:84:7f:52:
b6:7a:72:75:0e:b6:91:57:5c:1c:ae:c1:a2:82:da:
44:71:31:4b:e3:bc:dc:8e:4f:95:b1:a6:14:e5:74:
59:c6:2d:93:c1:7c:20:de:2d:45:17:a5:18:1d:de:
1b:ba:36:4c:76:75:23:ad:c7:50:39:49:dc:1e:98:
c9:fa:03:d1:7a:42:a4:dc:14:21:8c:3b:2f:b5:b1:
74:1a:66:2c:3a:3a:ef:4a:dd:4b:59:20:e9:30:54:
3a:d3:90:e6:70:d1:53:a3:43:b0:cd:e2:b2:0c:c8:
ce:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:18:82:E8:60:8E:50:E2:D3:92:91:EA:C6:5F:49:66:16:49:7C
X509v3 Authority Key Identifier:
keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/L10YguhgjlDi05KR6sZfSWYWSXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:56:4f:01:a8:c0:94:e3:d6:89:83:c0:1f:82:4a:ca:25:4d:
f2:e6:68:15:9a:9e:74:26:a9:57:03:9c:01:9b:6a:a1:ec:53:
6b:26:4f:b0:28:d8:c4:dd:60:69:52:4e:e3:67:b4:b8:e2:59:
fb:8b:14:91:b5:46:5e:4b:60:9a:fe:e3:f8:4c:b7:55:19:bb:
57:3e:f2:de:ba:92:e6:05:21:23:a1:28:e7:46:65:38:24:dc:
03:c6:d7:99:4b:b6:ef:a0:23:03:1a:e1:1a:c0:29:ac:45:e1:
b7:0b:94:a5:03:7d:ef:b1:b9:1d:e4:db:09:5a:c6:f0:54:1f:
6c:7a:c7:d8:b7:85:74:84:a8:96:10:8c:8a:9e:3a:e3:ad:76:
00:01:7b:9d:a4:3d:62:48:4a:33:63:ed:b7:2b:a2:75:cf:57:
71:78:3a:a8:98:e4:78:16:d1:5b:b2:28:a6:85:ba:75:31:b5:
4e:c8:f3:47:f8:18:7d:b9:11:67:3f:09:48:71:24:55:dc:fa:
00:84:88:e9:d8:b9:24:11:06:1b:6e:de:ef:fc:26:d6:c8:33:
16:2e:3d:fc:85:9c:2f:46:62:ac:10:fa:40:ab:b2:fe:a1:31:
3c:c4:eb:cc:dd:7b:f6:0d:0c:16:7c:8c:46:eb:14:09:f6:5e:
1d:eb:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:02 2024 by rpki-client on console-ams.rpki-client.org