Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/_dMJlSZ9c_3_v54swF-83HJ4Hrk.roa
File: _dMJlSZ9c_3_v54swF-83HJ4Hrk.roa (raw, json)
Hash identifier: szKq02l+I30FaE/4bBbi8ZGQeHTo31uotp67eViVghI=
Subject key identifier: FD:D3:09:95:26:7D:73:FD:FF:BF:9E:2C:C0:5F:BC:DC:72:78:1E:B9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 018572B427920E20C0141C744E7E7CB421AF
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/_dMJlSZ9c_3_v54swF-83HJ4Hrk.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31129
IP address blocks: 193.23.51.0/24 maxlen: 24
91.211.253.0/24 maxlen: 24
91.211.252.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 31 Aug 2023 10:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:27:92:0e:20:c0:14:1c:74:4e:7e:7c:b4:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdd30995267d73fdffbf9e2cc05fbcdc72781eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:81:8b:84:91:57:62:1c:95:c5:73:ad:68:
00:08:c9:af:8e:45:e8:20:57:2d:d6:e8:9c:7a:42:
4d:23:c5:44:c8:d2:10:41:0c:96:49:50:6f:1b:09:
12:62:f8:ce:15:5a:3c:97:d5:73:d5:5b:e4:48:ce:
bb:71:4a:f3:d3:79:49:60:c9:db:39:67:93:93:3c:
aa:25:2b:59:68:f1:47:12:8e:18:b5:8b:46:fa:fd:
5f:66:6d:35:f1:f9:6e:19:8c:8b:f1:58:c2:74:73:
01:41:f2:20:c3:93:64:ed:74:c9:0e:36:7f:19:90:
ed:95:35:b7:aa:e3:7a:d6:a5:c4:22:d7:98:01:fd:
e5:63:c9:bc:63:34:98:25:4b:a7:ba:ef:57:99:36:
ef:64:be:78:45:03:5c:0c:fe:c2:b1:7b:bb:8c:3c:
3e:c9:ad:27:4a:f4:30:11:0c:58:43:e8:84:80:3f:
93:6d:25:4b:05:cb:d8:d1:3d:a1:91:6c:a9:1f:3e:
c7:15:8d:26:01:47:e2:e4:5f:9c:b9:2b:bb:7e:f7:
5f:ad:b7:9b:d8:0a:44:34:cf:fb:19:ff:91:71:b1:
c2:5f:60:4c:4a:01:45:50:b7:42:6a:44:b8:cf:12:
13:c3:ba:08:91:5d:28:f9:87:2f:2d:8b:ef:fd:a1:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:09:95:26:7D:73:FD:FF:BF:9E:2C:C0:5F:BC:DC:72:78:1E:B9
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/_dMJlSZ9c_3_v54swF-83HJ4Hrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.252.0/22
193.23.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7a:b5:1a:01:39:6e:16:bc:31:d4:1d:96:83:da:e3:b4:cf:
da:f3:99:27:9d:8f:57:a8:64:1c:16:13:67:d7:cf:e9:b0:49:
9d:f0:8d:e3:92:90:9a:5c:26:f2:3d:82:91:09:a5:5c:4b:83:
6d:45:e3:04:a1:a1:44:07:ea:7f:56:8d:64:8e:02:17:b0:5d:
d9:32:3a:1c:45:50:18:0d:42:40:12:f1:59:07:e8:5f:d9:85:
4b:f4:69:09:e6:d1:25:bf:3c:63:63:8e:7c:56:69:fc:03:ea:
7d:25:49:16:7a:f7:b8:88:40:dc:d1:e7:c6:d3:4e:95:4d:ce:
d9:4b:82:b7:f0:d7:67:dd:f9:9b:50:68:8f:24:ce:1b:7b:b7:
c4:c7:48:25:65:62:60:48:1b:f9:31:2f:7f:ed:bf:39:8f:4e:
bc:f8:31:5c:49:14:53:8e:f1:78:f1:c1:b5:52:a9:dd:51:07:
e9:e3:53:f0:00:cf:42:82:28:a6:ef:45:27:a3:29:83:e6:35:
0c:4f:fd:55:93:f8:ac:ba:14:6b:01:e1:0c:e5:c2:09:47:8b:
c6:d7:2d:71:ce:62:00:bd:22:b0:dc:3e:e6:92:d2:93:a9:31:
e8:09:6e:5f:b4:49:a9:d7:cb:3e:4e:f1:d6:bc:44:81:ee:f1:
4a:5e:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org