Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/iIHwLvjUcsXUOKA4oLCiDSc4KqU.roa
File: iIHwLvjUcsXUOKA4oLCiDSc4KqU.roa (raw, json)
Hash identifier: smI0BoZZfVqGTVSX7NB8U+OA56fFrsMHUslmMcg/Yng=
Subject key identifier: 88:81:F0:2E:F8:D4:72:C5:D4:38:A0:38:A0:B0:A2:0D:27:38:2A:A5
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 01857170ADB1D78D3B482B41DEBC82AF71AC
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/iIHwLvjUcsXUOKA4oLCiDSc4KqU.roa
Signing time: Mon 02 Jan 2023 07:44:47 +0000
ROA not before: Mon 02 Jan 2023 07:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.209.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:ad:b1:d7:8d:3b:48:2b:41:de:bc:82:af:71:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Jan 2 07:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8881f02ef8d472c5d438a038a0b0a20d27382aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:60:27:ae:0d:d4:b0:e6:73:10:99:f0:0e:
9f:6e:3f:65:96:91:42:dc:3d:6e:44:de:05:dc:db:
ef:be:e3:94:b9:de:e7:5a:c8:62:1a:61:c1:e9:54:
03:64:77:7a:4d:0d:e9:06:83:9f:24:93:5a:b5:0f:
03:c6:34:8c:2b:4f:24:cb:94:5f:80:9a:99:d6:a1:
69:a7:e9:3f:e3:16:da:10:b8:40:62:ea:f7:44:d3:
8c:ea:ab:10:2e:45:3b:2d:4e:57:f7:1a:9f:f7:e8:
ab:7c:c0:ef:12:7c:2b:74:9f:56:b5:61:b9:65:da:
22:41:f5:2c:70:25:92:10:2e:d9:1b:16:9d:1c:91:
4d:f3:b2:44:ee:17:da:4d:38:e8:21:be:e3:90:27:
0d:10:cb:1b:af:03:94:30:44:8e:9a:36:cc:1e:bb:
c6:35:26:6d:16:2e:b2:8b:ac:69:86:1d:1f:a7:9a:
fe:64:37:64:93:34:28:88:0a:57:20:f1:19:11:e1:
f5:fe:b8:34:f0:15:eb:7b:02:ff:fb:0f:09:0b:e7:
9a:26:de:f1:2b:3f:d5:0d:3d:99:25:5d:36:cd:23:
5f:ed:07:b9:cb:d6:07:3e:7f:77:46:f9:70:3a:5f:
91:98:04:4a:df:90:d3:b6:1e:d8:30:4d:0d:87:03:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:F0:2E:F8:D4:72:C5:D4:38:A0:38:A0:B0:A2:0D:27:38:2A:A5
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/iIHwLvjUcsXUOKA4oLCiDSc4KqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.81.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d2:b3:17:df:cb:54:70:39:ff:5d:a3:a1:fa:f7:8a:9c:02:
a7:16:52:e3:83:d7:0b:78:74:99:26:75:9b:5d:1b:92:ac:a7:
a7:30:f3:c6:a1:e4:46:a1:af:b0:79:0a:5a:d2:fa:eb:e8:73:
36:3b:76:ae:65:f7:cd:ba:0c:38:31:36:95:c4:4b:de:88:20:
58:5f:f1:d5:81:e6:ba:32:ac:1f:b2:28:28:c7:34:aa:a6:d2:
9e:8c:8a:4e:da:1a:d5:62:d3:ab:7d:75:b9:9f:01:55:31:48:
ce:74:3e:59:6f:4a:01:71:63:01:b9:3b:6f:2e:59:d2:d1:76:
7f:98:58:bd:90:3d:79:4f:a0:76:31:6f:4c:9c:d3:16:57:36:
4a:61:4d:02:2b:e8:49:9c:02:d4:d5:72:59:7e:08:d9:9d:f5:
99:8b:e4:9f:dc:cb:9b:21:13:d5:bc:00:b2:85:2c:39:aa:82:
f1:ad:bf:20:fb:c4:9f:24:ee:6f:73:f1:8c:a0:b3:ec:19:cc:
43:4d:51:32:bd:f7:bf:54:45:4a:68:86:ce:e5:32:69:e1:9f:
10:be:f0:96:ca:19:fa:eb:05:30:ab:8e:c7:7b:54:cc:85:e9:
5e:91:0a:d2:a8:6f:47:d6:f0:09:64:f0:26:cf:ad:46:96:20:
3e:b1:79:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:51 2024 by rpki-client on console-ams.rpki-client.org