Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OQ5Mu-tH97Hf6QCB8kT0ErASVL4.roa
File: OQ5Mu-tH97Hf6QCB8kT0ErASVL4.roa (raw, json)
Hash identifier: rz7ezQkZXGXOk82WgLHLdn3ow5E09vLczvR9yOtRW5M=
Subject key identifier: 39:0E:4C:BB:EB:47:F7:B1:DF:E9:00:81:F2:44:F4:12:B0:12:54:BE
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01860158941220F31B70C3D756FFD752A582
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OQ5Mu-tH97Hf6QCB8kT0ErASVL4.roa
Signing time: Mon 30 Jan 2023 06:23:47 +0000
ROA not before: Mon 30 Jan 2023 06:23:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 91.200.222.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 30 Jan 2023 20:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:58:94:12:20:f3:1b:70:c3:d7:56:ff:d7:52:a5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 30 06:23:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=390e4cbbeb47f7b1dfe90081f244f412b01254be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2d:37:ec:ad:07:72:5e:39:2c:29:1e:c2:36:
c6:68:d8:c5:45:64:bb:21:3a:34:45:ec:83:07:06:
a0:6f:a0:e1:59:12:9e:51:40:e6:91:b2:a2:d0:04:
5c:49:17:40:7c:41:ea:e8:d8:a1:8c:e7:29:07:66:
0d:4e:76:0a:2b:cf:7c:c6:5c:c3:6a:c2:b3:14:59:
bf:43:b3:c7:e8:3a:e7:50:89:f7:58:7a:a7:17:80:
e1:42:bd:55:27:4f:d2:05:0a:0d:7d:21:05:37:a1:
42:ff:8a:48:a2:34:87:b7:cb:3b:3f:ef:ec:3e:80:
8a:fe:a0:f7:31:93:cd:3b:47:4b:8b:a5:76:2c:5b:
5b:23:f2:f1:59:29:3a:79:1e:6a:85:b4:f4:d3:1f:
c0:d0:0b:92:5b:65:c2:3b:c9:08:79:69:4c:e8:c6:
f2:fc:c9:ea:34:2d:78:b8:e5:06:03:04:d8:18:d1:
01:b5:79:d6:95:73:0e:b8:83:00:35:0c:14:2f:a3:
cc:45:0a:07:55:3d:33:79:03:5e:26:d4:b7:ad:5d:
b0:87:67:92:1e:80:60:bf:3c:91:aa:67:3e:3c:6f:
29:94:08:a6:05:ee:8f:49:4f:16:d4:bd:9e:f5:a0:
6c:f8:db:94:78:dc:d7:2e:8e:45:b3:04:53:be:bf:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0E:4C:BB:EB:47:F7:B1:DF:E9:00:81:F2:44:F4:12:B0:12:54:BE
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/OQ5Mu-tH97Hf6QCB8kT0ErASVL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.222.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:73:2b:a3:a5:4c:8b:de:bd:e6:b2:1e:08:72:c4:a4:1c:0b:
f9:3d:6a:08:8a:1c:02:45:72:c1:d4:ba:0c:25:32:57:d2:d4:
95:96:8b:ba:50:39:16:c5:72:b5:9f:fb:b6:91:a3:f3:cd:06:
5c:cc:fb:22:39:c3:5f:a5:49:b2:b6:5b:58:f5:1d:f9:c8:8b:
99:54:ce:19:c8:6c:23:b3:e9:52:f3:ce:74:22:e1:4b:4b:5c:
36:f8:42:50:84:00:df:83:7e:21:54:06:d4:49:af:d7:e6:a9:
19:59:24:55:a8:83:58:c9:4b:ef:6f:d5:88:c2:33:d5:fd:ac:
7c:09:a0:0a:65:e3:11:f9:bd:b9:25:3d:26:6e:98:46:b6:10:
c9:32:31:bf:ea:9c:b7:e8:ad:cc:29:6f:7f:2f:9f:63:bd:1e:
be:f8:05:af:80:69:f4:82:5c:28:41:b6:7a:2d:79:74:36:91:
34:d2:f2:72:da:ce:e5:8a:71:0f:b0:7d:75:d0:0f:75:cc:77:
01:90:63:fe:89:b4:89:35:11:7a:af:fc:2e:4b:39:97:68:3a:
46:eb:e6:e4:35:dd:cb:05:79:91:36:72:93:71:a5:9c:51:32:
8e:81:ef:67:32:bf:41:e9:10:55:be:b7:bb:63:44:9f:58:93:
95:dc:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org