Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Na4Ymw2Ne0ka8h6_a2kgGrohrRA.roa
File: Na4Ymw2Ne0ka8h6_a2kgGrohrRA.roa (raw, json)
Hash identifier: fXmr09wGqQA1wFgrhXV3Sl0WPzVCTFVviDC2SksFhC4=
Subject key identifier: 35:AE:18:9B:0D:8D:7B:49:1A:F2:1E:BF:6B:69:20:1A:BA:21:AD:10
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 0185708CCD30D94359AED1C464D4534659A6
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Na4Ymw2Ne0ka8h6_a2kgGrohrRA.roa
Signing time: Mon 02 Jan 2023 03:35:53 +0000
ROA not before: Mon 02 Jan 2023 03:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197929
IP address blocks: 91.230.6.0/23 maxlen: 24
94.158.24.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:cd:30:d9:43:59:ae:d1:c4:64:d4:53:46:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Jan 2 03:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35ae189b0d8d7b491af21ebf6b69201aba21ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:b1:8a:c8:8e:3f:15:40:d3:f6:55:99:a7:
e9:af:5e:89:da:3b:8f:f0:1d:f9:d3:d3:a9:68:6d:
c7:97:d8:2f:ee:54:f0:50:cd:f7:cf:d0:e6:d5:2f:
78:22:69:1b:c6:b3:87:f2:63:69:aa:8c:60:cd:02:
8d:05:24:df:64:e7:80:12:25:77:80:15:dd:cc:da:
d0:77:71:cf:98:37:05:fd:c7:d8:3a:a1:6c:81:d4:
37:c3:ce:b0:ce:3f:ca:a8:18:ab:1b:ec:e7:85:48:
ce:e1:69:16:44:df:6d:9c:64:09:ed:20:e7:28:e0:
31:10:23:12:8f:41:40:2b:ff:1d:f8:34:c3:50:a1:
5c:6d:0d:e1:ad:f8:cd:5d:05:35:91:a9:d8:bb:0f:
81:51:8d:d4:61:6f:51:4f:e8:43:45:ec:98:c9:fc:
cb:33:d3:95:2d:d4:93:c2:30:59:ab:9b:6e:9b:40:
ea:0c:ec:ff:a9:ba:c9:c8:a1:39:6b:d6:b3:32:cf:
58:b9:ee:20:e4:66:d0:6f:fd:9f:a9:2d:d6:f9:85:
b9:d4:5d:e0:4f:ae:4b:b2:ff:bb:76:89:ec:b8:f3:
b5:2b:a2:3b:ea:b5:03:19:30:cf:c0:be:fc:2e:2c:
bb:cb:23:20:34:07:16:9d:29:4b:1b:41:bd:cd:3d:
85:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:18:9B:0D:8D:7B:49:1A:F2:1E:BF:6B:69:20:1A:BA:21:AD:10
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Na4Ymw2Ne0ka8h6_a2kgGrohrRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.6.0/23
94.158.24.0/22
Signature Algorithm: sha256WithRSAEncryption
42:d3:34:4f:b1:35:56:c5:68:04:68:6b:e3:56:8b:d1:82:49:
5b:cb:02:9d:60:45:f2:08:68:1a:1c:37:f3:95:c5:88:ab:15:
1e:de:e0:79:7b:76:4d:6b:cd:19:7b:a3:3e:dd:15:72:38:fd:
d1:db:4c:5b:45:03:c6:f9:6b:c5:9c:54:4a:3f:e8:07:88:76:
5b:f7:39:2c:7a:19:57:0f:fb:08:61:2f:ae:20:c7:4a:d7:db:
58:34:a3:2a:2f:0c:52:9f:c7:37:cf:df:e7:80:70:4f:56:b6:
0f:2d:41:91:03:e8:f0:17:07:17:05:2b:2f:7e:1c:28:6d:2d:
8d:51:db:e6:11:9b:7c:cf:9c:dd:76:0c:a7:4a:b4:ec:9e:5a:
d7:89:d9:aa:88:bb:c6:df:fa:94:7e:72:58:ea:f4:f2:b7:8e:
0e:60:4c:7c:c5:63:ea:a9:dd:ef:78:1a:58:88:ed:98:ed:38:
ee:ff:7b:7b:16:44:87:99:fc:3c:6e:38:d1:27:f7:fb:7b:14:
0b:42:22:05:bc:c4:26:9d:e3:23:e5:3e:d0:f6:56:9d:77:05:
7c:36:b1:1e:84:46:ad:85:43:69:f7:50:09:c4:6d:9b:37:1f:
97:13:2d:e6:2e:9f:6e:a5:c7:47:1d:3c:5b:29:d1:47:23:a5:
b6:83:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:10 2024 by rpki-client on console-fra.rpki-client.org