Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/0PXYKJfJgydspW9lwKiAq6xGdCM.roa
File: 0PXYKJfJgydspW9lwKiAq6xGdCM.roa (raw, json)
Hash identifier: TbB9J5BeVbm0JZnu7/ThyzvYWAaoox420rlB4ccS7x0=
Subject key identifier: D0:F5:D8:28:97:C9:83:27:6C:A5:6F:65:C0:A8:80:AB:AC:46:74:23
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 018B2227CDB461344A70D42CA606BF4E594E
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/0PXYKJfJgydspW9lwKiAq6xGdCM.roa
Signing time: Thu 12 Oct 2023 04:31:55 +0000
ROA not before: Thu 12 Oct 2023 04:31:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 91.193.58.0/23 maxlen: 23
91.192.106.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:27:cd:b4:61:34:4a:70:d4:2c:a6:06:bf:4e:59:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Oct 12 04:31:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0f5d82897c983276ca56f65c0a880abac467423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:3f:ee:8e:2a:5e:7c:39:83:c8:1b:ed:37:
44:8e:87:f0:ef:66:72:41:0f:ed:27:81:4d:41:b5:
49:bf:9c:61:52:e3:e0:2f:8c:ce:39:52:33:59:83:
bd:0b:b0:83:e8:0f:e2:ef:62:de:10:1e:97:f2:91:
e2:df:e6:df:42:ce:19:58:58:71:31:dc:17:02:24:
45:3f:de:e4:99:8d:32:29:a2:eb:96:46:e7:20:7c:
a8:26:b8:6a:3a:e8:35:08:c9:a6:3d:b7:ef:84:e2:
6d:59:b5:be:24:55:95:56:63:70:a5:bf:05:91:55:
62:c8:ee:15:f2:98:76:f1:2c:b9:cd:4e:bc:b0:0e:
c9:0c:23:6c:37:13:d5:13:c2:38:52:69:69:0f:ca:
f2:ec:98:16:eb:e7:d5:26:84:1a:af:4e:cb:cc:9b:
42:97:a4:f1:7f:0c:73:98:f3:db:b5:47:4b:d2:72:
de:83:d6:eb:3b:0a:bd:63:26:ce:ed:90:38:29:79:
db:c9:9b:e5:1e:c5:be:02:37:9c:00:0b:14:31:f5:
8c:34:88:ca:34:01:63:0d:03:e2:54:ea:a5:f5:5c:
bb:90:93:b4:ad:54:dd:34:fa:af:27:53:11:dc:8b:
77:0d:16:17:4b:6c:d2:e9:fe:27:8e:6e:88:a9:fe:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:D8:28:97:C9:83:27:6C:A5:6F:65:C0:A8:80:AB:AC:46:74:23
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/0PXYKJfJgydspW9lwKiAq6xGdCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:31:b9:6f:44:81:47:67:3f:05:60:fd:7b:9e:7b:ac:c7:33:
b5:90:49:02:18:08:21:70:4d:b5:d2:a4:67:65:89:52:85:ab:
3e:e7:eb:ea:b3:f6:42:a0:14:a6:7d:bf:af:71:89:db:2f:73:
ed:55:43:fa:e8:74:a7:48:e5:fc:8a:29:11:a3:7b:d1:fb:e1:
b7:5f:58:48:20:6c:25:79:68:cb:a1:06:fc:01:aa:32:06:6a:
32:94:fe:3d:2e:f8:8d:22:3f:5f:3e:0e:a4:7e:a7:e9:38:bc:
e8:84:d2:c3:d0:a3:26:37:68:0b:29:98:40:ff:f0:b2:76:d3:
bb:aa:47:cf:21:3d:95:4a:88:4e:67:87:bf:63:2c:da:8f:ec:
bd:57:12:99:04:3b:51:76:50:37:e1:c1:9c:36:5d:e2:67:51:
57:ad:0c:36:ca:17:0d:38:ea:fb:82:21:82:47:71:69:e5:03:
cb:fb:5b:f7:76:4d:b0:46:9d:bb:d1:15:06:7c:75:9f:32:0d:
ad:b6:8c:80:c6:5f:5e:54:4c:57:73:4c:31:7c:c8:70:45:8f:
17:be:d0:48:b5:fa:7b:86:53:5c:83:12:79:d7:6e:c1:af:04:
9c:ac:0d:e8:a1:58:f8:40:8c:cd:b2:c4:c0:b6:e4:24:10:d8:
6e:73:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:52 2024 by rpki-client on console-fra.rpki-client.org