Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5mEyS1BDxBNv2GN6Yo8esLaFT_A.roa
File: 5mEyS1BDxBNv2GN6Yo8esLaFT_A.roa (raw, json)
Hash identifier: ZDTgZCtkfmVkeotn0HqMfsK8vQxQmK0Ze+26Mwfi19M=
Subject key identifier: E6:61:32:4B:50:43:C4:13:6F:D8:63:7A:62:8F:1E:B0:B6:85:4F:F0
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7A8D23032E7E8A313CB224E1A46AE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5mEyS1BDxBNv2GN6Yo8esLaFT_A.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62281
IP address blocks: 91.242.86.0/23 maxlen: 24
91.242.88.0/21 maxlen: 24
91.242.96.0/24 maxlen: 24
91.242.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:a8:d2:30:32:e7:e8:a3:13:cb:22:4e:1a:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e661324b5043c4136fd8637a628f1eb0b6854ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:37:48:6d:89:8a:58:f1:c4:c3:9a:bd:d4:
d5:eb:82:99:b8:5e:51:df:81:2a:1d:dc:e3:1d:c6:
9d:b7:2f:63:c2:af:00:7b:39:03:a7:1f:c6:aa:b6:
ef:5b:55:20:77:2f:6a:b2:f5:47:e3:2b:5c:e0:f1:
23:8f:02:cb:12:94:eb:e4:49:2d:84:59:b7:5b:cb:
cb:67:98:4e:ff:a6:c7:9a:b8:4e:86:96:4f:0e:8a:
91:4f:11:33:a7:c4:38:aa:6a:92:3f:64:96:cb:80:
3e:0a:85:dc:09:2e:ee:61:c6:fa:c8:54:52:ee:25:
27:02:7a:5c:e7:7e:38:24:83:cb:84:3f:08:ff:f5:
89:cf:f0:b8:f5:85:bf:a7:cd:af:16:52:76:99:4d:
ac:18:23:6d:d0:5e:ff:05:a7:0b:6f:d9:e5:cd:e5:
58:37:4b:9b:79:9c:d4:64:4c:cc:a1:ff:07:80:22:
84:67:6e:02:32:df:7a:03:ea:cc:d9:02:42:cc:9c:
c4:e1:96:10:11:26:74:25:a6:10:c5:6e:64:0b:94:
c9:64:d9:39:5a:37:34:1b:3b:9c:73:9b:ea:78:e0:
a9:07:8e:32:f7:c0:af:e4:a0:27:29:d5:34:ba:fe:
cd:d8:67:bd:01:c8:12:47:6f:ad:f3:20:e7:4e:5d:
7d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:61:32:4B:50:43:C4:13:6F:D8:63:7A:62:8F:1E:B0:B6:85:4F:F0
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5mEyS1BDxBNv2GN6Yo8esLaFT_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.86.0-91.242.96.255
91.242.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4b:f6:7e:9a:6a:9e:be:f9:70:e4:62:3d:26:b0:49:20:22:
6b:4b:aa:50:03:66:e6:f0:56:82:a4:30:9f:4d:f0:31:51:85:
e5:65:d1:9e:17:ad:78:1f:90:50:c7:d0:c9:8f:a1:76:09:03:
62:24:87:60:c5:0f:4d:46:ab:94:31:93:d3:3d:0b:6d:64:d1:
dc:27:4b:14:ed:aa:9a:94:e7:fa:91:44:81:d9:80:f3:36:4b:
11:8e:fc:f7:9c:d5:6a:12:f4:b2:91:d4:de:86:9a:b9:84:af:
c1:5f:84:76:13:c2:7b:75:fb:35:d1:9b:bc:3d:31:cc:20:58:
1f:ad:b5:74:ac:71:be:e0:a2:2d:43:c0:fa:bc:b3:e0:72:55:
02:2f:f4:3b:b7:8f:cd:12:2a:72:53:f7:75:68:4d:1b:ea:fa:
56:86:e3:2e:b4:59:9a:69:29:2a:09:69:d3:29:44:97:b1:c7:
8e:ba:04:4f:ca:84:94:4a:bc:34:8d:20:c1:8e:0c:8e:1b:b5:
c7:c8:f8:0c:7d:ef:80:b1:8c:38:ce:d3:4e:91:0c:bd:00:cf:
78:5c:a8:30:3f:b4:e5:ca:ff:a4:97:55:80:85:ca:a3:29:af:
0e:12:37:12:04:da:0c:8e:39:68:47:73:e2:d2:96:26:6e:02:
7a:d1:5d:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org