Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jN3fCJNlnqIU54BgYyfYh4svwdo.roa
File: jN3fCJNlnqIU54BgYyfYh4svwdo.roa (raw, json)
Hash identifier: mdHDbUvSs6M58d5K5b4Dzs4g+NCgEb713d73OxRj/y0=
Subject key identifier: 8C:DD:DF:08:93:65:9E:A2:14:E7:80:60:63:27:D8:87:8B:2F:C1:DA
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018DEFD8A1C7298B7304F3F38011E618D346
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jN3fCJNlnqIU54BgYyfYh4svwdo.roa
Signing time: Wed 28 Feb 2024 13:12:48 +0000
ROA not before: Wed 28 Feb 2024 13:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 91.210.144.0/24 maxlen: 24
91.210.145.0/24 maxlen: 24
91.210.146.0/24 maxlen: 24
91.210.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 17:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:d8:a1:c7:29:8b:73:04:f3:f3:80:11:e6:18:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 28 13:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cdddf0893659ea214e780606327d8878b2fc1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:d6:e3:8c:5c:7c:6f:26:b1:59:04:26:52:
54:c5:82:01:71:e5:d1:47:35:8b:34:32:59:c4:9b:
64:4c:e8:8e:1d:c6:cc:f9:60:d0:2c:2e:28:fb:65:
ee:2e:f3:36:e3:be:7a:71:31:1b:0a:89:f1:3d:11:
a8:17:e3:43:a3:c2:83:2d:dc:9a:09:a2:e6:7f:e6:
08:04:3b:f1:f2:d2:45:24:00:ac:85:ef:6d:d9:84:
61:7a:bb:8d:08:50:2e:bb:fb:a0:5e:2e:61:d8:b7:
df:65:13:47:86:a6:e1:38:5a:21:ee:b0:b9:48:01:
19:1f:54:4b:1f:8a:d8:2d:5d:be:3d:96:fb:6c:2d:
a9:63:5f:88:f9:e2:a9:58:1c:71:71:77:0a:0d:d1:
76:c5:a6:c5:e5:a8:c7:19:a7:dc:2e:99:26:05:18:
4c:f6:fd:48:4f:de:d9:9f:50:2f:c1:00:bc:ae:48:
1d:ec:08:85:e6:3c:8b:e0:52:96:d4:1b:78:9e:c3:
a6:04:7c:88:e9:2b:3b:28:52:ba:cf:f9:7b:00:90:
e9:de:cd:01:2e:d0:98:04:4b:9b:5f:bd:c9:b0:bf:
ca:08:f6:45:2c:91:05:fb:9c:87:db:d2:27:97:1d:
30:8b:b4:b4:12:fd:64:40:04:b7:81:14:9d:23:eb:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:DF:08:93:65:9E:A2:14:E7:80:60:63:27:D8:87:8B:2F:C1:DA
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/jN3fCJNlnqIU54BgYyfYh4svwdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.144.0/22
Signature Algorithm: sha256WithRSAEncryption
64:99:ef:9a:1d:9c:a1:c0:30:f5:ed:58:38:37:44:b4:fc:ab:
6b:f0:5d:3d:c4:a1:dc:88:d6:2e:5a:71:df:95:69:a7:a3:39:
d7:53:e6:7b:78:17:d3:e7:f3:d9:2c:22:e1:50:b5:ae:b9:7a:
d6:cf:85:e4:c1:f8:f9:af:64:0b:5c:96:82:c1:b0:5f:15:27:
43:4c:52:83:4f:81:be:e8:95:01:9f:6d:a9:a0:37:08:7a:dc:
f7:76:e9:8c:6f:b4:5f:c3:6b:d3:0e:c2:43:29:28:14:35:de:
30:7c:6b:c9:5a:b9:00:0a:67:1b:77:24:8c:b6:64:c4:69:c4:
d5:4d:17:50:fc:84:5c:25:3f:28:d4:15:7c:21:1e:6a:f4:a6:
f0:a6:a2:dc:70:a7:1a:f0:ce:f5:b6:60:8a:af:99:79:65:8f:
5b:f7:72:7e:30:20:a1:98:72:44:28:4f:d8:38:08:f0:8b:36:
bb:0f:13:de:2d:19:15:6d:1c:c3:d5:13:6d:14:97:a2:6e:01:
13:df:ae:22:d5:68:d8:95:26:ef:78:02:81:e0:1e:b8:ba:85:
36:e7:fe:e7:76:09:5e:e7:7f:48:d2:57:e4:96:60:a3:bc:48:
c7:8a:67:a8:59:2e:93:ea:8b:38:d8:cb:30:e8:95:3d:8d:c6:
71:ab:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org