Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/Vp9BFawsXtwHoF26txsMKL_uQtI.roa
File: Vp9BFawsXtwHoF26txsMKL_uQtI.roa (raw, json)
Hash identifier: xu1c29OamNCrKTTafB+TwxWxAYNiHIjnSHHm/ElcDWI=
Subject key identifier: 56:9F:41:15:AC:2C:5E:DC:07:A0:5D:BA:B7:1B:0C:28:BF:EE:42:D2
Certificate issuer: /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial: 0185723A05C01B9C612B48B610FDDA795B92
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/Vp9BFawsXtwHoF26txsMKL_uQtI.roa
Signing time: Mon 02 Jan 2023 11:24:43 +0000
ROA not before: Mon 02 Jan 2023 11:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.236.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:05:c0:1b:9c:61:2b:48:b6:10:fd:da:79:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Validity
Not Before: Jan 2 11:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569f4115ac2c5edc07a05dbab71b0c28bfee42d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:3b:96:fc:73:c9:d1:97:de:35:de:5b:91:
39:0d:81:3c:5f:3e:31:77:76:63:4a:f0:98:a1:c5:
0a:b5:7f:af:8b:6b:25:76:ea:02:43:58:bf:46:a1:
aa:74:2e:89:87:f4:b8:ed:53:63:b5:7f:41:ad:46:
05:77:15:2e:ad:4f:0a:70:d7:5f:41:c9:a5:b7:ce:
03:47:ae:68:e2:63:50:97:9a:71:86:d6:95:18:cd:
d8:d4:13:95:55:e9:73:c6:38:20:85:48:b9:33:ca:
70:ce:1f:de:54:02:66:8b:24:dc:37:42:b0:d7:fa:
ab:6e:31:76:fc:e9:52:68:ba:da:c1:47:26:1f:9c:
15:76:f1:af:2a:52:77:9e:f2:0f:94:ad:3d:10:f4:
48:c7:59:61:15:82:40:bd:27:26:01:d5:aa:b8:8e:
14:9c:9a:9b:d1:33:cd:ba:09:f3:f7:84:da:fd:f2:
ca:ce:6c:7d:6e:80:02:cc:2e:6d:f1:b7:7e:d3:2a:
6a:be:e6:b5:2d:17:5e:a0:82:52:f3:f2:50:bb:a6:
f9:66:d8:b6:1e:b3:00:b0:3c:b5:c2:66:1c:f5:61:
23:3e:6d:d9:30:2c:ba:0c:ed:5b:81:94:c5:a1:3f:
c0:e6:b4:0c:8b:0f:a2:b3:2e:95:2d:82:07:5e:ce:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9F:41:15:AC:2C:5E:DC:07:A0:5D:BA:B7:1B:0C:28:BF:EE:42:D2
X509v3 Authority Key Identifier:
keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/Vp9BFawsXtwHoF26txsMKL_uQtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ca:fa:5d:53:1a:97:7a:04:bc:5a:56:db:0b:d6:99:4e:d5:
5a:c8:bb:4a:c3:de:c3:10:62:22:bf:8f:27:b6:7a:96:34:e5:
54:58:43:d5:95:4d:60:53:1b:04:9d:75:5f:af:f5:83:49:0d:
23:49:e5:ae:b9:d2:42:ec:1a:a4:9e:cb:4c:13:4a:a5:9f:c5:
a3:de:37:fd:e7:90:62:6d:30:68:4e:76:70:d2:83:24:8b:04:
bd:0c:dc:ec:95:0f:9e:9e:25:6b:1d:86:24:79:6c:44:3e:c0:
1b:c7:8c:00:6b:bf:c3:77:df:8e:79:b4:30:41:71:c1:78:f4:
e8:5c:ce:5f:c5:5b:5c:91:89:a7:b4:bc:29:7e:7f:ed:dc:b7:
33:28:5d:4d:cb:98:5c:e5:aa:3a:01:06:95:90:9f:7c:c4:8b:
75:3d:80:3c:72:a7:76:1b:62:99:3b:28:34:bf:3c:89:c0:94:
97:02:e2:b0:89:4d:3c:86:70:00:c3:9a:43:c4:85:e5:21:e5:
55:8a:9f:7d:18:1c:6f:e8:1b:83:46:df:bc:80:5a:04:ee:46:
f2:6c:ea:13:f7:8d:1d:ec:2a:b7:36:ba:26:da:16:83:87:bf:
5c:a0:1a:1b:15:1b:68:b7:12:b8:42:a1:8b:35:0d:b7:a5:c1:
f1:16:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:23 2024 by rpki-client on console-ams.rpki-client.org