Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/REXqlkbjt-kqNcZPF8lUK6bpRhM.roa
File: REXqlkbjt-kqNcZPF8lUK6bpRhM.roa (raw, json)
Hash identifier: n1dSiU4fGTEslkvcQgA14QyAWOXZVUEP80HL5qCyGYI=
Subject key identifier: 44:45:EA:96:46:E3:B7:E9:2A:35:C6:4F:17:C9:54:2B:A6:E9:46:13
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0187B8D68CFB9CE2957CCDD0614B21DCBD7D
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/REXqlkbjt-kqNcZPF8lUK6bpRhM.roa
Signing time: Tue 25 Apr 2023 14:34:41 +0000
ROA not before: Tue 25 Apr 2023 14:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197674
IP address blocks: 91.92.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 17:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:d6:8c:fb:9c:e2:95:7c:cd:d0:61:4b:21:dc:bd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Apr 25 14:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4445ea9646e3b7e92a35c64f17c9542ba6e94613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:cd:88:0c:0a:1e:14:73:43:16:ed:1b:0a:
fa:2d:9e:4c:1a:72:cd:52:d9:6e:4b:ae:06:e6:ca:
c9:75:0e:35:4f:59:a0:a8:0e:a6:be:d4:68:d7:13:
53:39:82:b9:d5:dc:f7:f5:ae:39:d8:24:51:75:fc:
35:57:ab:7b:e1:4c:3b:d8:48:00:11:a8:50:9a:67:
09:eb:9c:cc:fa:28:d4:ad:d1:52:d0:19:11:d6:72:
86:d3:1e:ba:a5:4c:97:bb:4c:41:c7:65:0f:74:a4:
9a:01:99:69:81:d5:71:02:f2:72:7f:99:93:78:5e:
7e:63:65:9a:ff:11:55:41:c4:a4:d2:6a:e3:ec:d8:
c9:5c:a2:b5:fb:8b:9f:31:37:bc:06:5c:15:f6:85:
43:d5:dc:82:c8:79:99:cd:c8:12:d2:db:4f:0c:a1:
d4:18:9a:af:5e:b7:67:37:13:6f:ba:2a:f2:f5:26:
01:4a:0e:0f:d4:c2:bd:94:ec:a5:a0:de:4e:2e:7a:
6f:d5:98:ad:b4:ae:d5:23:f8:8d:44:7a:55:bd:41:
b9:44:f9:93:74:60:5d:96:87:59:ea:a9:c6:08:52:
2b:2e:6d:a8:47:aa:ba:73:a4:1d:6c:a2:02:f8:e8:
d4:c4:b9:53:fc:f7:39:50:d8:2e:3b:4b:25:4c:13:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:EA:96:46:E3:B7:E9:2A:35:C6:4F:17:C9:54:2B:A6:E9:46:13
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/REXqlkbjt-kqNcZPF8lUK6bpRhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:60:27:20:67:9a:df:31:e0:f2:bc:d8:fa:4b:08:20:6e:80:
51:34:35:ca:91:71:93:f5:78:fb:36:6d:24:84:47:59:e5:06:
a3:5c:89:97:4b:d1:0f:06:dc:93:dc:c2:2a:c3:9c:46:1c:ee:
67:d8:da:b4:6e:39:77:cd:10:e4:0b:8e:9c:6c:65:ca:4c:c7:
e0:65:83:82:cb:9c:1a:f5:13:af:ba:9d:1d:b9:14:2a:a3:9b:
cd:54:0a:8f:bd:80:83:57:d2:3d:46:59:cc:82:8d:fb:47:f7:
5d:a0:b0:40:76:3f:73:17:01:8f:c2:98:be:a9:12:44:2f:81:
91:57:d6:fc:8a:9d:ed:f1:2d:91:2e:03:60:dc:14:c2:96:72:
d6:74:d7:0f:35:44:aa:3e:d8:70:ba:f8:31:c3:13:4c:51:61:
74:56:c3:5f:b7:73:36:d9:97:9f:64:e0:b9:3c:7c:e4:98:43:
cb:8c:cd:cd:b1:a6:c5:84:4c:c2:e7:c5:26:e0:06:60:75:6d:
2d:fc:63:96:e0:b4:b6:55:09:31:6b:57:1d:4a:11:f8:00:76:
37:ee:fc:73:ee:82:c0:0f:33:01:6c:f2:3b:23:01:d1:db:7c:
7a:43:4e:a7:98:e8:2e:69:a6:f9:c4:10:b3:29:73:e6:f8:d4:
77:d2:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org