Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/Og8xn7IziTIWsY3iB-GybJIGaFQ.roa
File: Og8xn7IziTIWsY3iB-GybJIGaFQ.roa (raw, json)
Hash identifier: oQ8JA8GWH4p9hf+mXeKNi/S7oirSjGH6aj+TK96ObSw=
Subject key identifier: 3A:0F:31:9F:B2:33:89:32:16:B1:8D:E2:07:E1:B2:6C:92:06:68:54
Certificate issuer: /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial: 018CC56E328081EE2D0B3832FB10C5548952
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/Og8xn7IziTIWsY3iB-GybJIGaFQ.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57089
IP address blocks: 91.230.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:32:80:81:ee:2d:0b:38:32:fb:10:c5:54:89:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a0f319fb233893216b18de207e1b26c92066854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:2c:dc:38:4b:59:2b:4a:2e:b9:c3:50:a3:
1f:4e:40:0e:0b:c8:ba:00:ab:06:4a:3c:7d:f4:ca:
db:e2:15:79:c7:e4:97:0a:c2:50:f0:20:85:2e:74:
2d:c6:3d:2c:80:13:af:e8:53:b7:ac:8e:b5:9f:de:
66:d8:2f:9b:27:76:4d:dc:1c:cc:43:5b:eb:31:1a:
63:21:cb:67:8d:7b:2b:de:cd:a5:63:b4:d2:10:fc:
36:da:04:cd:d7:82:a3:9e:ef:7c:73:b7:4d:b5:f7:
a2:c9:b7:85:12:55:a0:b0:ca:80:8d:a3:9c:ff:c4:
9a:a3:64:ea:04:2f:c8:06:7a:82:95:47:80:81:52:
d8:03:3c:ac:1f:36:14:0a:35:26:f1:ec:3b:1f:8c:
34:19:1c:7a:ef:81:70:7e:a0:22:43:1a:a5:3d:98:
70:c9:34:6b:10:f2:68:7e:ad:a4:b7:27:c7:20:a0:
3b:ad:04:84:88:e0:ab:5b:30:49:a9:35:4b:af:e4:
7f:86:85:d5:86:89:ef:e7:1a:ef:b5:57:2b:26:cd:
bd:22:b5:e4:63:5d:f7:aa:e9:d2:7e:bf:ca:56:57:
a8:7a:74:80:35:e7:64:f3:3f:b7:bb:55:aa:a9:7b:
63:1b:ea:ea:6f:49:cf:c8:8d:72:07:10:d2:ad:43:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0F:31:9F:B2:33:89:32:16:B1:8D:E2:07:E1:B2:6C:92:06:68:54
X509v3 Authority Key Identifier:
keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/Og8xn7IziTIWsY3iB-GybJIGaFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.160.0/23
Signature Algorithm: sha256WithRSAEncryption
08:fb:12:09:9c:71:b1:7d:93:45:bd:79:f3:c9:91:7b:72:33:
cc:0b:e6:4b:f1:80:95:91:07:4c:32:55:f1:08:e6:99:b1:1f:
bb:4c:7f:15:09:f4:fe:a0:7d:53:c8:b7:2b:5c:9d:a8:e1:57:
6c:5c:fb:c5:64:e2:65:26:58:7c:dd:f7:5c:c2:c0:60:55:48:
2c:d5:65:ee:90:7e:fe:8d:30:1a:4d:06:f3:33:ac:43:18:5e:
7b:06:a8:2b:e8:1e:44:11:10:25:9f:4b:07:88:ed:0a:a8:67:
9a:61:16:a0:1c:4b:52:e2:51:52:f1:1f:1f:10:79:3c:0c:1c:
2e:e1:6e:39:24:ba:8a:6a:68:3b:35:9e:29:e0:eb:c8:b9:e3:
64:6f:8d:cb:cb:7e:74:70:8b:a4:43:c3:e7:db:62:a1:8e:4a:
7d:69:d8:d6:5e:ea:79:04:30:63:64:38:9a:2c:b6:40:75:86:
d1:8f:31:39:c9:97:42:4c:ce:aa:1e:a0:d4:35:61:3a:4c:98:
8d:e2:d5:4d:cb:48:a9:1a:e1:99:21:5c:66:f6:17:26:0b:32:
8a:7c:98:59:d8:11:8b:36:57:03:69:17:c9:15:a5:d8:fa:2b:
5d:0d:01:11:5a:f8:14:4d:d1:4f:fd:77:c3:50:ec:2e:de:8c:
83:c3:48:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:06 2025 by rpki-client