Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lZaWIqmaaFzwx4bmzCln-ZVudb8.roa
File: lZaWIqmaaFzwx4bmzCln-ZVudb8.roa (raw, json)
Hash identifier: ZYFY0a2r9YMi0aRCoO2PrKLL5aXjQZhKhFI2YETmQIY=
Subject key identifier: 95:96:96:22:A9:9A:68:5C:F0:C7:86:E6:CC:29:67:F9:95:6E:75:BF
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018596FE80A39755C53B1B8B9D424A3C7443
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lZaWIqmaaFzwx4bmzCln-ZVudb8.roa
Signing time: Mon 09 Jan 2023 14:45:39 +0000
ROA not before: Mon 09 Jan 2023 14:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 91.147.116.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
91.147.117.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:fe:80:a3:97:55:c5:3b:1b:8b:9d:42:4a:3c:74:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 9 14:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95969622a99a685cf0c786e6cc2967f9956e75bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:f4:d0:a7:6d:51:c1:7d:a9:3a:f0:71:c0:
31:d1:db:b7:a5:de:6b:c6:9a:2e:bf:76:80:f8:b4:
ed:e3:8d:f5:69:2d:ad:24:02:b6:77:68:57:12:af:
e3:f9:f4:02:16:54:c0:6d:c0:82:b6:95:c9:93:1d:
30:30:ba:fe:2d:7e:f3:3c:aa:67:e8:e9:3b:8e:4d:
d8:b4:92:15:35:d2:31:47:9b:76:93:95:b3:0a:82:
a0:36:f1:66:35:2a:99:18:ee:b8:3e:7c:dd:1f:26:
fb:85:87:23:92:45:0e:25:4c:38:65:d2:b0:d2:15:
ed:50:4c:36:6a:20:5b:8c:71:09:a0:c2:66:a6:c7:
34:6d:9c:5d:b6:a5:63:08:55:03:6b:14:dc:fc:cc:
a9:31:45:72:8c:0c:f8:9f:47:3c:2f:bf:48:13:c3:
ab:fc:48:9a:47:35:69:c6:ba:18:0b:8f:c5:66:08:
f0:db:8c:21:1a:50:0a:ba:ae:ba:bb:fc:db:5d:26:
d6:d6:7d:21:05:f6:4b:f3:3f:3e:98:6a:95:0e:3f:
0b:31:9f:bd:88:27:3f:b2:51:f0:d9:2b:09:05:ed:
ab:2a:58:2f:9b:97:e5:5f:f0:ff:61:0b:99:c9:9d:
7e:b8:31:a5:e0:63:68:7d:2b:3d:a8:7e:65:33:a5:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:96:22:A9:9A:68:5C:F0:C7:86:E6:CC:29:67:F9:95:6E:75:BF
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/lZaWIqmaaFzwx4bmzCln-ZVudb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0/22
91.147.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f2:b3:d8:1a:f0:e4:3a:6e:c0:99:e0:3a:3a:4e:3c:d5:03:
18:e6:ea:3f:49:1e:2b:6e:36:ca:58:b2:5b:71:fc:9a:04:9e:
6f:9d:7f:e8:ca:0d:3f:08:69:69:28:0d:75:6a:57:4f:fb:fd:
32:58:e9:55:2a:45:6c:30:ba:b4:3e:11:7d:64:af:cc:9b:45:
14:ca:ca:8c:0f:d6:6f:c6:03:ee:a8:63:86:41:f7:43:67:8f:
a9:d3:3c:f3:23:0d:15:81:a8:17:ea:2d:4f:b3:c1:dd:49:ec:
ff:14:64:b4:35:68:ae:7c:99:72:08:33:91:41:11:28:ca:63:
5f:65:52:61:5b:e9:74:db:6d:a4:95:d8:ca:7c:ed:c4:61:88:
40:bd:05:74:d2:40:9d:61:4c:cb:a4:7b:94:32:89:b7:72:b3:
a1:74:5a:3b:2c:15:30:e0:6b:d7:4c:cc:62:ab:18:26:58:df:
68:09:c5:18:dc:52:45:4e:0a:f7:83:ea:44:e2:b6:ef:1c:cb:
32:ab:36:61:2f:fc:7d:a2:a0:cf:46:77:eb:6d:9b:8f:53:1f:
5e:8c:ad:47:48:fa:d6:13:9b:ad:66:02:67:19:21:b8:61:58:
cf:a7:da:b6:02:98:6a:41:ba:8d:d9:b5:20:3a:cb:25:77:06:
d9:79:1b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org