Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/NdRvqR2ZwnxHI-NJFmeiZSRJlKc.roa
File: NdRvqR2ZwnxHI-NJFmeiZSRJlKc.roa (raw, json)
Hash identifier: XAt6qHhWbUVTO5locJtnLUup0YkWlhI/hv4eo7NiNBk=
Subject key identifier: 35:D4:6F:A9:1D:99:C2:7C:47:23:E3:49:16:67:A2:65:24:49:94:A7
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0186B5AA940F767435277C72BF3C4BD62D27
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/NdRvqR2ZwnxHI-NJFmeiZSRJlKc.roa
Signing time: Mon 06 Mar 2023 06:45:00 +0000
ROA not before: Mon 06 Mar 2023 06:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 91.193.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Mar 2023 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b5:aa:94:0f:76:74:35:27:7c:72:bf:3c:4b:d6:2d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Mar 6 06:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35d46fa91d99c27c4723e3491667a265244994a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:90:79:96:ec:75:e8:10:9a:22:de:52:1f:
f2:5c:95:66:7d:f1:78:4d:e3:62:0e:4f:26:5f:2b:
54:09:ea:2d:cf:03:ca:c8:cd:f7:09:4c:ae:bd:98:
36:07:ee:7d:44:09:76:c2:be:c5:2c:12:f5:f2:29:
cb:0f:db:06:93:d3:f8:64:58:fe:ab:10:31:e6:28:
f3:ed:7f:ae:ea:4f:4f:1a:9d:e5:8b:b0:12:11:05:
09:1d:a8:34:f3:8b:75:f0:1c:44:eb:9a:92:71:3a:
ea:d6:d8:8f:b6:ba:1c:28:2b:3a:c8:0c:c8:cd:29:
ee:0f:2b:2c:fa:5c:b3:77:22:85:ac:87:19:f9:cb:
97:88:56:b1:6f:0f:3f:bb:0b:e1:94:19:d7:9a:d4:
44:ef:65:c0:5b:f1:58:d0:2c:96:34:f8:d6:f8:a5:
a6:92:21:48:39:8a:40:10:89:89:38:72:a6:8f:97:
ec:d8:b0:22:64:e6:a6:70:9e:e0:6f:4c:4f:7b:4c:
38:4d:aa:d2:05:af:34:95:84:09:32:62:fb:fc:9d:
2e:72:18:aa:b6:7b:30:c5:5c:60:db:7d:19:5c:5b:
3c:8b:e6:d0:28:5a:f1:b3:67:ee:39:d5:17:fb:f2:
b9:d5:c9:2f:df:4e:f5:68:d2:7b:62:b3:13:34:be:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:6F:A9:1D:99:C2:7C:47:23:E3:49:16:67:A2:65:24:49:94:A7
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/NdRvqR2ZwnxHI-NJFmeiZSRJlKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6a:32:a6:6b:87:27:3f:0d:82:84:bb:82:50:50:06:a2:ce:
55:db:95:1a:5c:78:34:c7:29:eb:81:33:48:e1:f6:85:fb:12:
e2:38:98:a4:e8:a5:10:82:58:49:5c:52:4b:fe:1c:a0:26:b9:
88:40:99:dd:4d:05:e5:6c:62:56:0b:5b:1d:35:15:6e:15:34:
82:fb:5d:91:d2:49:fe:4c:b9:2e:17:54:2b:17:52:bc:aa:71:
dc:8b:14:0b:53:13:ac:c0:71:23:43:e4:91:86:97:6e:d4:81:
16:9d:e3:2c:86:7a:53:fd:d1:40:69:04:09:4b:ae:73:cd:ce:
1c:0f:e8:15:eb:86:55:ff:86:77:6b:7a:35:fa:3f:51:f1:4f:
34:d6:1c:ec:32:a3:f4:cb:6a:4e:07:87:de:a9:41:3f:90:74:
ff:41:7c:f0:bc:4c:96:08:d7:59:9a:31:4e:59:e1:9d:8a:82:
67:5b:73:2b:18:74:6f:02:ff:e0:f6:97:7c:0e:06:71:c2:7f:
0a:94:5f:31:da:d1:33:17:5b:4f:d2:be:91:13:92:4c:1b:db:
4e:be:9b:25:85:c6:4b:19:d8:4c:29:39:61:4a:62:64:e2:03:
1f:e0:7e:cf:b2:5e:1b:bf:e2:44:62:91:fb:0d:0c:7d:35:d0:
fd:aa:4e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org