Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa
File: fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa (raw, json)
Hash identifier: pSl7/dd3MGc2wUGE9feDCJsCcUvst6TP8xaIR8ad+XQ=
Subject key identifier: 7E:FF:6B:71:04:39:4C:13:38:CC:7C:90:6E:DF:6E:A7:F3:5A:CF:94
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D55A8B32D40273287E824C51CC57FD
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa
Signing time: Mon 02 Jan 2023 04:55:08 +0000
ROA not before: Mon 02 Jan 2023 04:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 91.226.31.0/24 maxlen: 24
2a06:d641::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:5a:8b:32:d4:02:73:28:7e:82:4c:51:cc:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eff6b7104394c1338cc7c906edf6ea7f35acf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:f8:f8:92:0c:ff:26:3a:a0:72:fe:a6:4a:
fe:1a:a9:ca:2c:f0:ae:42:5f:67:98:d1:51:a2:77:
5d:03:36:ff:00:02:e8:9c:ff:8b:64:01:fe:af:6b:
7a:b7:fc:0f:00:f7:f3:73:81:91:b8:13:45:8a:9e:
40:a5:d9:3d:ae:60:6d:3d:c8:ff:ac:81:6b:b3:94:
4e:99:a4:5d:6e:5e:c4:2d:c3:29:de:08:27:5d:a0:
a9:fc:a0:11:14:ae:e6:c9:13:c3:fb:54:2e:3a:10:
fa:33:c3:27:c1:77:f0:47:6e:de:1e:8e:dc:6d:2c:
67:10:f5:f5:f3:2f:fc:2e:cc:cd:a4:0d:15:ea:68:
0b:ac:03:03:f0:6f:99:ad:29:01:28:67:74:6d:de:
bd:14:3a:50:06:5b:5d:73:33:bd:4f:62:23:75:08:
f6:71:c4:94:13:32:69:cd:25:cb:bb:95:9e:83:ff:
dd:a9:27:5b:c1:89:38:5c:d0:0a:fd:71:72:b3:40:
3a:e9:1d:20:3e:a2:6a:39:09:8b:75:e4:f3:86:2d:
67:9a:bf:32:5b:10:4c:cb:1e:e1:33:39:e4:4f:f1:
7f:49:86:ce:65:20:7a:f6:b9:52:a3:cf:fb:8b:66:
db:9b:09:83:e2:1a:7f:49:3b:4f:6a:dc:22:d6:9e:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FF:6B:71:04:39:4C:13:38:CC:7C:90:6E:DF:6E:A7:F3:5A:CF:94
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/fv9rcQQ5TBM4zHyQbt9up_Naz5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.31.0/24
IPv6:
2a06:d641::/32
Signature Algorithm: sha256WithRSAEncryption
16:87:52:17:c9:30:dc:33:f3:0c:d3:24:48:a3:55:9b:07:cc:
de:5b:03:9f:d5:95:35:8c:1c:4e:8c:15:18:5b:e8:dd:2a:74:
c0:2e:d2:62:88:3d:26:94:10:65:81:dd:0a:7a:23:b2:34:9f:
db:6b:46:ae:6d:b8:16:c4:c9:46:da:08:41:28:cf:5d:7b:70:
cf:e2:16:66:92:28:ee:99:c9:99:6c:86:d8:72:03:8a:e9:82:
a9:08:8b:8d:68:2d:e0:8b:96:57:de:30:a4:72:52:b3:03:c4:
61:91:00:19:9a:f8:f0:05:66:72:b2:7a:88:e0:cc:bc:4c:43:
1a:9b:86:0c:91:e2:4c:15:52:5d:44:e3:20:71:65:03:6b:61:
b4:d9:34:d7:40:97:76:03:89:c3:82:d4:5f:01:e1:a2:65:be:
37:2b:9f:0c:80:b3:11:37:8a:94:ec:35:8e:22:d1:f5:38:54:
64:4c:58:ce:26:b5:ae:a9:21:1a:21:66:9f:7a:e8:b7:aa:3e:
bc:ef:ef:ce:0b:62:ea:b1:32:9a:84:cb:43:46:56:e3:63:9d:
e6:75:59:8a:8e:ab:7a:10:a9:84:f5:5c:1a:fe:da:c5:eb:7f:
33:84:99:c4:df:c6:25:49:24:8b:4a:a7:8d:9e:7a:2d:a7:0f:
99:9f:02:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org