Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/sy1nXUaSQX6vBzhbJEDZmnqQNQI.roa
File: sy1nXUaSQX6vBzhbJEDZmnqQNQI.roa (raw, json)
Hash identifier: Ac3ppuuwQ+whnsCeOclT7bF4HlkSlXwJHwBQibYtFho=
Subject key identifier: B3:2D:67:5D:46:92:41:7E:AF:07:38:5B:24:40:D9:9A:7A:90:35:02
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 01856C783A057DEA1139A434CACC628ADAE7
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/sy1nXUaSQX6vBzhbJEDZmnqQNQI.roa
Signing time: Sun 01 Jan 2023 08:34:56 +0000
ROA not before: Sun 01 Jan 2023 08:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 91.226.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3a:05:7d:ea:11:39:a4:34:ca:cc:62:8a:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Jan 1 08:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b32d675d4692417eaf07385b2440d99a7a903502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:e3:6f:54:e6:a8:b4:93:a3:67:6d:16:8f:
31:06:dd:6c:b2:1c:c0:20:ee:c1:30:53:58:78:f5:
12:bd:5a:60:53:21:9f:da:57:53:79:90:f9:70:89:
dd:8c:a8:df:2f:4e:6c:5a:63:a8:e4:bb:26:ab:66:
76:92:31:3d:98:bf:2f:7e:0e:f6:54:c0:e9:60:6d:
14:78:ea:3f:e0:80:50:70:93:97:6e:1c:f5:b1:bd:
4e:6a:f6:21:c7:c9:33:e1:b2:ee:22:33:66:ea:c0:
4b:49:d0:f7:90:bc:80:04:9c:2a:7f:2c:d0:8d:19:
e7:f3:37:e8:60:1e:b3:60:76:c6:85:4d:11:4c:a7:
3d:7b:44:ff:07:c8:5a:a4:1a:87:05:49:5a:94:f9:
19:b3:bc:9f:5e:bd:d7:8c:77:bc:07:6c:f6:b6:4a:
a3:b1:28:9d:f8:c3:d0:44:e8:65:ce:ae:2b:f4:d2:
09:2a:5d:46:af:39:5c:01:e5:52:a1:ee:1b:33:54:
9c:56:50:f5:28:4f:57:2e:8d:5c:30:28:53:41:ff:
da:63:9a:cb:d5:66:d9:da:25:8c:a9:43:d7:00:1e:
da:ee:eb:b3:eb:7d:54:72:e8:fc:9e:56:c0:7c:e4:
dc:f3:c7:34:53:5c:3e:35:ed:3b:0a:b3:31:41:7a:
67:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2D:67:5D:46:92:41:7E:AF:07:38:5B:24:40:D9:9A:7A:90:35:02
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/sy1nXUaSQX6vBzhbJEDZmnqQNQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:6c:85:8f:f7:9e:ec:83:8b:90:d9:7e:c4:86:9a:10:51:
c6:49:c6:e7:2a:4a:41:92:92:85:2d:3d:39:b1:72:96:19:61:
fa:32:1c:e4:1f:62:d0:c8:1d:be:52:a3:06:ea:bb:cb:a7:b8:
07:d8:d6:91:4c:74:e9:21:b5:af:b6:26:bb:cb:33:96:89:ae:
cf:1e:a3:8b:4d:7b:ac:e9:0b:99:78:85:43:ab:4e:95:8f:d5:
84:bd:39:dd:3e:cb:27:82:75:55:59:78:e4:88:84:1d:e7:30:
2c:48:e8:9e:5b:95:fc:30:fe:5f:b1:a8:2f:a6:41:05:7c:ae:
12:e2:98:39:47:b5:57:5b:58:d6:76:b3:34:64:e5:ee:e3:7c:
b2:f7:e2:dc:2d:6c:5c:d2:6c:bc:eb:72:5e:72:78:9e:31:ce:
74:1b:4a:34:2e:d3:ed:ca:bf:0d:d8:a8:41:4a:b5:64:00:da:
09:c4:8e:7c:00:3a:9c:6f:4e:a5:a5:2b:53:a2:de:8e:8e:20:
2b:e4:bd:da:15:7a:e7:86:ae:c3:69:5f:66:95:65:d7:8d:b3:
d0:e3:76:98:fc:f0:49:04:80:87:1c:be:40:53:78:bc:87:2b:
c2:49:a7:7e:35:6e:41:98:db:c0:63:92:f0:0b:f8:ba:15:3c:
a4:56:58:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:21 2024 by rpki-client on console-fra.rpki-client.org