Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/AvzI2gg5uRV0c7LqooloQT5c2xY.roa
File: AvzI2gg5uRV0c7LqooloQT5c2xY.roa (raw, json)
Hash identifier: D+BPLjQ9gEwmWiQVd+Qdr7h89qPEJLWo/KD/TET51KE=
Subject key identifier: 02:FC:C8:DA:08:39:B9:15:74:73:B2:EA:A2:89:68:41:3E:5C:DB:16
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 018F70A20348274CEE11F4F9A59B44E06844
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/AvzI2gg5uRV0c7LqooloQT5c2xY.roa
Signing time: Mon 13 May 2024 06:26:56 +0000
ROA not before: Mon 13 May 2024 06:26:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58322
IP address blocks: 91.106.32.0/22 maxlen: 22
91.106.32.0/23 maxlen: 23
91.106.32.0/24 maxlen: 24
91.106.33.0/24 maxlen: 24
91.106.34.0/23 maxlen: 23
91.106.34.0/24 maxlen: 24
91.106.35.0/24 maxlen: 24
91.106.40.0/21 maxlen: 21
91.106.40.0/22 maxlen: 22
91.106.40.0/23 maxlen: 23
91.106.40.0/24 maxlen: 24
91.106.41.0/24 maxlen: 24
91.106.42.0/23 maxlen: 23
91.106.42.0/24 maxlen: 24
91.106.43.0/24 maxlen: 24
91.106.44.0/22 maxlen: 22
91.106.44.0/23 maxlen: 23
91.106.44.0/24 maxlen: 24
91.106.45.0/24 maxlen: 24
91.106.46.0/23 maxlen: 23
91.106.46.0/24 maxlen: 24
91.106.47.0/24 maxlen: 24
91.106.48.0/24 maxlen: 24
91.106.50.0/24 maxlen: 24
109.61.4.0/22 maxlen: 22
109.61.4.0/23 maxlen: 23
109.61.4.0/24 maxlen: 24
109.61.5.0/24 maxlen: 24
109.61.6.0/23 maxlen: 23
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 07:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:70:a2:03:48:27:4c:ee:11:f4:f9:a5:9b:44:e0:68:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: May 13 06:26:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02fcc8da0839b9157473b2eaa28968413e5cdb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:c8:6f:56:a5:df:5a:0d:19:fc:f9:ce:e2:
6e:04:84:27:75:51:d6:46:8b:00:94:2e:1f:7b:74:
0f:d3:08:d0:48:a3:54:4e:82:5d:9c:3c:82:2d:b4:
d1:b6:9e:e7:96:43:ff:61:bf:48:50:05:ec:8b:9c:
7f:ec:7b:a6:4a:c1:8b:53:42:d1:87:14:a0:98:f9:
9b:d6:ed:ef:51:08:d0:fe:79:0c:fc:5b:eb:f5:93:
76:d5:1e:f9:4d:36:50:1f:b6:e0:b5:b2:05:a1:b0:
f8:08:b1:f4:ec:a0:98:04:18:91:52:96:0b:bb:60:
6a:90:36:26:e8:f2:d8:48:cd:7a:9b:6a:12:36:d1:
33:27:e3:ad:f8:d3:1e:e2:34:ae:11:86:16:f9:47:
42:8a:9e:9a:1c:70:df:e7:ce:fd:81:02:02:1b:ad:
c7:f2:20:c0:2b:24:7e:c3:63:ca:3f:73:46:5c:c9:
04:b1:cb:b4:f0:d5:82:71:a8:fb:db:dd:89:42:3f:
b1:d6:3b:a4:f8:d2:62:6a:6f:56:04:0f:3e:7f:fc:
23:00:ab:a9:77:b7:48:4c:4a:ed:cc:36:c7:74:6e:
a3:80:6e:cb:92:47:79:7d:d2:60:e3:57:f5:c2:77:
05:e3:23:d3:9f:ed:d7:fb:97:19:5b:ec:4c:7d:40:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FC:C8:DA:08:39:B9:15:74:73:B2:EA:A2:89:68:41:3E:5C:DB:16
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/AvzI2gg5uRV0c7LqooloQT5c2xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.32.0/22
91.106.40.0-91.106.48.255
91.106.50.0/24
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:0d:01:d4:f7:bd:e4:82:64:83:27:c0:96:ec:17:fe:81:53:
b0:89:18:13:f9:35:37:6b:06:a3:f7:d8:6e:92:2e:30:95:9c:
96:d3:ae:8b:fa:68:0b:dd:3b:13:c2:e3:af:0b:1a:05:29:19:
dd:3b:5d:e8:c2:b0:8b:bd:81:b3:91:e0:cf:0f:c0:0c:cd:f3:
23:69:7e:6e:ce:26:49:24:90:6e:95:13:92:46:21:8c:2a:73:
63:3c:9b:cc:ff:d2:f8:a9:1b:bb:98:39:6d:65:a3:c3:81:9d:
7c:3a:b9:14:7d:55:60:77:8a:20:ac:50:07:10:6c:e0:07:99:
e3:a1:76:2f:40:42:e1:3f:e4:d2:07:7a:bc:f1:21:f4:c9:42:
5d:04:b1:49:80:b9:5e:e0:e7:a6:37:cd:95:0a:7c:04:64:1b:
55:47:31:49:b8:d1:7f:51:47:84:8b:22:68:bc:fe:f2:5a:5d:
e6:cf:ba:f4:cf:3a:dc:40:6b:3b:62:fd:0a:31:e5:1c:b1:dc:
dc:55:0c:d2:c6:46:c4:8a:1b:ae:3f:13:09:79:fc:d9:db:60:
13:20:93:e2:5d:3a:21:c5:cb:b1:a9:10:6b:83:94:79:a0:85:
e7:59:1a:8b:bc:0e:99:36:98:c4:8a:f0:7a:46:7f:00:5b:31:
b2:9c:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:02 2024 by rpki-client on console-fra.rpki-client.org