Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/XMAuDhx4IPmKHByTJA2NPWVPrX4.roa
File: XMAuDhx4IPmKHByTJA2NPWVPrX4.roa (raw, json)
Hash identifier: gMj2Fz5rDg+mU3LFOeUYChdyHOStg7uvBeKLa+jfztE=
Subject key identifier: 5C:C0:2E:0E:1C:78:20:F9:8A:1C:1C:93:24:0D:8D:3D:65:4F:AD:7E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018930F7730368807902AA3DBE86D92AA788
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/XMAuDhx4IPmKHByTJA2NPWVPrX4.roa
Signing time: Fri 07 Jul 2023 15:27:50 +0000
ROA not before: Fri 07 Jul 2023 15:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265627
IP address blocks: 91.109.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:30:f7:73:03:68:80:79:02:aa:3d:be:86:d9:2a:a7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 7 15:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cc02e0e1c7820f98a1c1c93240d8d3d654fad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:a3:f7:ab:40:30:91:9f:6c:4c:9e:f9:bf:
a2:69:f2:f7:a2:af:46:d7:90:7f:46:39:e8:f0:bf:
7d:a8:7d:37:92:4c:a5:7f:cf:05:ea:f4:41:fd:b2:
0c:63:e9:6f:ca:21:99:c6:01:47:1f:79:d5:cd:1c:
3a:78:8b:ee:d8:59:12:51:79:db:89:e1:7a:ee:b3:
b7:e0:38:12:87:59:a8:33:01:86:82:78:59:f8:b0:
e5:90:cd:8c:c3:43:ea:82:40:3f:8d:b3:12:4a:92:
d2:ca:78:4b:7a:45:6c:77:5c:71:a8:f4:ae:0a:82:
d5:38:67:92:1c:3c:7d:a4:84:3e:b6:d7:66:f2:22:
1e:3a:77:d2:94:c5:18:ca:e6:ea:b8:36:e9:ff:b0:
e4:f5:5a:f9:40:47:52:09:98:8b:22:8d:3c:37:44:
74:d3:de:81:e1:2f:d1:36:2a:aa:26:ea:bf:07:c2:
6d:c5:46:ee:e6:51:c4:7a:9f:bb:5a:9d:2d:cb:df:
4d:94:5b:c7:fd:fb:f4:ba:6f:8c:64:a3:ec:a7:f9:
69:59:e7:25:24:3b:f9:c6:0d:0f:48:45:53:30:3c:
31:c9:bf:15:de:37:2c:68:1e:b7:1b:77:e7:7b:ad:
f5:20:17:7f:f3:54:37:7d:d2:6f:41:e9:50:6b:c4:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:2E:0E:1C:78:20:F9:8A:1C:1C:93:24:0D:8D:3D:65:4F:AD:7E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/XMAuDhx4IPmKHByTJA2NPWVPrX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.162.0/24
Signature Algorithm: sha256WithRSAEncryption
90:de:c8:a0:3e:e6:35:32:f8:c9:df:d9:06:c0:72:fa:2f:38:
77:78:33:17:50:28:80:b0:72:6f:4a:c0:c9:3b:3e:ab:e0:ac:
f6:c9:ee:30:4e:bb:93:1c:99:26:78:af:da:34:d3:d7:f8:5e:
32:47:76:7d:dc:e4:54:08:94:8b:09:81:93:56:64:e7:5a:63:
34:d6:37:43:be:85:bf:8d:f4:61:02:30:fd:44:d0:2f:f4:37:
04:65:a9:ec:19:dd:07:f4:27:73:5b:ea:4d:52:b2:16:1a:65:
ff:9c:9e:8a:b9:5c:70:f1:a1:d2:0a:4a:c8:b4:5a:0a:0c:17:
d4:e9:0b:3d:4e:06:89:e9:f5:3e:ca:68:bd:c6:b1:88:0c:7a:
0f:3f:76:79:12:e7:23:f4:80:4f:b9:80:ea:1e:44:e6:a1:b7:
92:67:fb:8d:e4:22:9d:4c:de:75:50:4c:2b:75:0f:8e:96:98:
13:62:c9:2c:84:e8:1e:62:1e:05:8a:5b:c6:22:89:bc:f2:6c:
db:3b:95:c0:0e:fa:6d:0f:74:04:d8:44:ed:ca:bf:23:86:2c:
9a:98:0a:d4:02:32:6b:27:97:59:a2:b2:2d:4b:b0:8e:e6:1c:
a2:81:2f:f1:0f:68:a6:1c:f5:46:c5:2e:c6:0b:fd:de:bf:ae:
2d:81:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org