Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/PT1py1VJCfOEmjQElPeofVVRfdY.roa
File: PT1py1VJCfOEmjQElPeofVVRfdY.roa (raw, json)
Hash identifier: R/jFjgB4kQLOgKM0tEurO6x2EVF4/wE17KfGJ6+A7rs=
Subject key identifier: 3D:3D:69:CB:55:49:09:F3:84:9A:34:04:94:F7:A8:7D:55:51:7D:D6
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187E697ABC2585828B2454BEDAC7E4C8A53
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/PT1py1VJCfOEmjQElPeofVVRfdY.roa
Signing time: Thu 04 May 2023 11:48:32 +0000
ROA not before: Thu 04 May 2023 11:48:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 91.193.254.0/24 maxlen: 24
91.193.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 05:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:97:ab:c2:58:58:28:b2:45:4b:ed:ac:7e:4c:8a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 4 11:48:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d3d69cb554909f3849a340494f7a87d55517dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:b5:1d:f0:25:c0:19:93:64:d3:47:11:d2:
ae:36:3c:29:12:75:ea:17:77:69:5a:74:e7:5b:e8:
73:fc:90:3f:e7:95:ce:0b:96:97:e0:ea:3d:66:7b:
0e:d5:a4:87:10:f4:d7:4e:ad:ac:a2:85:cd:cb:d5:
da:68:70:ee:97:c0:36:23:5d:91:a2:96:1c:70:ce:
f4:8b:43:90:5d:ee:8e:cc:81:7e:b2:17:77:52:72:
0c:c7:a4:e8:10:0c:81:87:31:3a:30:de:4a:e9:65:
ff:d0:86:cd:cc:02:cd:61:24:82:63:26:5d:5d:e9:
ea:6e:03:0a:c5:a2:4d:6a:20:71:0d:cd:3b:7f:44:
35:70:c6:35:e3:04:fb:5e:d2:ad:4b:a7:0e:98:c0:
f3:d4:5d:e2:73:52:10:4a:6a:4c:c5:5f:be:00:79:
3d:37:f8:90:ba:61:82:df:96:f8:28:6c:26:0f:18:
a3:6a:c7:ff:17:55:fe:68:42:34:62:1a:07:ca:21:
1c:79:2e:8a:bd:1b:b5:72:3b:35:99:e4:bd:33:b4:
60:75:43:b7:73:7d:59:fa:d2:60:7e:b8:6a:44:b9:
50:03:b7:4e:4a:0b:68:ec:ec:ca:d6:60:3d:52:ba:
ba:bf:c7:49:e1:7b:50:7d:e1:c7:d4:7c:e0:88:e7:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:69:CB:55:49:09:F3:84:9A:34:04:94:F7:A8:7D:55:51:7D:D6
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/PT1py1VJCfOEmjQElPeofVVRfdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.254.0/23
Signature Algorithm: sha256WithRSAEncryption
12:ab:65:f8:cc:84:4b:d8:63:ce:c6:63:70:86:a1:26:87:fd:
f7:88:e4:ab:24:03:ca:4f:38:de:b5:02:74:5d:a2:33:70:d5:
bf:21:54:bb:1a:21:59:1a:64:43:df:b8:75:9c:7a:0c:2b:14:
89:01:96:7e:67:c3:d4:f5:db:15:50:42:5f:1a:c7:ea:ff:7b:
44:35:b4:48:ce:08:65:5f:96:5a:e8:27:9f:a9:f5:7f:0a:75:
1d:06:60:b2:7f:b5:fe:c3:f8:b7:55:e8:05:21:5d:42:7b:46:
49:d7:50:79:1b:bb:11:2e:2d:24:bc:8e:87:c6:60:76:17:06:
05:c7:ef:55:eb:90:fc:bd:c9:1a:46:e1:16:35:f5:c0:d7:b7:
16:48:1d:59:da:61:f0:9b:79:3e:21:72:b2:da:67:76:54:a0:
7c:75:ed:9e:e7:eb:ae:5e:c8:5f:bb:ef:55:98:eb:fe:b7:74:
95:de:bd:f3:00:98:b4:73:df:23:93:38:9c:a7:56:b0:75:9f:
07:d9:90:57:58:f3:5f:ef:0d:b3:fd:92:d3:68:4c:11:bf:56:
54:cd:9b:56:65:30:e7:9c:34:83:2c:9b:eb:e8:ed:45:6e:4b:
89:57:48:c6:ba:c1:26:23:6c:19:d4:b8:e9:96:dc:0f:8d:7b:
0d:68:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org