Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/g6QAp7NsN6uXxIdhhq7UXSRQC6c.roa
File: g6QAp7NsN6uXxIdhhq7UXSRQC6c.roa (raw, json)
Hash identifier: mRblLzaDtne3aJYz5pM21xWr0SS6/wxMusKCMPfL7QI=
Subject key identifier: 83:A4:00:A7:B3:6C:37:AB:97:C4:87:61:86:AE:D4:5D:24:50:0B:A7
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 01856F795CE89C458660B49043ACDE8C4CA8
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/g6QAp7NsN6uXxIdhhq7UXSRQC6c.roa
Signing time: Sun 01 Jan 2023 22:35:02 +0000
ROA not before: Sun 01 Jan 2023 22:35:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35490
IP address blocks: 91.236.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5c:e8:9c:45:86:60:b4:90:43:ac:de:8c:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Jan 1 22:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83a400a7b36c37ab97c4876186aed45d24500ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:13:6c:da:b9:73:54:9f:f6:1e:f6:fe:5d:
d2:b1:9d:69:19:ea:0e:3e:5e:41:30:29:e7:5f:1c:
37:a6:08:89:72:bc:21:79:62:13:45:d5:06:83:bc:
87:f0:67:31:6e:72:f1:78:03:6b:53:99:7f:4d:8b:
17:2d:31:d4:58:66:59:4c:96:95:f6:16:7e:3f:72:
1f:b4:9d:73:72:51:df:7c:7b:b5:c7:5d:5a:fd:4b:
45:d2:09:e2:30:ff:e1:71:89:a5:04:aa:f0:c3:db:
82:cf:c5:91:16:dc:71:0d:33:e8:10:fd:f2:27:bf:
40:ac:9e:05:db:48:d9:97:c8:6b:9c:33:71:5b:f7:
4b:35:24:87:46:5d:43:86:fd:3b:74:3e:5a:94:89:
30:a1:0a:de:d7:38:0c:54:7f:8f:dc:03:c5:60:58:
3f:5f:32:b8:b3:3d:b5:67:56:f1:42:39:ca:f3:e6:
59:2c:8f:01:2d:e4:37:c8:46:b8:b4:c9:d1:c1:91:
78:11:16:3a:c7:4c:48:6f:9a:34:1c:c1:25:d9:e4:
40:bd:d0:ef:ea:9c:1a:00:3f:03:83:30:0f:2c:1e:
37:09:4a:b0:88:59:f6:5d:0b:e5:e9:5b:6b:47:99:
23:f7:6a:f4:35:b8:e8:ae:93:d1:10:de:f8:57:28:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A4:00:A7:B3:6C:37:AB:97:C4:87:61:86:AE:D4:5D:24:50:0B:A7
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/g6QAp7NsN6uXxIdhhq7UXSRQC6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.223.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d9:54:88:da:21:b8:fa:5f:12:f8:bb:c3:c1:38:7c:f9:72:
6b:c3:bc:32:aa:a2:6b:f0:d0:15:2e:08:ec:02:43:37:0a:92:
0d:d0:45:be:5f:04:3c:36:73:82:ff:b7:84:c8:fe:19:32:66:
4c:c4:a8:d6:cc:72:6b:3f:c8:21:10:fb:54:c8:89:03:cd:86:
94:59:93:c8:43:0d:e4:1b:ed:2e:c1:03:98:f7:74:92:f7:21:
eb:23:f1:0a:3f:c5:ed:68:de:6b:87:1a:85:6e:9b:f9:92:cc:
e4:95:a8:44:97:c0:9e:1c:50:56:11:01:ab:91:21:a8:c5:de:
8e:75:0c:6d:af:7b:a4:55:ae:eb:a5:95:1c:31:83:87:02:9e:
a7:b4:b2:e2:b0:67:7d:a4:a5:a5:60:01:7d:bf:84:0a:39:0c:
fa:9d:0d:c3:4e:f4:ee:44:57:01:de:05:23:57:89:ba:85:27:
35:bf:25:44:97:24:a3:04:00:ce:43:71:15:e9:70:d6:b0:57:
27:c1:b7:18:f8:34:e2:44:a5:6a:78:cd:15:2f:49:2d:34:00:
0b:2c:c3:65:ca:1e:3a:cc:8f:bc:1b:5b:75:7b:dc:d8:19:3e:
fa:cc:a9:c5:8e:43:7c:b2:e2:f8:a4:ae:10:17:b1:9a:3a:1b:
2b:e9:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:07 2024 by rpki-client on console-fra.rpki-client.org