Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/3RVPZ99E4J7Eizljk90b8RpK7Ko.roa
File: 3RVPZ99E4J7Eizljk90b8RpK7Ko.roa (raw, json)
Hash identifier: rq408BUXHQfWKVtDQ6Sq0CPNahXShb/c/LyQQzf5wFg=
Subject key identifier: DD:15:4F:67:DF:44:E0:9E:C4:8B:39:63:93:DD:1B:F1:1A:4A:EC:AA
Certificate issuer: /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial: 01869EC9787B89AB913E047EDD9FD0812FFD
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/3RVPZ99E4J7Eizljk90b8RpK7Ko.roa
Signing time: Wed 01 Mar 2023 20:07:29 +0000
ROA not before: Wed 01 Mar 2023 20:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49256
IP address blocks: 91.214.13.0/24 maxlen: 24
91.214.12.0/24 maxlen: 24
91.214.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:c9:78:7b:89:ab:91:3e:04:7e:dd:9f:d0:81:2f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Validity
Not Before: Mar 1 20:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd154f67df44e09ec48b396393dd1bf11a4aecaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:b7:d0:0c:68:99:f7:04:4e:7d:60:8d:ae:
22:d4:1e:9e:65:26:67:53:ce:e7:fc:3b:e4:e2:8a:
d7:35:12:6b:ed:b9:97:d3:0f:9c:23:76:4f:3b:b4:
b8:ef:35:f4:da:fb:b2:99:ee:3d:df:3b:15:a9:e7:
1c:1c:87:eb:7c:75:4c:f3:61:53:63:d7:0a:d7:3c:
a9:dd:45:64:4c:73:85:65:06:ad:ae:fc:a2:3a:8a:
ec:c8:b3:c9:62:94:0a:72:54:ab:a5:5c:58:f1:9c:
6e:61:63:e3:40:cb:92:0c:15:ff:e9:77:58:5b:0d:
4b:66:b0:33:6f:66:a3:0c:38:6e:96:cb:7a:46:94:
c4:a8:c4:93:32:2c:d1:51:a8:7f:c5:25:ea:aa:ea:
fc:6c:df:9f:d5:e8:ad:2f:f5:3e:a4:d0:bc:a2:ac:
97:0d:15:20:3a:ef:99:94:fb:79:4a:33:a0:4f:e8:
2a:37:0b:ce:10:b0:ee:d4:48:bd:b0:63:a5:f9:a7:
65:3b:f9:c8:f7:02:75:08:dc:a5:91:50:7d:a7:ea:
a4:ec:a2:b9:04:36:4b:29:e5:62:a8:96:78:c5:81:
85:13:cf:86:c3:ec:e6:42:64:92:f6:56:f6:ec:9b:
8f:95:43:56:17:41:28:e1:fc:6a:07:e6:fc:2e:13:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:15:4F:67:DF:44:E0:9E:C4:8B:39:63:93:DD:1B:F1:1A:4A:EC:AA
X509v3 Authority Key Identifier:
keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/3RVPZ99E4J7Eizljk90b8RpK7Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.12.0-91.214.14.255
Signature Algorithm: sha256WithRSAEncryption
75:2f:56:1c:54:4e:d5:3b:79:bb:dc:28:b5:cb:08:7d:a4:78:
35:b6:82:a6:0a:75:56:07:21:17:5a:6d:0b:46:88:af:c8:40:
6e:2e:03:ab:a2:d4:ee:74:f7:76:6e:2c:d8:d5:ec:50:7f:e2:
4e:eb:f5:8a:9f:3f:7b:ee:65:eb:ee:cd:6d:84:f7:c9:37:3b:
42:81:a9:0f:0b:94:2d:ed:ae:43:b0:8f:db:26:c9:3b:03:4d:
9a:91:21:ec:e8:6f:dd:01:b0:2e:89:2d:fc:91:48:04:54:3f:
dc:70:00:38:72:b5:5b:6a:80:33:15:cf:3e:1b:45:5c:bf:6d:
69:e7:cd:62:f3:d8:5b:ae:d6:7e:af:7c:8a:3d:83:6a:1a:95:
81:08:40:83:91:c1:21:b5:8d:76:11:24:16:25:3f:03:a3:0f:
0d:ef:c1:6a:72:37:b0:8d:d1:fb:7c:fd:2b:9c:ac:2b:4f:87:
84:1e:a7:ea:55:03:53:ab:ce:33:1b:13:4f:b6:12:d1:1f:3e:
18:59:b1:19:a8:88:0d:42:f2:10:7b:d1:f5:d2:66:90:c4:af:
eb:e1:df:2c:df:77:12:78:79:51:96:7d:40:c4:d9:e6:d2:13:
56:6b:d9:c2:84:13:60:90:4c:d6:78:b8:e6:bb:33:30:df:cd:
b9:45:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:05 2024 by rpki-client on console-fra.rpki-client.org