Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/D8V-excNB7n2tEu1sRNBzHavlEg.roa
File: D8V-excNB7n2tEu1sRNBzHavlEg.roa (raw, json)
Hash identifier: k7zi2QJ+ZiwCQsAXujYr8Lg0RMdGMX1+5NBhwna2PAg=
Subject key identifier: 0F:C5:7E:7B:17:0D:07:B9:F6:B4:4B:B5:B1:13:41:CC:76:AF:94:48
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 018570F087ADC7617998EA96A8974CA2A161
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/D8V-excNB7n2tEu1sRNBzHavlEg.roa
Signing time: Mon 02 Jan 2023 05:24:49 +0000
ROA not before: Mon 02 Jan 2023 05:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39793
IP address blocks: 91.229.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:87:ad:c7:61:79:98:ea:96:a8:97:4c:a2:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 2 05:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fc57e7b170d07b9f6b44bb5b11341cc76af9448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:56:49:c0:88:bb:ac:59:17:d6:c1:a3:86:
7f:fc:cb:ff:4b:f1:44:45:52:ff:18:a3:ac:b4:98:
d0:68:11:6d:2b:87:db:8a:6f:38:71:fe:aa:a0:b5:
98:a1:94:ec:ed:67:ed:97:9d:5e:17:fa:94:44:99:
b4:3a:4d:ba:cf:09:16:de:95:ee:96:79:d8:04:94:
54:ee:25:6f:55:ed:7b:4e:19:51:0b:57:93:da:4a:
06:2a:80:11:e6:d5:d3:d2:39:c5:1c:5a:a6:f8:15:
b0:36:38:88:53:f8:15:53:60:ed:e4:14:8e:97:4a:
a3:30:e8:87:43:8e:43:14:5e:48:c4:c6:78:fc:ba:
08:8f:44:1c:59:f6:fb:ea:c9:77:32:a9:a8:93:0e:
e0:27:e8:b2:f0:c1:c1:a8:1b:36:9b:89:7f:ce:fe:
59:79:d3:19:19:ce:0c:76:ce:82:8b:2c:6c:c4:4f:
d6:9e:e8:0f:75:99:30:0b:89:bc:77:93:9a:73:9c:
b9:ae:94:1a:98:7a:eb:48:3e:f2:8f:62:3b:eb:eb:
4f:a3:21:2c:71:16:ed:34:b4:7f:81:68:60:fd:e0:
06:16:73:bc:15:d7:6e:a5:e8:dc:59:68:99:1a:3d:
37:ff:1a:eb:91:61:28:9f:df:2d:04:17:6d:be:b0:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C5:7E:7B:17:0D:07:B9:F6:B4:4B:B5:B1:13:41:CC:76:AF:94:48
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/D8V-excNB7n2tEu1sRNBzHavlEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.185.0/24
Signature Algorithm: sha256WithRSAEncryption
38:37:11:0c:62:26:18:db:cb:56:a6:ff:e1:0e:10:3e:36:84:
7e:e5:a9:25:50:ee:a8:ca:5e:05:fd:1d:47:37:10:06:30:ec:
88:2b:a1:8d:dc:d9:2f:f7:60:58:a8:6c:f1:63:f9:09:28:08:
07:57:5a:7d:7b:35:47:b1:dc:ec:7a:f4:bb:a7:4e:33:3d:40:
de:2d:d2:2c:1d:24:78:6f:ec:77:6b:7e:25:34:3a:4e:b1:7a:
b6:1a:51:27:db:07:59:7d:50:85:c8:99:06:81:da:33:f6:ca:
ab:9b:0a:f9:dc:c3:f6:7f:e7:2c:b3:7b:9b:56:e7:07:80:37:
a4:78:19:fc:35:a6:c2:8c:7d:03:85:2a:d6:36:03:9b:df:ae:
91:32:92:07:e6:f6:2d:97:6b:38:58:66:f9:9a:54:46:12:d2:
32:e9:3e:ea:52:68:60:27:da:3a:d4:e8:00:a7:ba:8c:32:e6:
c3:a9:90:ad:46:50:12:d1:78:e4:1c:c8:0b:cd:8e:65:aa:86:
5b:3e:2a:48:73:8a:3d:f4:86:fd:97:86:e7:0d:22:56:bc:d4:
6a:b6:b5:7e:7e:46:0e:38:bb:20:5e:a5:21:4d:9d:1e:82:56:
b8:b7:34:4b:a0:67:72:60:1b:c7:ce:89:a2:c6:1f:f8:f1:af:
e7:12:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:35 2024 by rpki-client on console-ams.rpki-client.org