Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9uGf9bhLA9rnbgj0EmcX-soP2qo.roa
File: 9uGf9bhLA9rnbgj0EmcX-soP2qo.roa (raw, json)
Hash identifier: 4igAPw8LvKaHXI4NW2sBWjMr4jAmSGs92HQIPd4Jyjc=
Subject key identifier: F6:E1:9F:F5:B8:4B:03:DA:E7:6E:08:F4:12:67:17:FA:CA:0F:DA:AA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A3AB49ECE38D4149827E10EAD8A0C
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9uGf9bhLA9rnbgj0EmcX-soP2qo.roa
Signing time: Mon 02 Jan 2023 12:34:51 +0000
ROA not before: Mon 02 Jan 2023 12:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133752
IP address blocks: 91.132.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:3a:b4:9e:ce:38:d4:14:98:27:e1:0e:ad:8a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6e19ff5b84b03dae76e08f4126717faca0fdaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:1c:0c:60:25:84:0d:35:69:d6:20:1b:e4:
a6:20:1d:92:4a:7c:13:1d:f2:23:39:02:9b:6b:31:
b2:8b:e6:07:59:5d:71:ac:9f:05:0a:e7:c0:80:5a:
d7:ab:42:d8:55:80:8b:7d:9c:c8:c7:6a:05:1c:e3:
8b:54:dd:d8:d5:a4:9f:0a:41:a9:c8:65:9f:f5:d3:
0d:74:fe:f2:d0:82:99:73:76:b6:55:90:11:77:55:
e6:a9:bf:84:85:06:e9:f0:7c:ac:0a:ce:8d:6f:4e:
f6:ab:15:5a:23:4c:de:95:b0:73:97:6c:9f:df:a7:
2e:1a:3f:59:3d:ff:ec:eb:52:fc:25:e9:ce:26:0b:
1e:d9:ce:14:3b:0c:51:6f:a9:03:a5:f7:d0:94:d9:
87:42:5c:af:70:56:4a:9c:a5:a2:4a:7d:e6:fd:a6:
ca:69:3e:e8:74:7f:45:bc:cd:fe:2e:d6:03:b4:49:
6f:ec:b1:a4:7e:c4:20:c1:3d:34:c4:57:0f:03:c4:
eb:30:d6:1d:13:02:c8:c9:a5:4c:22:da:5b:c2:a0:
5c:6c:ec:1a:fd:1d:a5:f2:83:a6:40:e2:4a:ef:36:
23:e1:17:01:64:42:76:74:30:62:b0:f3:38:80:41:
55:9b:22:8d:80:f5:ba:3d:e9:8f:a8:9f:9e:4d:da:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:9F:F5:B8:4B:03:DA:E7:6E:08:F4:12:67:17:FA:CA:0F:DA:AA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9uGf9bhLA9rnbgj0EmcX-soP2qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d8:f8:52:68:7b:79:21:12:90:dc:bc:2f:2c:38:b2:1c:92:
13:fe:15:14:de:d5:4b:5f:b0:1b:56:a3:da:9e:47:74:2a:8d:
d3:8c:02:0e:b8:8e:88:5b:41:0a:7c:09:c6:80:df:00:e5:80:
db:b0:b6:b7:60:71:92:91:a0:39:10:19:e6:5d:c3:fb:c1:cf:
c4:56:00:a3:08:b4:94:53:1d:3b:1f:41:7e:1e:96:e4:82:bf:
a3:17:b6:71:cf:51:ef:87:07:21:3b:cc:99:d1:b5:1c:bc:8f:
f6:6f:f3:6f:3d:f2:3e:62:87:61:d4:19:ab:1d:48:2f:bb:14:
b4:c9:d5:da:ea:62:3a:ca:dc:29:92:d3:84:27:d9:8f:0f:47:
28:7f:19:a2:0b:1e:5c:ba:40:95:6f:23:1a:d9:93:e2:82:0e:
29:53:0a:00:f9:f9:1c:a2:5a:d8:12:be:06:9f:30:f6:40:54:
00:52:1f:60:84:13:96:b9:8d:2e:bf:5a:3d:c2:55:78:31:0a:
86:4b:7b:ac:1d:1a:b8:15:ac:72:45:9b:89:2c:6c:6f:6b:f0:
b7:ac:cc:ef:3a:0b:bd:ad:fc:ec:2e:9f:46:da:c1:29:e6:54:
3d:54:7f:50:2d:69:cc:9c:20:52:8f:3b:96:18:d8:74:5b:ad:
57:1a:b4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:47 2024 by rpki-client on console-fra.rpki-client.org