Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/75qz7jgKLzRTjZvMlT9ZBsZoQEA.roa
File: 75qz7jgKLzRTjZvMlT9ZBsZoQEA.roa (raw, json)
Hash identifier: GkfNPFVX/EGWsXGCYbYi/7u/k+QbGW+OD18ym3hXLX4=
Subject key identifier: EF:9A:B3:EE:38:0A:2F:34:53:8D:9B:CC:95:3F:59:06:C6:68:40:40
Certificate issuer: /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial: 018779B0F454F86E724B3B1E33548C0BA90C
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/75qz7jgKLzRTjZvMlT9ZBsZoQEA.roa
Signing time: Thu 13 Apr 2023 08:17:32 +0000
ROA not before: Thu 13 Apr 2023 08:17:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35273
IP address blocks: 91.235.196.0/22 maxlen: 22
193.142.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:b0:f4:54:f8:6e:72:4b:3b:1e:33:54:8c:0b:a9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Validity
Not Before: Apr 13 08:17:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef9ab3ee380a2f34538d9bcc953f5906c6684040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:9d:6c:77:32:7b:03:36:fa:f1:3f:c8:e4:
ac:78:64:d6:fd:ec:79:ac:af:ec:19:90:d8:f9:68:
64:b3:26:d4:da:8f:35:97:5b:50:3c:b1:4c:90:e2:
46:f8:e3:9b:e1:cf:05:f1:21:13:bc:d1:68:5b:79:
2d:39:d7:9b:af:01:e8:e2:a8:15:c9:dc:74:37:3b:
bb:39:1d:76:d3:fc:09:09:4d:30:16:93:58:f2:f1:
bc:81:14:13:e1:07:b2:92:8d:73:75:a6:17:c1:af:
86:68:d2:67:69:ef:78:a9:a9:04:56:10:75:be:7b:
d3:bc:cd:06:98:75:c2:e9:0d:51:78:18:26:da:6d:
19:2b:11:42:b1:87:9d:9b:09:3b:fe:c3:cb:80:59:
d5:7e:fa:10:87:c6:4e:e0:8c:51:0b:75:94:78:49:
b9:18:b0:62:89:9f:04:24:bd:89:32:ca:ac:27:35:
9b:74:90:d2:f6:be:a6:23:73:88:ae:49:bd:e7:5d:
f5:b8:85:b7:e3:73:b0:f4:fa:cf:08:26:28:c5:2c:
b6:ed:e5:9d:1e:54:01:a9:9c:75:46:10:96:28:ce:
47:3e:0b:ae:43:5a:8b:74:c2:63:27:b7:4e:20:1a:
c7:67:96:44:01:31:83:a7:86:63:4d:33:37:c8:b7:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9A:B3:EE:38:0A:2F:34:53:8D:9B:CC:95:3F:59:06:C6:68:40:40
X509v3 Authority Key Identifier:
keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/75qz7jgKLzRTjZvMlT9ZBsZoQEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.196.0/22
193.142.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:30:1d:11:52:c4:9a:b5:09:eb:a8:7a:db:f9:bd:84:ea:23:
78:f0:7e:c5:94:1e:b4:18:9a:6d:55:99:ba:58:5b:a7:8a:07:
fa:73:d0:33:63:ba:62:ac:e7:2f:76:4e:04:09:37:7d:cb:44:
ba:f3:b3:7f:a1:ca:50:39:72:bf:3c:69:02:b6:9a:6d:9f:b5:
c7:af:1f:a5:c7:df:e6:ff:a0:d6:cb:88:7a:78:d6:db:62:ea:
7c:40:11:be:8c:97:bd:e0:0e:95:95:ef:99:6f:07:b7:d3:f3:
81:c4:72:71:bb:75:97:b4:7b:23:20:f9:71:21:56:5b:c8:72:
34:f9:a5:f1:b9:89:ef:fe:6e:b7:8a:20:a9:1d:88:db:ed:cd:
3d:ca:ca:c5:2c:88:08:4d:c9:a7:bb:42:dd:00:c2:be:83:af:
e6:8b:e0:fb:ca:e5:57:56:49:77:99:e6:76:cf:cb:f2:1c:c2:
52:c2:85:56:58:56:d4:59:1d:8f:5a:d5:91:81:77:30:cc:2f:
b6:fd:0c:f0:14:ae:75:b7:d3:94:d0:18:cb:a8:6d:ea:24:b5:
be:33:9a:51:7f:ee:ed:be:ed:0a:7e:1a:0e:b1:0c:d0:8a:c5:
8b:74:d9:47:43:7b:81:0e:0f:ed:fb:84:c6:50:e1:d6:2e:6b:
8a:68:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:47 2024 by rpki-client on console-ams.rpki-client.org