Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/6Avy1ii3C7Ri8gAnRkXAewUvO6I.roa
File: 6Avy1ii3C7Ri8gAnRkXAewUvO6I.roa (raw, json)
Hash identifier: /XlSrJForATC7ywklB7A2FKVZqILJnd0q4PoXlkLFCs=
Subject key identifier: E8:0B:F2:D6:28:B7:0B:B4:62:F2:00:27:46:45:C0:7B:05:2F:3B:A2
Certificate issuer: /CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Certificate serial: 018CC8011A1CD93FD421AEC23B4B1F4B5158
Authority key identifier: 2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/6Avy1ii3C7Ri8gAnRkXAewUvO6I.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60930
IP address blocks: 91.147.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Feb 2024 04:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1a:1c:d9:3f:d4:21:ae:c2:3b:4b:1f:4b:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d35f65df2cb3ea16e51152fac75947fa9c30bf7
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e80bf2d628b70bb462f200274645c07b052f3ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:32:0c:b2:00:08:ea:81:2d:06:bf:92:0b:
fc:f0:c0:3b:8f:0d:e2:22:74:19:71:6d:9e:1b:f3:
ce:5d:61:88:07:ad:22:62:c9:88:75:d1:0b:da:82:
92:2b:75:ea:3c:32:65:62:9f:d1:db:c8:2d:9b:86:
63:d5:24:0d:ff:a4:37:f2:05:9d:52:ac:ce:5d:79:
0b:3a:51:ff:f4:67:f0:c2:b4:68:7e:0d:fb:1f:5b:
63:8b:0c:20:3b:f9:5d:ee:59:37:75:5c:e5:01:3f:
14:45:62:b3:74:1b:b8:26:17:be:ac:1e:e1:f0:1f:
9a:aa:75:3b:8d:ae:3c:c0:6e:c8:27:4f:ba:0d:17:
f8:17:8f:4c:3c:54:fe:e9:99:d5:a8:70:4d:d6:3f:
7a:73:95:aa:a6:c5:dd:ce:a6:f0:fd:22:0e:4a:20:
cf:3f:0f:37:32:f8:9a:33:d0:e7:55:0b:b8:a8:60:
53:f3:18:a0:66:fe:7a:4c:e9:0c:42:b5:b0:0d:46:
8a:ff:11:0d:91:6b:36:11:b5:f6:96:6e:3e:3b:40:
77:e6:2e:99:6e:88:b5:64:3a:42:28:24:36:7e:13:
66:d0:6a:75:ac:71:ed:84:66:d3:2d:ad:05:39:9d:
7b:1f:bf:8c:59:38:2f:d0:dc:bd:89:df:43:0d:2b:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0B:F2:D6:28:B7:0B:B4:62:F2:00:27:46:45:C0:7B:05:2F:3B:A2
X509v3 Authority Key Identifier:
keyid:2D:35:F6:5D:F2:CB:3E:A1:6E:51:15:2F:AC:75:94:7F:A9:C3:0B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTX2XfLLPqFuURUvrHWUf6nDC_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/6Avy1ii3C7Ri8gAnRkXAewUvO6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/fcc8b3-fdd1-4abd-aca6-e7e25cb98e63/1/LTX2XfLLPqFuURUvrHWUf6nDC_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.84.0/22
Signature Algorithm: sha256WithRSAEncryption
89:fb:7c:a6:47:bf:b4:df:e0:7c:d7:11:f7:a9:ad:dd:69:60:
e6:54:1d:ab:2b:9a:ca:ce:7f:d0:96:d7:bd:21:8c:ea:72:3a:
99:cf:27:75:6f:2a:f8:93:6f:5f:11:71:aa:22:8e:9b:76:28:
00:dc:8a:96:d8:be:d3:f5:6d:f0:79:77:0b:10:3f:8d:9c:21:
28:22:1d:fb:ae:c7:e6:a5:6e:25:30:9f:96:18:23:49:b6:4a:
ba:7a:21:c1:24:29:6b:dc:5f:1b:d9:8e:5b:7d:3e:0b:dd:49:
ed:76:ed:1c:45:4b:cc:f1:c2:d0:aa:84:c0:97:09:48:e2:eb:
48:22:e2:17:e1:d1:a3:a3:05:2c:29:f9:46:32:66:09:2c:6f:
e6:6e:14:05:1c:de:a6:6d:84:f9:d5:ee:31:bb:a0:b6:8a:69:
0a:04:f0:d8:af:73:20:2e:9c:61:2d:fc:47:91:d0:81:ea:82:
1b:d3:4d:af:8d:a4:63:dc:b1:68:69:49:23:35:b4:8b:d5:63:
c0:d5:2b:13:cb:fe:c9:b0:c6:32:22:5f:23:fb:d6:90:90:54:
41:d1:49:c7:d1:33:73:69:94:5b:7b:fd:d4:36:e2:ce:21:d0:
1e:78:50:9e:9f:9e:e1:5c:12:3a:98:92:65:2a:7f:d0:e2:0c:
bf:91:88:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:54 2024 by rpki-client on console-fra.rpki-client.org