Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/KlVluK0NG5YR97g_6lxjk05g_WY.roa
File: KlVluK0NG5YR97g_6lxjk05g_WY.roa (raw, json)
Hash identifier: 6fIBuQfviS+llNVQlB0cyN8rYYkI7Wk7idIZFm/iGdM=
Subject key identifier: 2A:55:65:B8:AD:0D:1B:96:11:F7:B8:3F:EA:5C:63:93:4E:60:FD:66
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 018570CBEB86F80AA348AE4C22B8061AA38A
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/KlVluK0NG5YR97g_6lxjk05g_WY.roa
Signing time: Mon 02 Jan 2023 04:44:50 +0000
ROA not before: Mon 02 Jan 2023 04:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206541
IP address blocks: 91.90.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:eb:86:f8:0a:a3:48:ae:4c:22:b8:06:1a:a3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 2 04:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a5565b8ad0d1b9611f7b83fea5c63934e60fd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:3c:99:af:24:2e:a2:dd:3d:a5:b4:33:1b:
96:d3:92:f1:13:09:74:6b:d9:9e:6a:fd:30:43:5b:
d0:bf:3d:d4:c5:c5:bb:74:56:59:08:27:0f:46:8d:
03:4c:d9:18:1b:82:91:16:48:e7:cc:8a:ba:ed:c3:
86:a7:3e:58:40:d9:51:8e:71:11:39:d0:45:99:de:
38:2b:df:d1:c9:cc:71:7c:d8:49:99:92:f7:1f:78:
2f:ec:be:b2:50:01:73:5a:6f:c9:fe:c1:29:cb:cc:
dd:a5:c9:ff:23:85:9c:4e:64:61:7b:68:39:d3:7d:
9f:0d:ba:20:f1:f5:04:df:13:2b:8f:6f:62:eb:d9:
33:2a:2f:53:bb:7a:99:f8:50:5e:b6:b7:ad:d5:fc:
6a:d6:bd:21:93:e9:67:84:13:55:f9:76:8b:ba:31:
ae:73:73:21:f9:34:18:6f:de:cd:0e:03:e9:8a:3d:
29:43:c6:e3:4b:33:aa:68:bc:ae:2f:5f:16:13:88:
7e:91:ba:17:4b:f6:40:23:b6:44:0d:e1:12:73:c9:
5f:25:ff:df:5b:1a:7e:d7:a1:08:9d:26:dd:e6:c5:
80:b4:cb:fa:bc:1e:c4:8e:8c:95:10:2a:e8:b9:27:
8c:cb:5b:fd:21:25:27:14:98:6c:f5:9b:15:6a:90:
01:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:55:65:B8:AD:0D:1B:96:11:F7:B8:3F:EA:5C:63:93:4E:60:FD:66
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/KlVluK0NG5YR97g_6lxjk05g_WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.233.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a4:af:af:fa:24:42:da:2c:a0:5b:2e:82:82:f9:52:8e:fe:
df:b7:b1:21:7c:39:3f:84:df:2c:69:f3:e3:36:f2:ea:22:33:
84:39:29:45:9e:20:95:f7:20:ab:6f:c8:18:e0:f7:2f:bf:22:
88:32:a8:95:d9:d8:b9:ca:79:73:27:9b:79:f2:0b:f4:f3:7b:
4e:a5:10:1c:2f:f9:31:80:4d:24:2e:19:f4:68:65:74:09:ed:
ac:2e:9e:1b:c9:df:a8:60:11:77:e6:27:3a:54:4f:c5:ff:2d:
7f:b0:71:68:c5:c5:b4:a2:a9:3c:3a:4c:43:73:a7:c8:92:67:
92:16:ab:5d:7d:10:63:81:3f:0c:a9:26:21:12:71:99:68:1e:
08:0a:43:4f:5e:1f:35:12:30:36:56:f1:a3:13:7b:07:cb:10:
ea:60:b3:fc:53:fb:30:aa:fe:de:49:09:eb:70:9e:21:34:0a:
a6:50:7f:5e:45:6f:67:2c:22:75:bd:65:ba:70:30:90:ef:0a:
9e:dc:73:65:e8:f2:e9:82:b7:6f:a3:1e:b3:8c:ce:25:ce:e6:
18:c8:75:bf:61:8f:94:0f:2c:b0:25:8a:4d:0b:c4:35:bb:8b:
28:0f:f5:57:9c:f9:83:cc:1a:0a:d7:be:9b:47:b4:93:7b:ff:
d9:e5:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:06 2024 by rpki-client on console-ams.rpki-client.org