Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3vetm0MKfPgWH8BrhDiJJE9hmwI.roa
File: 3vetm0MKfPgWH8BrhDiJJE9hmwI.roa (raw, json)
Hash identifier: 7gWUe1CdHMx0hP4h6crNoWfbuyg4dbWHM4yLXTJOjyA=
Subject key identifier: DE:F7:AD:9B:43:0A:7C:F8:16:1F:C0:6B:84:38:89:24:4F:61:9B:02
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018AD85A4ABE2A0B7F2DCC6F71E6962E12CE
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3vetm0MKfPgWH8BrhDiJJE9hmwI.roa
Signing time: Wed 27 Sep 2023 20:35:10 +0000
ROA not before: Wed 27 Sep 2023 20:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.147.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d8:5a:4a:be:2a:0b:7f:2d:cc:6f:71:e6:96:2e:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 27 20:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=def7ad9b430a7cf8161fc06b843889244f619b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:3f:92:45:a7:b1:3b:c2:a6:49:65:be:86:
76:40:d4:e4:06:bd:38:2f:6a:5a:dd:24:99:dd:52:
c8:e6:70:d6:f9:16:5a:7a:1d:d0:8b:94:fc:39:dd:
58:c1:54:76:e8:e9:4a:bb:ff:45:d7:94:a2:47:10:
5d:57:9f:a4:2f:3d:b8:a3:fa:45:b0:4f:83:d6:58:
f2:f3:51:a1:e7:b6:a9:20:64:cb:93:44:56:c9:8c:
ae:db:9e:85:26:40:cc:82:83:71:80:29:db:32:c2:
9e:13:75:73:56:b1:92:71:03:cd:1b:bc:b8:55:75:
74:2d:78:23:d5:c3:47:e9:dd:57:38:c6:77:da:6e:
49:19:09:65:54:b9:b9:73:ca:80:57:4b:3f:d3:18:
44:e5:13:1c:2d:42:dd:a2:63:20:9d:3a:d4:81:ce:
6f:68:1f:18:2a:d7:f2:7e:39:fd:ff:7b:5c:b7:b2:
f8:bd:75:b2:d4:36:20:d8:e4:c3:dd:3f:ce:f9:d5:
8b:33:ac:b7:d2:23:b1:42:eb:44:72:61:ac:60:e5:
f1:86:0b:0e:43:d4:e7:47:48:23:4f:cf:b6:43:e9:
89:5f:14:80:7d:c6:07:7b:a8:5b:10:63:f5:2e:ef:
67:eb:49:db:cf:b1:b7:79:3b:07:29:71:64:b8:79:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F7:AD:9B:43:0A:7C:F8:16:1F:C0:6B:84:38:89:24:4F:61:9B:02
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/3vetm0MKfPgWH8BrhDiJJE9hmwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.121.0/24
Signature Algorithm: sha256WithRSAEncryption
59:75:0f:cf:38:b8:71:77:2b:11:6e:06:2a:6a:35:72:94:28:
50:f8:83:f6:46:8e:f7:f4:68:c8:e9:9f:6f:b5:fb:04:80:0f:
b9:1f:03:46:d1:8c:d8:7b:15:73:d2:19:04:c6:24:3d:fb:6c:
1f:ef:b0:fa:b5:80:4a:31:5a:a1:9f:9e:93:7e:75:bc:aa:61:
1e:1c:70:0f:85:25:d8:f8:de:0a:77:ce:5d:85:ae:65:d3:53:
ba:20:ee:c6:b4:67:4e:4b:07:19:8b:3b:64:98:0d:b8:f6:32:
45:ae:79:f7:ef:59:65:cb:27:8e:ba:98:1e:b6:3b:07:47:a7:
f1:44:01:bf:3d:8b:97:f2:16:56:98:96:f4:d3:44:64:f1:45:
2c:9d:ac:d4:2d:f9:ac:d5:a9:cc:42:4c:db:ed:5b:12:8a:f9:
8f:db:7b:c9:f2:36:36:58:9a:80:ea:4f:f2:32:d2:a6:7f:60:
11:69:b7:6f:24:72:54:28:e7:d1:d4:c8:45:94:6d:ee:4b:8e:
bc:6f:fd:42:66:91:6b:41:01:94:a7:70:75:7b:2a:95:86:bd:
ca:b3:c5:be:e3:af:f6:c4:01:bc:39:3f:ae:9b:c7:9f:ad:5c:
b1:43:41:8d:3f:26:6e:14:fc:4e:f1:13:0b:14:8e:88:f7:1a:
18:a9:93:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 18:06:57 2023 by rpki-client on console-fra.rpki-client.org