Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/dxzgvXmv2q4YgwL1UARFzsSMC_A.roa
File: dxzgvXmv2q4YgwL1UARFzsSMC_A.roa (raw, json)
Hash identifier: 4yA34Cyo9lBuzCQHsP3eyFn+lsE36Zj0J54UI8V3bd8=
Subject key identifier: 77:1C:E0:BD:79:AF:DA:AE:18:83:02:F5:50:04:45:CE:C4:8C:0B:F0
Certificate issuer: /CN=787f62191f191314bd6bddb096b4cd4ddb33f45c
Certificate serial: 018572F125D70C13AD586AC0F011E81BD0B2
Authority key identifier: 78:7F:62:19:1F:19:13:14:BD:6B:DD:B0:96:B4:CD:4D:DB:33:F4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH9iGR8ZExS9a92wlrTNTdsz9Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/dxzgvXmv2q4YgwL1UARFzsSMC_A.roa
Signing time: Mon 02 Jan 2023 14:44:44 +0000
ROA not before: Mon 02 Jan 2023 14:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197042
IP address blocks: 91.216.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:25:d7:0c:13:ad:58:6a:c0:f0:11:e8:1b:d0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787f62191f191314bd6bddb096b4cd4ddb33f45c
Validity
Not Before: Jan 2 14:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=771ce0bd79afdaae188302f5500445cec48c0bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:fd:9c:ac:9e:5b:01:ed:25:35:89:ad:b0:
fc:89:ca:4e:ed:f6:11:2c:fa:70:bc:61:15:8b:45:
73:86:87:9c:54:52:26:83:64:b7:a6:8f:76:71:66:
d0:18:7c:5b:06:51:a5:cf:9f:70:b7:10:7c:20:0d:
7e:87:3c:6d:1f:87:94:ad:f5:9c:5c:5b:4c:d5:88:
5e:73:6c:d8:46:2e:36:25:28:87:90:4a:67:c8:86:
1d:29:ac:3e:d6:df:a8:02:78:0b:4a:a9:69:a5:32:
a6:5f:13:32:8f:d9:53:4e:55:28:4b:50:1f:20:85:
ba:d5:7d:81:7f:6a:a9:dd:66:77:fc:ff:ee:4a:a8:
04:55:09:da:3f:08:60:0a:21:c8:9a:2c:8a:51:30:
14:93:e5:97:93:c6:8d:1d:08:bb:3c:30:d0:3c:9e:
d0:ce:03:1a:2d:c6:c2:bf:a2:ac:f9:22:33:06:a6:
67:73:e5:54:65:6c:1d:6d:dd:e5:c0:95:c5:5f:48:
ec:fd:30:d3:7d:fa:14:71:e5:52:7f:b3:3f:68:9e:
d2:10:3f:10:09:e4:fd:b1:d7:6f:27:bf:c6:33:5c:
d9:d4:22:61:6c:0e:ce:e9:5e:19:a6:7a:97:92:b3:
7e:f9:30:3d:7d:2f:21:13:4f:f6:07:db:34:55:71:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:E0:BD:79:AF:DA:AE:18:83:02:F5:50:04:45:CE:C4:8C:0B:F0
X509v3 Authority Key Identifier:
keyid:78:7F:62:19:1F:19:13:14:BD:6B:DD:B0:96:B4:CD:4D:DB:33:F4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH9iGR8ZExS9a92wlrTNTdsz9Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/dxzgvXmv2q4YgwL1UARFzsSMC_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a2f74e-e909-4971-9341-cbc2566ae74d/1/eH9iGR8ZExS9a92wlrTNTdsz9Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.148.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a1:3e:27:5b:d3:48:23:87:75:95:4d:aa:9a:7b:df:19:a6:
ae:26:a9:05:35:65:7c:95:61:87:d5:d8:0f:56:20:20:59:2f:
f9:81:cc:c7:31:60:8a:23:b7:30:6d:f0:07:cb:46:77:d9:9f:
f7:9a:2d:2a:3a:88:a1:1e:e4:f3:9a:bc:07:cd:bd:32:7e:1f:
33:a6:9b:00:db:c4:c4:0e:db:92:77:03:f5:97:1d:93:84:6f:
c7:bf:07:44:11:01:04:f7:d5:a9:9b:a1:13:d5:c4:c6:e6:7e:
1c:5c:fa:e6:1e:3f:3c:29:48:80:df:69:3d:55:04:1e:d4:6d:
26:97:98:06:96:d7:03:7a:cf:e8:d9:ef:2c:08:75:82:b9:e2:
ca:3b:e1:57:10:20:01:d1:58:2c:3b:0e:49:d1:a1:bf:cb:3d:
ae:ca:2c:2e:2b:16:3a:f7:2e:5c:ab:db:f7:84:7c:d5:cf:50:
81:c0:2c:c6:26:eb:fe:b9:46:ea:ad:22:3e:08:79:63:84:f7:
24:04:84:bc:85:af:70:77:ab:20:cb:8b:37:49:26:d8:55:90:
c3:f5:95:4f:2d:e2:9c:31:a2:fd:9a:7f:75:8b:a1:27:81:5e:
ac:f9:c2:51:88:8a:30:0e:ab:92:d6:e6:df:ed:44:ec:28:ee:
d0:fe:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:28 2024 by rpki-client on console-ams.rpki-client.org