Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FXV5acitgLL2xiZtKGrn838iTCk.roa
File: FXV5acitgLL2xiZtKGrn838iTCk.roa (raw, json)
Hash identifier: F9WWiGfAQErK2Gm/5eIAgZjXMug0xD72x03Geq857Lk=
Subject key identifier: 15:75:79:69:C8:AD:80:B2:F6:C6:26:6D:28:6A:E7:F3:7F:22:4C:29
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0189592AE87382F7D64EEA561C371E7441A3
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FXV5acitgLL2xiZtKGrn838iTCk.roa
Signing time: Sat 15 Jul 2023 10:48:51 +0000
ROA not before: Sat 15 Jul 2023 10:48:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.213.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:59:2a:e8:73:82:f7:d6:4e:ea:56:1c:37:1e:74:41:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jul 15 10:48:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15757969c8ad80b2f6c6266d286ae7f37f224c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:97:9e:5f:06:5d:b6:5d:7c:0b:21:41:e5:
97:71:82:81:83:54:b4:6f:7d:48:97:e7:f7:55:78:
61:c4:9e:2f:ed:b2:98:6c:b5:89:bb:c5:35:6c:76:
82:45:66:5a:3e:75:03:86:f3:4e:28:a6:85:a9:77:
f4:b9:90:5d:36:5c:5c:c4:77:9c:5a:28:c2:73:4d:
df:99:11:e2:0f:b9:90:44:b1:20:11:34:bc:92:41:
07:9b:0a:0a:0f:ab:d0:7e:af:42:33:e7:29:28:6d:
d1:ff:ab:7f:05:57:bc:36:40:af:3f:f4:95:00:6b:
f9:cb:b9:de:0a:a4:11:10:33:33:a2:08:69:7c:73:
2a:25:51:66:04:c0:48:f4:f7:b7:74:4d:56:15:8a:
91:f5:69:fc:93:36:f7:90:f8:57:b0:f3:1c:b0:67:
9a:5a:6a:2c:45:09:3f:4f:45:54:0a:ad:45:da:5c:
0a:b3:1d:eb:9c:16:d6:3d:83:9b:f6:cf:67:54:b3:
4b:c6:49:fd:47:2a:e0:3e:14:2b:d2:b1:8e:1b:a5:
ff:1d:38:b6:94:83:22:59:d1:19:23:fb:6c:79:be:
ad:69:90:6e:4b:dc:27:64:4c:92:99:a0:84:15:0e:
5e:ba:dc:6b:75:b6:1b:3c:40:3f:18:b9:73:78:27:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:75:79:69:C8:AD:80:B2:F6:C6:26:6D:28:6A:E7:F3:7F:22:4C:29
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/FXV5acitgLL2xiZtKGrn838iTCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ca:0c:f8:f2:62:ae:7b:89:62:c9:ac:ee:8c:cb:b1:35:8a:
73:cb:e4:86:18:56:4e:c3:7c:d1:c0:30:a1:8c:cb:a4:c0:ab:
9d:6c:c0:a3:a9:f3:e0:92:3b:49:ba:21:70:3d:96:f5:90:99:
71:4c:4b:f8:43:91:62:48:94:74:65:56:d2:85:9d:b5:25:08:
7d:9c:96:bb:2b:94:8d:36:a8:1f:9e:71:14:f7:19:ae:3d:a4:
fa:31:63:2b:97:35:4c:82:3e:ca:fb:16:ab:bd:fc:42:c3:5c:
f0:1d:cd:41:98:7c:39:44:cd:2a:1c:ec:43:99:41:64:fc:9f:
fb:88:e9:c8:df:72:b2:86:b7:80:69:7b:a7:e7:e5:4f:db:5b:
da:35:21:4c:7a:c6:a9:77:2e:09:c3:21:a8:e4:0e:d5:10:d4:
c4:51:7f:72:99:e1:8f:d8:21:ac:bd:d0:90:93:0b:52:c2:18:
ff:e7:98:55:7c:2b:62:7d:cd:92:7c:91:96:77:e1:ee:50:39:
8c:83:bb:a5:eb:c6:62:9d:66:11:cd:0e:b3:f0:94:ac:cf:f9:
5b:53:7a:bb:e9:b9:c4:70:f2:c7:f8:0d:07:ae:ec:fb:f1:c6:
7d:ed:ec:31:54:2c:dd:d0:0d:94:eb:cb:8e:19:7b:68:3e:9a:
be:f6:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:04 2024 by rpki-client on console-fra.rpki-client.org