Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/19Iq-vvBqcc7VAwhH5gU6h1kD_U.roa
File: 19Iq-vvBqcc7VAwhH5gU6h1kD_U.roa (raw, json)
Hash identifier: rzwV3JBjiaFu10rULYrt5w5BJLJue+lnd3K5nIIdaNc=
Subject key identifier: D7:D2:2A:FA:FB:C1:A9:C7:3B:54:0C:21:1F:98:14:EA:1D:64:0F:F5
Certificate issuer: /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial: 01882A290FB62D577A1F395373BFED0946A6
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/19Iq-vvBqcc7VAwhH5gU6h1kD_U.roa
Signing time: Wed 17 May 2023 14:41:54 +0000
ROA not before: Wed 17 May 2023 14:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.102.184.0/24 maxlen: 24
91.102.185.0/24 maxlen: 24
91.102.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:29:0f:b6:2d:57:7a:1f:39:53:73:bf:ed:09:46:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Validity
Not Before: May 17 14:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7d22afafbc1a9c73b540c211f9814ea1d640ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:9d:2d:1a:ee:a9:1e:9a:60:f6:d1:78:01:
14:7a:dc:4d:0c:35:6d:e2:a4:61:87:2c:89:b9:e3:
06:d3:c2:30:57:8c:6a:ca:d8:d4:86:4d:0b:c2:0b:
e0:b6:e5:99:c4:52:8d:16:a8:f2:ae:df:8f:4c:1a:
f9:bf:96:d8:ac:3a:71:70:f2:96:05:08:0d:8c:1e:
87:d6:cb:45:f6:d4:de:43:2a:43:ae:65:6a:af:72:
16:58:95:2e:d7:25:34:49:47:03:1b:d8:bf:5c:09:
2f:92:63:4a:87:d3:9c:84:bb:7d:58:ef:df:d8:4b:
04:e6:55:a5:6b:c5:5f:29:aa:8f:b0:b9:0b:62:6b:
7d:b5:00:66:92:9c:3e:4b:de:aa:b2:76:dd:92:91:
69:09:d4:1b:5e:9c:64:0b:c3:ae:32:fb:6c:9e:b1:
a6:44:69:c9:91:c7:2a:42:42:57:e3:bb:e1:c0:c7:
dc:f3:ee:c3:29:c9:8b:81:8f:5c:f4:f3:c4:1d:61:
cf:f3:41:b9:f9:80:92:94:65:60:fb:d9:ce:ac:a9:
d1:11:cd:e3:45:7c:30:0a:4b:5e:05:fc:d3:d9:e8:
f7:a6:92:ae:8a:98:79:c8:33:8e:48:54:b3:ad:97:
18:35:40:cc:02:d5:c0:14:6a:e1:a4:36:25:84:39:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:2A:FA:FB:C1:A9:C7:3B:54:0C:21:1F:98:14:EA:1D:64:0F:F5
X509v3 Authority Key Identifier:
keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/19Iq-vvBqcc7VAwhH5gU6h1kD_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.184.0-91.102.186.255
Signature Algorithm: sha256WithRSAEncryption
07:7a:a4:12:3c:9b:ed:73:75:db:cb:03:73:f8:92:6f:28:6c:
cf:8a:30:28:ab:b1:ad:52:d2:1d:d4:b0:03:a1:4d:b0:85:c2:
09:d5:ec:02:8c:0c:9b:03:05:aa:8c:74:64:8e:1e:98:76:d5:
56:ff:af:f7:61:71:44:23:c2:d4:b9:bf:37:08:9e:d0:5d:6b:
fc:e3:4f:cc:af:9e:71:7c:21:03:ac:5b:eb:bb:6d:0c:cb:fe:
fc:b3:3c:c8:77:f0:9c:8e:ab:e5:20:b3:dd:fd:ca:db:b6:fd:
38:66:ad:f4:68:70:6a:41:02:06:0b:0e:b9:fa:57:a4:43:7c:
02:b6:33:54:d9:32:6b:8b:4b:ae:50:17:31:7c:dd:82:68:12:
32:e8:3d:68:cb:67:73:a9:cc:cb:d0:67:cc:6a:f4:17:e0:a7:
21:30:4d:b8:ba:ac:67:22:e5:17:4d:0c:6c:0b:ee:63:7f:bc:
86:f7:45:9c:d7:a3:9c:a9:51:2c:34:70:e0:4a:03:31:01:8f:
a0:6a:75:34:ed:4a:1a:f1:62:2d:19:99:cb:a8:ef:0a:df:f5:
22:bc:a3:72:cb:dd:0f:23:f8:9f:bc:d1:56:70:57:b1:9c:96:
3a:a3:af:08:6a:19:6e:92:fb:e0:37:af:aa:df:1e:1e:ea:2b:
6d:e3:35:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:36 2024 by rpki-client on console-ams.rpki-client.org