Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/rookorj08vl4RjOoRicdnELwpAk.roa
File: rookorj08vl4RjOoRicdnELwpAk.roa (raw, json)
Hash identifier: lGUe5FvvqLtHS+I1NU43IFXkHMVxI3aUeHqs9KqppUc=
Subject key identifier: AE:8A:24:A2:B8:F4:F2:F9:78:46:33:A8:46:27:1D:9C:42:F0:A4:09
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 01856F94942EE865C436D5E6E99ABB9D5C87
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/rookorj08vl4RjOoRicdnELwpAk.roa
Signing time: Sun 01 Jan 2023 23:04:46 +0000
ROA not before: Sun 01 Jan 2023 23:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47961
IP address blocks: 91.207.34.0/24 maxlen: 24
91.207.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:94:2e:e8:65:c4:36:d5:e6:e9:9a:bb:9d:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jan 1 23:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae8a24a2b8f4f2f9784633a846271d9c42f0a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:48:41:25:37:80:9d:09:ac:81:9c:8f:3d:
8e:7a:55:7f:81:75:0e:fb:2a:9f:6f:f1:36:76:ef:
b5:3a:12:15:7f:2b:b1:6f:e2:4b:ab:47:a8:27:b5:
8a:28:2f:0f:3f:59:0d:e3:c9:ad:0f:2e:af:37:9a:
9d:2a:5f:fc:45:3a:bd:5e:bc:a1:60:30:31:f0:99:
f2:ed:74:d5:e6:71:1b:0e:f0:c2:0b:4b:bd:e2:e8:
bc:97:69:06:48:a0:5d:a6:23:87:fa:d4:82:0a:c2:
f2:12:77:b7:f8:be:53:1f:36:88:e7:e6:4c:66:80:
4b:d6:79:d4:0b:10:4f:25:2c:53:99:6e:97:58:28:
c6:1a:48:42:29:c4:7e:9c:11:ca:e8:0e:b0:dc:0a:
e1:56:af:7e:79:6f:15:2a:7d:8e:fd:87:f6:cb:15:
59:70:d7:d1:a3:01:f5:4b:39:db:64:cb:98:04:b1:
c7:9a:23:12:e4:b1:49:85:58:e2:4e:84:78:1e:2e:
8e:02:fa:a9:c8:bc:a1:59:b9:ee:e8:6f:ab:51:9e:
4f:55:6e:03:a8:05:a9:5b:3a:a9:00:45:b0:f5:4c:
06:2f:66:0e:4c:ac:db:d8:5b:3e:d2:ff:33:d5:2b:
7e:0d:3f:43:f6:bc:3d:c3:91:c9:ba:4a:3e:fb:79:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8A:24:A2:B8:F4:F2:F9:78:46:33:A8:46:27:1D:9C:42:F0:A4:09
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/rookorj08vl4RjOoRicdnELwpAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.34.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:5e:7f:3e:06:50:ec:02:ce:9a:2f:0a:cc:9d:e1:99:8f:84:
f3:11:90:34:79:53:48:12:28:d4:bf:c5:f3:db:58:15:aa:b5:
0c:a0:aa:19:c2:e1:ea:d0:17:6f:cd:9e:b9:3e:59:79:b9:a9:
24:b6:df:db:53:ff:9e:b6:90:56:84:83:f0:21:3f:4f:b6:1f:
46:64:59:30:a3:07:d5:b5:1a:98:d1:d6:5c:8b:bd:56:e9:7e:
94:ab:a4:c4:8e:28:05:b9:83:dd:83:01:85:49:54:b9:dd:c0:
c7:af:51:48:89:01:e9:93:3e:c5:32:eb:77:43:0a:d5:34:9d:
1b:b9:7d:f6:5b:2e:a6:54:92:cc:03:0f:18:47:be:c9:77:fd:
12:55:ab:c9:bd:bd:c6:79:7d:88:ed:19:fb:73:1d:a4:b5:57:
50:7d:56:7c:06:97:a4:a9:34:20:f1:93:7a:7a:a7:7e:90:1e:
ec:a6:ff:28:7e:40:91:29:ac:3d:17:e1:c8:37:26:bc:d8:b0:
16:72:80:ce:e5:b6:b1:84:61:32:e0:6a:af:af:d1:db:ee:cf:
ff:85:4b:c3:4e:a2:ea:ab:b4:45:48:42:10:72:dc:79:b0:5f:
20:0c:21:62:ae:06:83:38:45:61:83:bb:5b:32:d6:0b:21:42:
16:e3:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:21 2024 by rpki-client on console-fra.rpki-client.org