Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kyyu5kMWwj7e0gYLuWmsLcYWhBM.roa
File: kyyu5kMWwj7e0gYLuWmsLcYWhBM.roa (raw, json)
Hash identifier: AKoF9XbNn7mhgVfhSiM94acHXbagH7Zaw42+cvVV+jA=
Subject key identifier: 93:2C:AE:E6:43:16:C2:3E:DE:D2:06:0B:B9:69:AC:2D:C6:16:84:13
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 018B5D6A6621DFF67CD24A52CBBBC01D5391
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kyyu5kMWwj7e0gYLuWmsLcYWhBM.roa
Signing time: Mon 23 Oct 2023 16:42:15 +0000
ROA not before: Mon 23 Oct 2023 16:42:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 91.90.125.0/24 maxlen: 24
91.90.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:6a:66:21:df:f6:7c:d2:4a:52:cb:bb:c0:1d:53:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Oct 23 16:42:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=932caee64316c23eded2060bb969ac2dc6168413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:20:a0:a5:b6:ae:01:17:40:64:34:34:a0:
7e:81:4e:92:dc:32:92:da:3a:ee:34:71:42:85:4f:
a8:cc:56:65:b6:6a:48:fa:74:bf:69:8d:b2:44:55:
80:8b:a1:55:18:76:72:00:fa:fa:d9:47:c5:3e:a2:
a3:9a:86:d4:bb:ca:64:a9:62:30:22:eb:20:c1:21:
fa:08:0d:5b:71:8f:5c:89:d8:b7:50:bf:26:77:88:
d1:ff:82:27:64:e5:88:f8:96:be:2e:0c:dd:60:39:
2d:e4:7b:fa:a9:b9:8a:73:8b:a3:29:67:33:91:62:
61:5a:66:fd:76:ea:c9:fc:fa:41:7a:f6:fa:4c:54:
17:6e:a6:c8:b6:44:99:db:90:f1:de:61:4b:a2:50:
f7:ce:3a:d3:32:4a:bc:11:18:1d:84:34:d1:7d:e8:
13:8c:ca:73:97:93:1e:96:60:14:b4:7a:87:45:5c:
77:05:af:4c:d0:42:49:52:93:df:38:32:62:b8:32:
cb:6e:ac:d2:a2:24:9e:27:fa:b4:23:b6:4d:81:79:
2a:2a:64:5b:98:90:e5:61:87:88:12:1c:9f:9e:05:
e7:cb:99:62:2a:05:89:31:80:2c:e1:27:08:ed:13:
42:4b:df:58:ba:40:18:28:46:62:fc:84:7d:b4:c9:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:AE:E6:43:16:C2:3E:DE:D2:06:0B:B9:69:AC:2D:C6:16:84:13
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kyyu5kMWwj7e0gYLuWmsLcYWhBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.125.0/24
91.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
34:96:38:00:7e:dd:3f:ef:82:bb:a4:2b:b2:00:f0:e1:8a:05:
73:92:ab:d5:fb:64:3d:8c:05:95:d7:e0:7d:7b:bc:1b:bc:ea:
10:03:35:f4:e0:42:a2:a4:d6:02:03:37:cf:4f:2a:65:50:e0:
c0:be:99:52:34:ab:bd:85:8a:5e:60:77:f0:14:b2:9f:bd:74:
e5:68:4d:d1:00:50:59:7d:ba:e5:45:da:7e:17:ae:61:e3:19:
8a:5c:05:96:21:8b:66:77:fb:20:1e:02:41:5d:b0:89:25:de:
c3:01:9b:f5:f0:cb:f3:1e:28:14:3a:39:a9:7e:37:ae:a6:7f:
ae:1e:a2:a4:4c:51:8f:a9:85:91:2f:cc:b5:e6:0b:dc:14:d9:
06:52:74:50:59:af:21:fc:4f:35:12:58:15:07:6a:83:57:72:
4c:41:34:85:26:78:69:12:ec:29:db:c5:f3:38:2b:17:db:3f:
54:93:e7:9b:de:5d:aa:a9:44:7b:d2:ff:7e:c4:98:1c:56:19:
9a:ff:d0:27:12:9c:a5:77:60:e4:9e:c8:ee:93:d7:be:e9:ed:
71:2a:d6:95:33:55:67:ec:6a:71:75:d9:bc:7e:f1:1f:e7:8e:
c7:aa:32:dd:b7:4f:8f:24:62:7f:d3:26:36:37:20:62:1a:d6:
a6:ae:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:50 2024 by rpki-client on console-fra.rpki-client.org