Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/T435eeHFNUQy7zx9iP4aL-wj6Q8.roa
File: T435eeHFNUQy7zx9iP4aL-wj6Q8.roa (raw, json)
Hash identifier: v498yNEvq8qk2jOGgVDMUAP9g2K4/2Ro4PUwuRrPBBo=
Subject key identifier: 4F:8D:F9:79:E1:C5:35:44:32:EF:3C:7D:88:FE:1A:2F:EC:23:E9:0F
Certificate issuer: /CN=dd4988b0956206cf86bb680568a247723a46a94b
Certificate serial: 018803D856B6B528C0201CA00F674F5E61AF
Authority key identifier: DD:49:88:B0:95:62:06:CF:86:BB:68:05:68:A2:47:72:3A:46:A9:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UmIsJViBs-Gu2gFaKJHcjpGqUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/T435eeHFNUQy7zx9iP4aL-wj6Q8.roa
Signing time: Wed 10 May 2023 04:08:09 +0000
ROA not before: Wed 10 May 2023 04:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201950
IP address blocks: 91.242.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:03:d8:56:b6:b5:28:c0:20:1c:a0:0f:67:4f:5e:61:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4988b0956206cf86bb680568a247723a46a94b
Validity
Not Before: May 10 04:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f8df979e1c5354432ef3c7d88fe1a2fec23e90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:13:97:bf:84:8d:22:d1:a4:25:42:23:80:
a3:c9:34:56:1a:09:ce:13:cd:73:4b:c2:91:eb:9a:
a0:e6:18:bf:7c:f9:e2:73:7b:e2:67:f2:df:e8:22:
18:74:4f:fb:03:49:8d:18:13:58:b9:09:6a:7c:dc:
df:1e:18:2c:82:ec:0f:93:db:10:38:22:27:3a:c9:
fc:da:d0:05:e4:59:bc:a9:5e:fb:2e:f4:70:b1:af:
71:08:89:67:19:aa:38:1d:71:cc:21:c2:36:20:11:
4c:35:66:a9:56:bd:51:79:4d:1c:45:ef:07:4a:65:
82:99:bd:3a:6f:b8:4a:a8:47:b7:6d:1f:4d:5a:d3:
5d:97:fb:19:53:71:44:d5:c7:a5:bc:dc:74:28:af:
c8:8f:ba:0c:0d:e4:6c:99:02:ef:53:40:13:f9:e8:
10:59:3b:4c:45:7d:37:cd:c7:0f:ed:d2:45:98:88:
67:ac:4e:6d:12:06:94:1b:06:23:17:9e:eb:bd:0a:
a2:bf:38:b5:f1:39:c5:5f:5f:83:fb:b9:84:3f:a8:
e6:77:f7:dd:30:60:46:0f:87:66:00:8d:eb:50:5b:
ff:c6:94:90:c5:1c:80:9a:2d:da:f7:99:58:37:53:
1d:d1:83:21:4b:28:c2:47:88:39:e0:e3:af:a7:01:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8D:F9:79:E1:C5:35:44:32:EF:3C:7D:88:FE:1A:2F:EC:23:E9:0F
X509v3 Authority Key Identifier:
keyid:DD:49:88:B0:95:62:06:CF:86:BB:68:05:68:A2:47:72:3A:46:A9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UmIsJViBs-Gu2gFaKJHcjpGqUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/T435eeHFNUQy7zx9iP4aL-wj6Q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/3UmIsJViBs-Gu2gFaKJHcjpGqUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
99:97:84:fc:f1:50:af:da:d0:2a:90:1d:94:ec:00:98:1b:73:
d9:7d:dd:b7:a1:74:88:e4:1c:39:41:e2:a0:4a:ea:44:e8:bf:
17:e8:d9:c9:b4:bc:ad:c0:0f:38:47:9b:5a:18:a7:d4:a2:f5:
df:24:53:00:b8:32:3b:cc:fa:67:c9:10:97:99:84:7d:74:a6:
93:dc:fc:5e:7f:db:23:f8:c2:b7:40:0c:46:42:80:64:a7:4f:
a1:27:5e:d2:1f:ed:2a:66:59:db:ce:63:f9:a7:f0:02:2f:fd:
07:0e:7d:eb:ba:fa:b6:fe:31:ac:5f:a1:09:a3:9a:e0:09:6a:
7c:c3:30:6a:1c:af:df:2d:99:fa:52:77:a1:3d:e7:4f:25:26:
b3:62:b1:0f:fd:9c:10:22:f9:69:be:89:9e:9a:17:d8:b5:36:
1f:c3:42:de:2b:b2:f5:6a:e2:60:bd:48:cb:47:55:5c:ab:f6:
9c:09:f9:54:f1:36:42:f8:1f:4e:f2:e5:11:cf:45:59:8d:d4:
7b:66:73:2e:e0:de:5d:a3:d7:bf:91:98:50:51:3a:bf:bc:2e:
e6:c8:f3:f0:5f:ab:9a:7e:a8:6f:f2:18:15:e3:18:3c:54:6d:
28:9f:c0:f4:30:e6:a0:b4:88:50:62:b3:b1:dc:9a:e1:29:95:
9c:5b:ef:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-ams.rpki-client.org