Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/fsv7h2Hoc6HOpkLzHoB3Znz_BtU.roa
File: fsv7h2Hoc6HOpkLzHoB3Znz_BtU.roa (raw, json)
Hash identifier: PJ316rBlUiYY++HzBLB2+qHaH8Ow8xWKeRPGfOWCxxc=
Subject key identifier: 7E:CB:FB:87:61:E8:73:A1:CE:A6:42:F3:1E:80:77:66:7C:FF:06:D5
Certificate issuer: /CN=78ac31635d091be6155743311fe1db7c7af3477b
Certificate serial: 01856E01E7ACB15A17824F000A3D11CD83FE
Authority key identifier: 78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/fsv7h2Hoc6HOpkLzHoB3Znz_BtU.roa
Signing time: Sun 01 Jan 2023 15:44:56 +0000
ROA not before: Sun 01 Jan 2023 15:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47952
IP address blocks: 91.198.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:e7:ac:b1:5a:17:82:4f:00:0a:3d:11:cd:83:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78ac31635d091be6155743311fe1db7c7af3477b
Validity
Not Before: Jan 1 15:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ecbfb8761e873a1cea642f31e8077667cff06d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:16:08:3a:1e:ea:73:02:48:ba:00:39:7b:
8d:c9:57:c3:55:f1:96:1d:63:d1:a0:7f:46:fd:b7:
fe:0e:d3:06:78:64:6f:57:87:b9:11:d9:77:8c:b9:
ce:f3:d7:4b:63:47:a3:8c:63:63:b9:69:af:7e:be:
c1:72:23:7d:68:8c:92:76:3c:f3:93:f8:38:35:6e:
68:13:1d:49:f2:60:2d:6d:30:30:d8:0b:d8:14:23:
87:e0:f9:b3:e2:ec:7a:ce:53:b3:a5:54:79:ea:7b:
87:d0:4e:68:30:b5:cb:73:03:46:8f:7d:c5:6f:48:
58:0e:fe:e4:45:a3:85:d7:e3:0e:57:e9:25:7b:5b:
42:85:fa:8a:c3:c0:f6:e2:cc:3e:48:22:fa:cc:20:
9f:74:30:aa:6f:8e:89:47:17:8e:13:af:68:4d:45:
ee:cb:db:ff:a2:ec:71:b8:66:66:37:8b:aa:81:70:
03:c6:36:41:fb:a5:d0:8d:53:ca:4c:30:24:10:72:
a5:6f:1b:b6:b0:02:76:ce:40:3e:49:df:11:5e:ce:
fc:d2:68:08:d2:5c:d4:2f:b4:03:c2:8d:b3:6e:90:
48:37:ad:fe:63:7f:1f:71:27:0d:a8:e9:f4:0d:d2:
8a:a9:69:c9:a4:2c:e5:fc:f3:75:60:30:fc:5b:c7:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CB:FB:87:61:E8:73:A1:CE:A6:42:F3:1E:80:77:66:7C:FF:06:D5
X509v3 Authority Key Identifier:
keyid:78:AC:31:63:5D:09:1B:E6:15:57:43:31:1F:E1:DB:7C:7A:F3:47:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKwxY10JG-YVV0MxH-HbfHrzR3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/fsv7h2Hoc6HOpkLzHoB3Znz_BtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/fe22c5-d8e3-41f1-9094-f6e8bbdbd33b/1/eKwxY10JG-YVV0MxH-HbfHrzR3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.64.0/24
Signature Algorithm: sha256WithRSAEncryption
58:40:f4:3f:53:82:b7:cf:06:d1:82:20:f9:4d:0f:51:a2:f4:
cd:7c:39:98:ca:45:fc:7f:43:c7:c2:2f:f9:ac:85:c8:71:79:
1e:f3:0f:ff:62:5d:68:b9:5c:8e:b6:c5:c7:ab:ee:84:ab:0d:
2d:d8:6f:15:ca:24:6f:6d:17:36:37:4e:2b:61:7f:0b:dc:8b:
b7:6d:fe:26:f3:83:5a:e7:62:1e:15:3f:45:5f:fc:55:74:aa:
66:e7:d8:94:5f:3b:a9:0f:d3:23:be:c1:d2:34:aa:cc:35:94:
27:f8:cb:15:ca:11:8b:51:0e:73:7d:2d:7c:fd:3a:59:78:ba:
59:ba:23:06:3f:f9:cf:3c:f2:42:51:d2:ce:17:e9:c4:57:1c:
6b:ba:03:6e:2a:ba:1f:ff:96:71:6c:1a:2e:b6:f4:d4:7d:d6:
17:38:49:cb:92:69:02:b3:e8:13:36:ab:9a:48:57:44:c5:44:
c2:ce:98:33:87:bc:be:91:6b:fa:78:86:3c:5e:43:35:6d:07:
51:5b:5a:e7:3f:d5:8a:2d:fc:6f:c6:7e:e6:89:cf:f7:68:72:
31:07:8a:ef:a2:9f:37:d1:aa:f4:5b:f4:2c:46:db:1b:b2:56:
f5:b1:ba:5a:57:89:83:9c:01:ba:65:f0:fe:d6:65:83:f3:43:
ec:82:a4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org