Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/1-gAbKGILRzNezn0DN_dyF1lo6IM.roa
File: 1-gAbKGILRzNezn0DN_dyF1lo6IM.roa (raw, json)
Hash identifier: i65Qyh/Q4rNtz0ZabjwEBoDnjULKlqJS3q3n3pGgxcE=
Subject key identifier: FA:00:1B:28:62:0B:47:33:5E:CE:7D:03:37:F7:72:17:59:68:E8:83
Certificate issuer: /CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Certificate serial: 0188B91F6874AC13C0E7294E421D439BEED4
Authority key identifier: 9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/1-gAbKGILRzNezn0DN_dyF1lo6IM.roa
Signing time: Wed 14 Jun 2023 08:57:03 +0000
ROA not before: Wed 14 Jun 2023 08:57:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52215
IP address blocks: 91.225.16.0/22 maxlen: 22
91.223.46.0/24 maxlen: 24
91.224.26.0/23 maxlen: 23
194.11.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:1f:68:74:ac:13:c0:e7:29:4e:42:1d:43:9b:ee:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fddaf213257d176df50aa6e77648a0cc72a5fa1
Validity
Not Before: Jun 14 08:57:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa001b28620b47335ece7d0337f772175968e883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:36:db:33:fa:00:92:dc:17:32:9f:eb:0b:
5e:37:a4:78:70:c2:34:99:27:4f:47:98:1e:ee:03:
19:50:b1:76:99:1c:50:b5:37:01:6f:ae:6b:49:a7:
ac:f1:1f:64:6a:85:47:c2:17:64:c7:a2:fe:11:31:
bb:cb:4e:56:20:04:43:68:c3:db:83:b8:e3:95:f5:
fe:fd:03:4d:2b:b2:79:08:85:84:dc:a2:74:b8:6d:
4e:ed:bc:9b:10:6c:41:05:39:c7:55:46:80:cb:12:
6a:f7:fb:a4:ab:51:bb:74:1f:73:36:6d:d4:0a:98:
09:d5:00:6b:98:b3:05:2d:2b:53:a3:f4:e8:bf:35:
71:2c:8d:34:dd:7e:52:98:82:0f:ed:d2:6d:c9:fe:
77:a5:30:7d:e7:6d:37:7a:73:a3:a8:c5:31:6c:d9:
54:06:0d:f5:ef:66:54:86:f3:3d:b4:bb:b0:4e:19:
6a:54:ad:cd:6d:14:b1:2d:ed:05:04:dd:12:e9:b0:
70:43:c4:bc:ee:8c:d6:28:5c:76:24:70:e8:ad:b4:
f2:f1:2b:e0:68:e7:27:e3:25:b9:ea:f1:d1:e1:f6:
e2:9a:26:0d:d3:14:80:f9:ef:74:96:b3:4a:80:57:
d3:54:3e:ec:9c:46:53:69:69:8a:5e:12:fe:b0:90:
b0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:1B:28:62:0B:47:33:5E:CE:7D:03:37:F7:72:17:59:68:E8:83
X509v3 Authority Key Identifier:
keyid:9F:DD:AF:21:32:57:D1:76:DF:50:AA:6E:77:64:8A:0C:C7:2A:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n92vITJX0XbfUKpud2SKDMcqX6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/1-gAbKGILRzNezn0DN_dyF1lo6IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/54a58b-7a32-46bc-85c0-30b764eb4900/1/n92vITJX0XbfUKpud2SKDMcqX6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.46.0/24
91.224.26.0/23
91.225.16.0/22
194.11.18.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a4:35:5f:0d:8d:ee:5b:a4:3d:7e:b4:c6:7e:ed:2c:49:f2:
ad:2e:3c:9f:22:48:5c:8d:f8:6d:b2:bd:8d:a5:3d:4d:28:ed:
84:12:f9:78:3e:bb:b5:dd:ed:6d:b0:31:48:d8:84:ab:09:26:
b5:06:9d:53:e4:cd:78:b7:28:1b:2e:ad:dd:7d:13:7f:5c:4e:
54:90:b0:5b:32:61:32:03:e2:aa:4a:4b:ae:10:e9:24:80:5b:
c9:15:87:5a:59:45:a9:b0:c9:ef:d0:c1:03:ea:48:d7:6f:2b:
99:57:4e:dc:1a:df:97:21:16:f9:3f:6d:85:39:e5:f8:61:c3:
04:81:66:aa:6b:34:a4:de:6d:e1:8c:fb:8f:4c:84:cb:3f:59:
af:7e:02:a7:5c:b9:75:eb:cd:da:d9:70:78:33:fa:39:30:19:
88:d6:5b:95:63:d2:d9:41:47:04:85:d5:25:1d:f1:4c:1b:92:
53:91:33:de:da:e8:90:67:9b:45:79:68:1a:9d:93:82:ef:b3:
6c:a6:15:97:4c:63:92:5a:9a:f4:67:93:57:aa:56:c3:fa:71:
10:a6:e5:4e:84:dd:58:35:25:66:d6:7c:0a:a8:c4:47:9e:21:
23:c9:75:d5:04:ea:ea:c9:ba:63:c1:47:a6:57:db:09:2e:e2:
2c:84:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 14:58:04 2023 by rpki-client on console-fra.rpki-client.org