Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1-CWbSUFcMz_phe1yNQM5B_tCjow.roa
File: 1-CWbSUFcMz_phe1yNQM5B_tCjow.roa (raw, json)
Hash identifier: u/QqVEAmhASgu6khOFOtEeZsw6kUVL0przkPdA2uZQU=
Subject key identifier: F8:25:9B:49:41:5C:33:3F:E9:85:ED:72:35:03:39:07:FB:42:8E:8C
Certificate issuer: /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial: 018572835CF3A420BBDD992F99DCC4B8C81F
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1-CWbSUFcMz_phe1yNQM5B_tCjow.roa
Signing time: Mon 02 Jan 2023 12:44:49 +0000
ROA not before: Mon 02 Jan 2023 12:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48189
IP address blocks: 91.209.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:5c:f3:a4:20:bb:dd:99:2f:99:dc:c4:b8:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Validity
Not Before: Jan 2 12:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8259b49415c333fe985ed7235033907fb428e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:8c:59:15:88:82:68:88:c2:ac:ad:fd:f5:
af:6d:64:07:85:16:b8:4d:3b:77:c6:4f:68:8e:6f:
85:14:0e:1e:53:c1:60:df:4a:4f:c6:45:75:a9:14:
4b:bf:42:fd:5d:81:0a:fe:79:ea:86:0c:55:19:07:
8b:db:0c:41:3c:df:34:a0:39:5f:34:0c:b7:54:7f:
65:55:5d:ba:b1:ab:f8:ae:c7:84:fb:fd:c9:15:47:
95:70:1c:85:f9:a7:67:75:d7:db:a5:d7:d9:53:e3:
2a:a9:1e:b9:10:a3:e4:e2:c9:db:a1:78:fe:9c:06:
e2:a5:ec:0e:1b:c7:b3:17:fd:33:12:9c:7c:92:9b:
3e:1d:78:ff:a6:7a:50:90:c3:64:ea:d8:d5:b8:f2:
5c:6a:0a:20:b9:55:aa:99:3e:e2:8d:94:86:e9:12:
75:01:58:28:98:49:e1:51:c4:55:f8:ce:a7:bd:a7:
72:54:0f:ae:5f:4b:8b:ff:82:20:5e:b0:c4:af:b2:
30:24:95:3d:e1:db:9a:6c:9a:ea:7f:e3:cd:b3:78:
26:68:28:d8:da:64:f7:05:a9:6a:ab:ad:d5:7d:e1:
78:07:4b:b0:10:42:56:22:1e:db:a6:9b:53:dd:50:
b6:de:a9:bf:ea:ef:55:6f:30:3e:0c:4c:48:15:7f:
c4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:9B:49:41:5C:33:3F:E9:85:ED:72:35:03:39:07:FB:42:8E:8C
X509v3 Authority Key Identifier:
keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1-CWbSUFcMz_phe1yNQM5B_tCjow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.27.0/24
Signature Algorithm: sha256WithRSAEncryption
63:80:4e:37:12:84:7e:45:90:93:cd:21:7d:89:7f:b5:f8:1b:
5c:d5:d0:e7:8e:5a:64:ed:37:92:81:8e:94:b2:ef:b5:11:46:
aa:fb:a8:e5:34:f4:43:34:b4:e2:7f:68:fd:b4:00:34:13:22:
b4:0a:a0:63:8f:e6:95:9b:74:a9:41:7a:e1:14:01:8c:b3:da:
6d:68:86:21:b2:27:74:91:66:25:bd:5a:82:f3:f4:a0:41:a7:
39:bc:f9:b0:90:e5:55:39:d4:77:4b:5c:8c:ea:09:e2:85:1d:
ea:2c:c5:cf:be:f7:8a:81:66:41:c9:d3:17:6b:23:bc:52:61:
d6:3f:90:27:f2:db:25:e8:5b:7d:58:24:f0:86:93:96:3d:dc:
dc:34:80:08:8a:4a:15:f8:9b:94:35:be:eb:59:06:81:47:9a:
0a:3e:8b:1e:bf:90:42:71:79:18:90:55:38:28:29:a1:06:58:
c3:ac:a0:e4:ba:71:60:4a:9b:8a:58:f8:17:4c:03:c7:ec:db:
58:38:8f:e3:ea:29:eb:3d:b2:dd:7f:ee:02:04:c5:75:0a:3c:
bf:d0:6a:cd:b3:fc:dd:bf:1a:43:6d:3c:39:f7:75:f9:e3:a6:
b9:e6:46:40:8e:d9:c0:e1:ed:22:60:6c:b9:7f:b3:3a:ec:f6:
42:90:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:39 2024 by rpki-client on console-ams.rpki-client.org