Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9REdd96Oz6Uwkd2Rglic2erAuZg.roa
File: 9REdd96Oz6Uwkd2Rglic2erAuZg.roa (raw, json)
Hash identifier: UUnIK3tbbkTy/Fzi/gmW1W5yFNmRGfAJXlDZBGQwMqA=
Subject key identifier: F5:11:1D:77:DE:8E:CF:A5:30:91:DD:91:82:58:9C:D9:EA:C0:B9:98
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0186989E758B3CD0D7914333C7FFEC600FDF
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9REdd96Oz6Uwkd2Rglic2erAuZg.roa
Signing time: Tue 28 Feb 2023 15:22:46 +0000
ROA not before: Tue 28 Feb 2023 15:22:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 185.47.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:9e:75:8b:3c:d0:d7:91:43:33:c7:ff:ec:60:0f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 28 15:22:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5111d77de8ecfa53091dd9182589cd9eac0b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:fc:ed:6c:0a:d2:78:66:9e:e4:11:97:34:
c5:3e:2b:d0:c5:3b:e2:de:b8:6c:4e:9e:42:81:0f:
ce:09:e4:61:a3:88:1e:77:3e:7b:47:e9:eb:9b:0b:
ac:81:5b:d0:f8:97:d9:d7:9c:08:76:22:11:c1:c7:
f1:de:6a:e8:d8:f7:6a:61:f7:b1:e9:f4:03:ed:fc:
83:f2:82:32:c5:80:e5:5f:c3:ad:49:c3:30:b1:17:
f1:66:07:d0:86:fe:98:c3:ed:fa:68:e9:4e:ad:d7:
ad:aa:97:f7:06:f3:53:dd:60:28:7a:29:83:5b:ef:
47:93:36:a9:8b:b6:88:40:cd:05:cf:30:6e:29:26:
b9:86:69:b9:5c:d6:0b:dc:aa:71:5f:07:a1:31:07:
af:f7:26:95:66:42:f1:c2:dd:c0:07:8b:1e:a0:b2:
fc:08:9b:67:56:27:ae:7e:9e:9b:93:aa:3d:e7:ff:
a7:2d:65:7c:0e:5f:65:84:f1:8d:32:13:ec:f9:d2:
4f:db:97:5e:b7:2f:1d:e3:29:24:1a:22:64:01:9c:
49:95:6c:94:ee:49:6d:ac:59:2a:0d:b0:11:4a:82:
c1:93:f0:e9:6a:75:83:dd:84:6d:3c:92:e3:a0:96:
96:6a:34:8b:bd:2b:da:e6:d7:65:67:4f:21:3c:ea:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:1D:77:DE:8E:CF:A5:30:91:DD:91:82:58:9C:D9:EA:C0:B9:98
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/9REdd96Oz6Uwkd2Rglic2erAuZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.91.0/24
Signature Algorithm: sha256WithRSAEncryption
82:25:af:25:b1:13:17:dd:8e:64:b7:ff:91:34:83:f5:b3:20:
8a:c0:df:91:b7:a7:52:c7:dd:73:dd:43:8a:f9:ce:eb:b7:ae:
dc:b4:9d:d7:ee:3d:6a:9a:7c:38:a2:ba:40:07:96:e6:3a:06:
03:28:79:37:ac:64:32:5a:a1:f2:51:31:7d:bf:a0:40:26:a2:
20:4f:b0:fe:fa:48:e2:64:32:a4:13:8b:d8:06:9f:9e:d5:b1:
7b:45:15:74:2a:df:29:77:1a:35:f4:02:f8:ca:73:f3:55:c0:
be:a9:8b:7b:06:e9:1f:8a:4b:32:dd:4b:dc:86:28:63:ce:f9:
d6:bb:bb:cd:b6:f7:d9:7b:90:5e:f6:5b:13:3c:f5:a7:1d:a1:
20:5f:c4:af:4a:8a:94:8b:86:a5:42:d0:72:6a:ed:05:19:eb:
7b:0b:c2:2b:13:a9:ef:8f:af:cb:01:5b:0d:f0:62:33:bc:80:
fc:d2:0a:a5:29:60:5a:cf:8f:82:57:76:d6:0d:ea:8f:75:b1:
b4:0f:9f:ff:6d:a9:93:bb:d2:56:28:f6:29:c1:3f:a6:b3:59:
ad:69:54:0d:95:c0:40:82:ea:4c:d2:fd:d0:31:8b:2c:c5:db:
41:7f:4e:29:c0:2a:35:ee:a0:6f:26:98:78:36:96:c0:84:93:
63:06:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org