Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/yM-ho_2LD7SLrqnQ_uVY9Jsqg8k.roa
File: yM-ho_2LD7SLrqnQ_uVY9Jsqg8k.roa (raw, json)
Hash identifier: NzxgxHeyYnGiOuvk7XrLvdLgHAZq4GcQqcYjCpTCXq4=
Subject key identifier: C8:CF:A1:A3:FD:8B:0F:B4:8B:AE:A9:D0:FE:E5:58:F4:9B:2A:83:C9
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 018572D5C511860AB8D21463F557D71D9243
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/yM-ho_2LD7SLrqnQ_uVY9Jsqg8k.roa
Signing time: Mon 02 Jan 2023 14:14:50 +0000
ROA not before: Mon 02 Jan 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199070
IP address blocks: 91.242.171.0/24 maxlen: 24
91.242.170.0/24 maxlen: 24
91.242.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c5:11:86:0a:b8:d2:14:63:f5:57:d7:1d:92:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Jan 2 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8cfa1a3fd8b0fb48baea9d0fee558f49b2a83c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:45:56:a1:cc:5a:51:34:da:d0:d2:ed:37:c5:
86:aa:b5:f1:89:49:69:88:d9:55:39:b5:f8:83:7b:
78:20:3a:b4:04:6c:d1:e0:b2:c8:59:c0:4d:90:a6:
62:c9:13:8c:b4:56:ba:76:6a:67:e7:1f:c8:57:07:
9d:dd:d9:01:ad:d8:cf:72:59:4a:72:88:01:96:8a:
85:30:9f:51:5a:db:5a:35:25:ec:64:91:13:00:c1:
9b:af:06:9b:9f:ea:21:06:dc:9d:73:fb:86:c9:58:
07:87:25:fe:99:cf:5b:26:2f:9d:06:02:d7:e2:f0:
6e:53:9d:c6:5f:a0:9f:25:1a:e7:34:5d:6c:40:ed:
da:0f:a2:17:5f:63:ff:a3:1d:66:60:a9:b8:79:27:
69:e7:44:1a:6f:14:64:e8:97:6e:42:18:8e:6f:a8:
99:95:d7:dd:ef:b5:73:39:29:44:e3:f3:6b:fa:f0:
19:2e:cc:48:49:97:79:82:b7:ab:8c:00:be:81:1d:
c8:79:52:8f:37:37:ef:f6:2d:28:80:4b:c2:cd:a4:
b6:a0:fa:f7:5e:b6:c6:7b:7a:c9:57:0c:e2:ab:4f:
eb:63:b1:d4:0d:2e:83:47:52:8c:a5:28:d9:5c:97:
a9:89:83:73:ec:17:d7:1d:9b:77:4b:de:92:c0:fb:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:A1:A3:FD:8B:0F:B4:8B:AE:A9:D0:FE:E5:58:F4:9B:2A:83:C9
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/yM-ho_2LD7SLrqnQ_uVY9Jsqg8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.170.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:a4:71:ab:d3:01:df:fb:7c:cf:0d:01:74:68:f8:9c:78:ba:
7e:b9:db:61:cc:2d:83:ef:29:5d:22:d4:fe:4d:2c:05:de:cd:
b4:99:60:f5:a9:a7:de:ef:89:f6:ed:83:4b:74:ac:06:13:dd:
46:8e:c1:40:20:38:7e:06:8d:3b:b1:05:c1:0a:b1:10:f8:5c:
48:bd:0a:96:98:a6:f0:e2:60:7e:4e:35:9b:5c:f5:9a:23:0f:
11:ca:d5:2e:4a:2d:61:a7:de:5a:76:3e:7a:43:ae:e7:25:0d:
d8:16:8b:7a:88:bd:e8:73:7c:81:b8:ab:ce:d1:4e:5a:d1:0a:
1b:e3:84:00:14:d3:45:2e:34:67:51:fc:8a:fe:1a:08:9d:2e:
32:1a:cb:be:d3:91:50:64:59:5a:8b:0d:1c:08:a2:7c:39:68:
ce:33:f2:e5:e6:d7:08:bf:e4:cc:25:46:f9:5c:fd:c4:13:a2:
27:07:54:06:b2:1d:9e:59:67:ae:1c:b5:65:0b:8e:cb:29:bc:
33:f6:80:2e:eb:54:56:bf:1e:03:8b:95:d7:8d:9c:3f:f5:a7:
4c:0f:c0:c3:71:a3:0e:0b:97:6f:b0:7f:6a:60:79:3f:82:c2:
30:88:c3:03:70:d2:b2:29:4a:69:87:17:2b:5e:e0:a2:bb:56:
f1:2e:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:46 2024 by rpki-client on console-fra.rpki-client.org