Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/COjf4WPnIy-3Y0O6TFf3IaI51Nc.roa
File: COjf4WPnIy-3Y0O6TFf3IaI51Nc.roa (raw, json)
Hash identifier: L6DsjTyCY9gROivDeUXiStEFFEJKufsB4hXa8fSUnkA=
Subject key identifier: 08:E8:DF:E1:63:E7:23:2F:B7:63:43:BA:4C:57:F7:21:A2:39:D4:D7
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 018570F0893AE1B7A274AF2D3066676C2CAE
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/COjf4WPnIy-3Y0O6TFf3IaI51Nc.roa
Signing time: Mon 02 Jan 2023 05:24:49 +0000
ROA not before: Mon 02 Jan 2023 05:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58307
IP address blocks: 91.227.61.0/24 maxlen: 24
91.229.210.0/24 maxlen: 24
2001:7f8:6b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:89:3a:e1:b7:a2:74:af:2d:30:66:67:6c:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 2 05:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08e8dfe163e7232fb76343ba4c57f721a239d4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6d:c4:32:ac:ea:4c:00:a4:00:98:53:86:6b:
d4:70:33:7f:38:30:28:44:5b:36:44:e9:54:bd:4e:
62:a0:28:1d:2f:b8:4b:ed:df:ab:be:60:b2:e6:97:
f4:69:fc:25:48:32:5f:59:89:cf:ef:f6:8b:26:77:
13:12:17:a4:6e:2a:e3:ad:94:96:5f:c2:71:2d:b0:
ca:a6:38:ec:42:4b:32:c8:e4:67:94:10:1d:d3:93:
05:75:21:7d:69:27:cd:ce:4e:7e:3d:9c:5a:6d:af:
20:27:eb:88:d9:8c:de:5f:36:8e:29:8b:09:29:ed:
4c:4b:49:52:bd:8d:04:08:e3:af:5c:9f:fe:29:c9:
04:73:36:67:b5:5e:2b:16:66:0b:12:f0:75:a7:b7:
5e:3d:b8:e6:7e:95:5d:5b:19:f5:7c:db:ac:6d:91:
5c:23:48:01:0b:79:bd:b7:d4:02:c6:dd:79:4c:08:
b1:93:97:e9:6a:4f:e6:bb:a1:86:97:0a:ee:fc:0d:
52:26:fb:30:6b:ac:32:b1:7e:27:03:97:f9:72:1d:
22:2a:17:25:81:be:3f:88:e5:f6:dc:e0:19:9a:42:
40:07:55:2c:57:f3:69:b9:99:3a:81:9d:60:ba:b6:
5c:2e:f7:72:3e:79:88:f6:03:86:62:34:ae:9b:d7:
d1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E8:DF:E1:63:E7:23:2F:B7:63:43:BA:4C:57:F7:21:A2:39:D4:D7
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/COjf4WPnIy-3Y0O6TFf3IaI51Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.61.0/24
91.229.210.0/24
IPv6:
2001:7f8:6b::/48
Signature Algorithm: sha256WithRSAEncryption
d0:2e:aa:6f:24:f8:b8:f3:5e:a1:4d:c6:bc:32:71:19:91:af:
0a:33:30:c5:3f:94:18:55:86:b9:df:0e:43:78:5f:27:f2:9a:
0e:6b:ff:a1:8d:60:7c:80:96:cd:5c:de:28:51:1b:da:62:62:
6f:83:99:c0:4d:f0:a9:03:68:e8:9d:06:f1:8c:90:95:8f:39:
ef:8b:0c:62:25:e8:c9:eb:7e:c7:96:b5:69:d3:69:48:37:37:
1e:99:0b:5c:4f:f9:9b:54:34:84:8b:84:88:25:a2:70:07:74:
bd:a3:c4:9f:58:50:67:80:ee:d8:88:94:29:65:a8:99:37:a6:
5b:f0:6a:83:1c:c5:ee:59:eb:7c:42:66:ce:0c:b3:4e:74:79:
1a:7b:4f:7a:42:4f:6e:ab:e1:dd:63:8b:a2:4d:74:e2:75:ba:
79:5d:0a:2d:a3:ac:68:87:32:12:4a:8a:1b:1c:67:73:c0:80:
af:b1:64:fe:89:57:50:d6:af:01:30:57:3e:1a:4e:95:8f:d2:
95:a0:0e:ff:a3:92:b5:cc:69:52:9e:12:ff:09:e8:ce:ab:fe:
79:05:68:3c:eb:8a:89:5c:ab:cd:a9:43:3c:d9:9d:99:17:41:
ec:b2:cc:68:53:4a:92:3f:e1:f6:d5:4e:4d:fd:62:72:bd:5b:
85:40:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org