Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/eTF6praBT7ADkTDudFj_DsbRA_k.roa
File: eTF6praBT7ADkTDudFj_DsbRA_k.roa (raw, json)
Hash identifier: cHAf1w/JoPbSDKss1PMme0QkX8+KtuQXK5+1hMV0iFI=
Subject key identifier: 79:31:7A:A6:B6:81:4F:B0:03:91:30:EE:74:58:FF:0E:C6:D1:03:F9
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 018570026D47BD4DFC9D6159F7D97ED65ED4
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/eTF6praBT7ADkTDudFj_DsbRA_k.roa
Signing time: Mon 02 Jan 2023 01:04:45 +0000
ROA not before: Mon 02 Jan 2023 01:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25581
IP address blocks: 91.224.94.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:6d:47:bd:4d:fc:9d:61:59:f7:d9:7e:d6:5e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Jan 2 01:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79317aa6b6814fb0039130ee7458ff0ec6d103f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:4f:ef:ad:8e:b9:0e:29:21:f1:17:ee:37:
f9:64:6f:8e:52:a8:7c:8c:77:8d:48:4e:86:f3:5c:
bc:90:01:a0:a8:ba:a2:9a:22:cc:9f:7f:22:37:70:
3d:e3:cc:9b:95:2b:bc:d2:37:8b:cd:51:28:22:74:
58:0e:1b:05:ef:63:3d:7c:95:be:7d:0b:3e:f6:13:
2c:0b:21:68:c1:b6:26:45:37:1e:92:12:07:41:f0:
8a:9a:b4:43:ed:c7:71:2c:b2:73:ab:be:79:b0:2d:
9b:29:54:4c:3d:41:6a:be:dc:44:14:d6:ba:b9:26:
6e:6c:54:5b:93:92:cd:d2:95:ea:6c:f0:f9:56:03:
71:91:98:02:bd:05:3c:d7:70:d1:89:1a:f6:ad:be:
dc:7b:e0:b8:d0:63:0a:cb:83:a0:f6:6d:dd:89:6e:
9a:f7:f0:bb:80:4e:96:2f:33:35:de:f9:3a:3e:83:
64:dd:78:56:ce:39:a5:50:ab:23:6b:66:23:97:97:
a1:e5:e3:d2:19:2c:93:de:9a:65:ed:4c:65:cc:59:
82:5a:87:14:f8:99:2e:7c:97:f8:a7:99:d7:cd:a5:
48:f7:d1:b4:0a:4d:36:4e:32:d4:dd:51:43:c4:a6:
39:e9:39:d3:24:6e:e3:66:25:2f:f8:db:9e:b3:5b:
53:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:31:7A:A6:B6:81:4F:B0:03:91:30:EE:74:58:FF:0E:C6:D1:03:F9
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/eTF6praBT7ADkTDudFj_DsbRA_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.94.0/23
Signature Algorithm: sha256WithRSAEncryption
02:16:a2:b8:ed:c6:b2:25:c1:a3:f2:3e:89:c8:76:c6:d4:62:
36:70:6d:e4:28:70:13:96:7a:a3:6e:da:62:18:89:04:15:68:
1a:5e:35:f5:b0:f2:17:2d:f9:fe:72:7f:59:bd:22:85:52:01:
12:25:e3:b1:c9:97:52:49:27:2f:d3:c8:62:2e:ab:53:d8:00:
70:ed:73:9b:84:58:05:4d:60:3c:01:4f:80:9e:67:45:da:15:
4c:db:f8:02:b7:60:f8:5f:49:82:f6:81:ab:a5:bd:ab:a8:89:
b5:16:34:df:10:40:ed:cf:86:7c:8b:59:6c:44:8a:45:09:43:
10:72:97:ec:08:3c:3e:5d:18:45:ae:c6:86:15:3e:c9:35:6d:
f6:a4:bd:53:cb:fd:14:40:d5:30:19:16:95:43:61:ba:56:5c:
e1:5d:39:a4:35:06:fa:7e:f8:c5:38:e3:dd:77:65:dc:25:28:
8d:dc:e3:bd:82:9a:c1:dc:3f:e1:82:93:99:db:d0:e5:9d:3d:
0d:07:98:b0:d3:80:19:d4:95:8a:b6:3d:40:4c:a5:3c:9f:42:
16:8a:9d:b5:8e:a8:26:6d:0d:9a:ea:4a:c7:8c:79:17:da:3c:
cd:a9:07:c7:68:9f:86:f6:5c:84:2a:93:50:45:a9:77:d5:2c:
b9:9b:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:14 2024 by rpki-client on console-ams.rpki-client.org