Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/xQhvj9ZpKiHNEZkWCueW9Ek7Onw.roa
File: xQhvj9ZpKiHNEZkWCueW9Ek7Onw.roa (raw, json)
Hash identifier: P95Sl1WKnAZ2ercaIPwWrGJxwfrvOShK4cb1aRXw/So=
Subject key identifier: C5:08:6F:8F:D6:69:2A:21:CD:11:99:16:0A:E7:96:F4:49:3B:3A:7C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0186EE32BB8B25BC9525BE657729D77C0699
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/xQhvj9ZpKiHNEZkWCueW9Ek7Onw.roa
Signing time: Fri 17 Mar 2023 06:12:27 +0000
ROA not before: Fri 17 Mar 2023 06:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.119.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:32:bb:8b:25:bc:95:25:be:65:77:29:d7:7c:06:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 17 06:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5086f8fd6692a21cd1199160ae796f4493b3a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2f:99:40:0b:e6:ab:03:42:5d:7b:ca:0c:93:
42:88:de:8f:40:cf:cd:59:0c:90:9c:55:87:a9:bb:
4d:cc:e3:b3:3d:77:bf:a8:11:08:3d:9e:99:5f:2e:
b3:7b:28:df:09:4d:02:6a:76:01:ff:f3:db:9c:e8:
b0:1a:6e:f1:69:1b:48:78:e8:3d:8d:7c:07:f7:04:
f6:e7:2d:cd:8d:c1:29:97:f1:b4:52:a4:2b:09:f4:
75:4d:8f:ec:7b:d3:fa:06:7b:a5:1a:aa:fd:08:45:
62:f8:15:bf:3a:ac:20:a3:fa:f4:83:09:83:23:b9:
19:e0:bd:a4:23:4c:67:74:b8:fe:6e:da:56:f9:c1:
21:fa:2c:d2:61:1b:cb:66:6d:59:ff:a5:c5:3c:66:
0b:b3:72:48:a3:6e:34:2a:a1:b6:f4:69:89:b3:c8:
89:86:8b:45:64:86:02:82:3c:0b:2c:f3:a9:4e:44:
fd:b0:ae:7d:d3:20:fa:6f:71:48:70:31:d3:97:c2:
66:99:14:a5:b2:ac:c3:40:c5:6d:61:ba:88:6a:e6:
5a:86:51:0b:bd:ce:dc:25:0b:f3:60:6c:25:94:a1:
13:27:4a:c6:43:51:6a:3d:29:8a:5b:2b:f6:d5:8b:
ee:21:11:85:37:fc:9c:0c:4d:38:89:ec:71:36:e7:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:6F:8F:D6:69:2A:21:CD:11:99:16:0A:E7:96:F4:49:3B:3A:7C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/xQhvj9ZpKiHNEZkWCueW9Ek7Onw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.121.0/24
91.147.123.0/24
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
15:38:16:18:69:0e:bf:1e:df:8f:00:a4:6b:d1:bb:85:0a:f4:
89:2b:73:2e:12:35:71:4f:52:e6:3b:cf:f7:73:ef:60:d9:87:
61:49:66:4e:b0:5e:f1:12:7a:76:c3:d6:89:82:85:2b:50:a3:
8f:50:15:0f:94:8d:72:c4:26:37:f5:62:94:ee:d4:ae:90:91:
c0:df:37:4a:7f:0b:cf:d6:93:a8:cb:5d:75:b9:10:39:03:b9:
67:f0:3c:c7:93:7e:6d:18:49:18:ee:16:06:cb:d9:8e:66:37:
e9:3a:af:2e:bb:b7:ae:3d:eb:f4:f4:6e:c0:81:2e:fd:bc:f1:
0d:e9:81:86:dd:8d:1d:a5:93:89:9a:cc:ed:c2:ba:b4:df:6a:
06:f2:d5:0e:78:05:83:7e:b9:dc:24:f0:bd:70:c9:31:35:f3:
f0:1b:b2:fe:ba:cc:e6:f6:78:6c:90:85:68:fe:88:e9:b9:f4:
4f:f7:74:ad:8c:ad:55:4d:fd:91:29:e4:9d:76:8d:e2:e6:31:
f2:22:fc:1a:f7:5f:61:a3:c8:e6:86:77:ca:96:41:45:b6:82:
fd:22:1c:06:69:33:93:f2:f9:a6:ba:8a:d0:09:e2:40:30:90:
23:f7:e4:31:84:c2:31:ae:19:62:b9:86:53:55:50:db:63:bf:
30:e3:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:10 2023 by rpki-client on console-fra.rpki-client.org