Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/3w01e-Lv0huJ5wcQdjEu-c16vk0.roa
File: 3w01e-Lv0huJ5wcQdjEu-c16vk0.roa (raw, json)
Hash identifier: usa3V6xZS8xwGFK8XWcSND4/P3LtSGNVREtklr/2xr8=
Subject key identifier: DF:0D:35:7B:E2:EF:D2:1B:89:E7:07:10:76:31:2E:F9:CD:7A:BE:4D
Certificate issuer: /CN=4db2ccfdd4a8ae8dda86105e4135179fe37aa50e
Certificate serial: 018571DE89ED4AFE2A1A46A8DB3449EBA920
Authority key identifier: 4D:B2:CC:FD:D4:A8:AE:8D:DA:86:10:5E:41:35:17:9F:E3:7A:A5:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbLM_dSoro3ahhBeQTUXn-N6pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/3w01e-Lv0huJ5wcQdjEu-c16vk0.roa
Signing time: Mon 02 Jan 2023 09:44:47 +0000
ROA not before: Mon 02 Jan 2023 09:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44621
IP address blocks: 91.224.62.0/23 maxlen: 23
91.202.97.0/24 maxlen: 24
91.202.96.0/24 maxlen: 24
91.202.98.0/24 maxlen: 24
91.202.99.0/24 maxlen: 24
91.206.130.0/24 maxlen: 24
91.206.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:89:ed:4a:fe:2a:1a:46:a8:db:34:49:eb:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db2ccfdd4a8ae8dda86105e4135179fe37aa50e
Validity
Not Before: Jan 2 09:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df0d357be2efd21b89e7071076312ef9cd7abe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:f2:c3:68:72:21:71:47:e6:56:f5:be:2b:
17:ed:d8:56:9d:47:29:1c:46:60:e6:82:ea:78:bf:
15:26:8a:b6:c3:a5:ed:2b:64:3d:88:27:b4:7e:2f:
c7:d9:17:4a:a9:f9:fc:45:17:23:1b:89:2a:cc:cf:
15:4a:2a:53:b4:9a:33:12:76:03:f9:f9:66:10:d1:
0d:63:49:95:8b:9b:0f:4a:fc:a6:f2:d3:be:b3:b2:
91:3d:df:2a:fb:46:ca:1e:44:ee:9a:ff:c0:4f:48:
84:ee:7b:1f:d7:4c:c6:e4:a4:2a:89:36:0d:65:4d:
66:7b:cd:6d:d6:ea:ef:61:87:e6:74:bd:ed:2b:6b:
32:1a:e6:ba:e4:d2:ec:3b:b2:21:eb:53:92:0f:f2:
83:dc:a7:4d:64:8a:56:3c:33:8d:6c:40:c0:58:5a:
2b:db:43:f1:72:ba:92:48:b0:f2:46:82:a9:02:83:
f8:95:22:41:e2:92:32:d7:18:d4:f9:8c:29:46:da:
13:7e:96:d6:d0:91:1d:d2:81:4d:f6:27:4c:04:86:
10:00:44:ac:57:ad:02:9a:ac:2c:b2:b9:03:27:38:
97:1f:ae:ab:74:b8:47:28:e8:68:c0:a3:7f:77:e2:
7d:6e:56:12:3d:59:a0:45:d6:3c:10:99:c6:4b:26:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0D:35:7B:E2:EF:D2:1B:89:E7:07:10:76:31:2E:F9:CD:7A:BE:4D
X509v3 Authority Key Identifier:
keyid:4D:B2:CC:FD:D4:A8:AE:8D:DA:86:10:5E:41:35:17:9F:E3:7A:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbLM_dSoro3ahhBeQTUXn-N6pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/3w01e-Lv0huJ5wcQdjEu-c16vk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/TbLM_dSoro3ahhBeQTUXn-N6pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.96.0/22
91.206.130.0/23
91.224.62.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:67:32:8d:03:8a:a9:13:8f:a1:43:ff:aa:61:27:4e:7b:24:
ad:64:07:67:cc:0c:52:e9:c6:2c:fc:b7:88:e8:6d:4a:4d:18:
4b:c5:19:30:e2:89:ea:c1:e1:60:ea:bd:06:29:9d:47:44:bc:
73:db:22:b2:5e:a7:c1:dc:35:80:97:8b:15:99:1d:c9:90:a1:
6f:fe:bc:80:cc:4e:15:ae:f3:4c:7f:ea:62:a3:ca:7c:2c:74:
7c:34:24:a5:f8:ac:b3:7e:25:04:5b:0e:0a:32:76:51:c8:5b:
4f:e1:7a:0a:86:99:69:7f:30:fe:4b:1f:56:fc:1e:da:19:42:
33:af:64:4a:3d:a6:f6:c5:2d:2e:29:ad:4b:9a:6e:85:3d:d0:
9e:c3:16:2b:26:da:07:b4:9f:f4:bd:25:c3:c5:b4:6b:f4:9d:
3d:b7:eb:2f:ed:35:db:f9:ef:0e:85:86:3a:1e:1f:9a:c7:15:
f0:6b:3b:4c:c2:24:47:fd:7c:8e:e6:8d:aa:3c:79:36:13:8d:
84:8c:3c:e9:a8:97:b9:b1:cc:d9:75:bd:d4:5d:25:71:cf:d2:
58:bd:a2:4e:96:05:2d:59:64:c8:a8:0f:91:37:ad:b2:cb:b7:
e2:32:e3:b6:cc:f9:39:81:8c:c2:9f:f5:e3:77:f3:ae:6a:c3:
1a:fe:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org