Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/1-hqIp5nQmAA0tsZ3a7lCZ7RCRho.roa
File: 1-hqIp5nQmAA0tsZ3a7lCZ7RCRho.roa (raw, json)
Hash identifier: Cpdq21ojaezxczwaOvKbPUX1Qj0s8yTz1Rr8u9tLUOo=
Subject key identifier: FA:1A:88:A7:99:D0:98:00:34:B6:C6:77:6B:B9:42:67:B4:42:46:1A
Certificate issuer: /CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Certificate serial: 018570672383CD4537F45543A0739BBC859D
Authority key identifier: 53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/1-hqIp5nQmAA0tsZ3a7lCZ7RCRho.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198701
IP address blocks: 91.238.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:23:83:cd:45:37:f4:55:43:a0:73:9b:bc:85:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533dfd6cc140c68a3d3bba86ba57cf3b8ba6a9b7
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1a88a799d0980034b6c6776bb94267b442461a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:41:77:de:66:51:fb:80:bb:9f:05:de:14:
a8:90:e9:8b:a6:e4:67:16:44:37:77:0f:d9:5c:5f:
4e:af:7b:d0:d2:66:c7:27:01:e9:9f:78:e6:09:1e:
8c:02:2f:73:c8:2c:12:e7:b9:2a:a4:4d:22:3c:11:
7f:a7:10:91:e0:fd:db:49:6d:72:1d:82:d2:04:52:
5f:75:70:dc:5a:ea:22:ed:16:ed:50:d9:28:42:aa:
28:71:1a:6f:74:fc:2c:8c:30:d2:42:d8:86:a2:35:
a1:1f:d3:d0:1f:86:a4:9c:07:a0:8b:c1:38:b6:c9:
49:be:c4:20:62:ff:be:5b:48:61:7b:fc:eb:94:30:
99:19:c7:3b:f0:14:d7:79:40:bc:5d:fa:c0:4b:60:
00:69:4f:f8:32:6f:cf:8e:2f:17:b1:7b:80:6f:9f:
6e:a9:44:61:f2:7f:43:55:54:16:6c:56:fa:c6:b5:
66:1d:ae:ee:b1:2d:1c:1d:67:8d:28:0d:be:71:8d:
7e:86:4c:60:8d:d1:dd:23:17:f8:6a:63:ac:42:a5:
cc:e3:88:44:8b:86:33:cf:8c:2a:03:ee:73:72:0b:
3b:b7:b1:09:ef:ba:f2:81:b5:37:fb:32:58:8f:c5:
da:d4:1c:cd:31:50:af:d5:77:99:e3:c1:ed:90:26:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:88:A7:99:D0:98:00:34:B6:C6:77:6B:B9:42:67:B4:42:46:1A
X509v3 Authority Key Identifier:
keyid:53:3D:FD:6C:C1:40:C6:8A:3D:3B:BA:86:BA:57:CF:3B:8B:A6:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz39bMFAxoo9O7qGulfPO4umqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/1-hqIp5nQmAA0tsZ3a7lCZ7RCRho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/42888b-aa3f-4611-803d-2db44c91ae60/1/Uz39bMFAxoo9O7qGulfPO4umqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.22.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fc:8d:82:e9:2d:19:86:dc:40:d8:37:b0:73:ca:e0:fb:d7:
ee:e9:59:1a:f0:1b:97:ac:8a:86:50:31:5f:62:fc:1d:c7:44:
57:77:b8:5b:e6:30:d3:23:9f:3c:1e:0d:df:ef:09:05:c7:6c:
38:bf:8c:06:66:f6:13:0d:67:96:b3:93:34:2d:e8:3d:b0:b2:
48:e1:2f:a6:4c:9e:ae:08:75:c6:7e:16:7b:57:4a:5a:95:64:
19:02:e4:b2:c5:e3:c6:4f:57:f6:fa:89:8c:9d:28:2d:ea:c6:
74:9c:04:18:59:d7:c6:c1:a1:6e:58:ce:78:6f:9d:d8:6a:e8:
ee:5d:05:11:e6:5b:12:1a:81:3b:01:b5:e1:57:d9:f3:39:e9:
3d:3e:f2:40:a6:f1:05:8f:32:63:9e:32:7a:21:72:f8:e6:49:
dd:65:65:3c:4b:90:09:b3:31:c1:ff:71:66:a4:c3:78:40:94:
b1:45:14:12:bc:95:c6:c6:a7:9c:51:a6:de:23:50:f6:14:ac:
bd:ec:fd:96:2b:9e:4f:88:fd:29:3c:54:03:bd:dc:44:6e:e6:
47:b3:c3:cd:c2:54:4d:e3:93:a7:2a:65:79:15:ff:2a:8b:7d:
f5:3b:42:fa:c7:d8:0b:f1:28:2a:8b:ff:ab:a1:6a:b0:3b:21:
ce:eb:db:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:05 2024 by rpki-client on console-fra.rpki-client.org