Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/xpty0FNOEVhPJiKz3OS-Zw1vMFM.roa
File: xpty0FNOEVhPJiKz3OS-Zw1vMFM.roa (raw, json)
Hash identifier: 5BfW5KloD5MMQQN2MExArdl1acY479VWuyPm/4gL7K4=
Subject key identifier: C6:9B:72:D0:53:4E:11:58:4F:26:22:B3:DC:E4:BE:67:0D:6F:30:53
Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Certificate serial: 0185734CBDA455FC55CC994F08A1C73967F5
Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/xpty0FNOEVhPJiKz3OS-Zw1vMFM.roa
Signing time: Mon 02 Jan 2023 16:24:47 +0000
ROA not before: Mon 02 Jan 2023 16:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197604
IP address blocks: 91.230.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:bd:a4:55:fc:55:cc:99:4f:08:a1:c7:39:67:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085
Validity
Not Before: Jan 2 16:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c69b72d0534e11584f2622b3dce4be670d6f3053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:f1:04:d9:50:59:e3:d9:76:97:d1:f1:6f:
e9:5b:98:9d:f7:29:30:03:8b:75:90:a2:8a:53:a5:
a4:40:56:7a:55:f3:5c:e3:e1:ca:c8:3b:cd:7f:5c:
92:5f:1d:8e:ec:33:13:19:a5:09:ea:f2:7c:db:4c:
aa:b6:ad:eb:ac:52:bb:44:e7:7c:3c:82:7e:67:d1:
7b:fe:73:13:c1:94:3a:60:fa:39:5d:1d:3e:78:56:
5b:04:a8:0c:08:51:45:00:a7:24:5e:b1:68:ae:10:
05:9e:7a:65:17:27:df:c6:68:68:5b:6b:b8:01:ab:
c1:3c:50:4f:8e:bd:9c:59:c3:48:a8:9a:e5:98:72:
35:a9:4a:41:dc:b6:23:56:28:25:95:d0:85:dd:44:
8e:f0:85:7f:e6:7c:6c:18:af:65:d8:b0:e5:f8:23:
a8:a3:07:fc:ea:b1:9d:53:c9:41:f7:f5:e9:2a:b8:
09:23:e2:c5:6b:11:d5:93:f6:44:fd:10:89:06:ba:
3c:fb:eb:49:d6:8f:b1:78:9b:3f:3e:da:6b:72:c8:
1e:d0:db:9c:4a:b2:6e:55:46:42:0b:95:b8:89:e8:
f2:90:ae:a8:4c:d0:23:5b:76:72:f5:69:49:81:bb:
29:53:38:ec:2e:e0:81:e7:6e:5a:44:5c:c7:75:47:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:72:D0:53:4E:11:58:4F:26:22:B3:DC:E4:BE:67:0D:6F:30:53
X509v3 Authority Key Identifier:
keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/xpty0FNOEVhPJiKz3OS-Zw1vMFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.230.0/24
Signature Algorithm: sha256WithRSAEncryption
99:59:e8:89:0a:8a:3c:42:c6:e9:b2:f9:95:de:ea:ea:32:82:
80:2e:c4:6d:e4:08:ff:a7:12:59:f9:35:81:b7:7a:d8:56:52:
28:c9:9a:ed:ec:f4:5d:25:01:f7:5c:41:da:af:0e:2a:ff:ae:
f3:3d:c3:b5:e2:41:ae:da:4b:c4:44:b2:3d:a0:bd:23:eb:a2:
3b:aa:bd:55:f6:ab:80:9f:5b:23:5b:9e:74:62:5c:1e:79:99:
d2:ba:53:2d:c8:44:59:a9:9e:32:29:b5:42:84:a8:ea:9e:68:
b2:01:62:ed:f4:51:b2:b4:b2:f3:9a:79:30:47:5f:55:a0:c2:
b7:54:f6:ef:95:6c:e1:58:35:a6:8f:7d:81:76:c4:2e:45:81:
e2:f0:cf:ae:1f:05:c6:b3:c3:3c:75:e0:01:f8:7e:0c:ce:2b:
ef:db:d9:65:73:ab:f7:2f:e9:2a:8d:36:85:3d:fe:76:a0:54:
b3:6b:23:3c:da:f5:cd:72:94:f6:52:5a:3d:38:01:57:9f:1e:
7c:9a:dc:f7:6b:21:39:69:c0:f0:5d:ce:71:12:98:00:c9:8c:
68:58:f9:8a:d3:54:b4:40:3e:11:0e:63:ec:c9:83:e5:d5:ed:
33:ec:2f:53:8c:ea:de:fc:bc:1c:da:ce:d4:90:d2:04:38:53:
d7:7e:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:11 2024 by rpki-client on console-fra.rpki-client.org