Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/pp1ZOhxV_TDhR9fUoy9GQ-B55F4.roa
File: pp1ZOhxV_TDhR9fUoy9GQ-B55F4.roa (raw, json)
Hash identifier: QetQoELbVzzRhJPqt7tL0i+V4mrTMOKTlADX6mIlZcI=
Subject key identifier: A6:9D:59:3A:1C:55:FD:30:E1:47:D7:D4:A3:2F:46:43:E0:79:E4:5E
Certificate issuer: /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial: 01856FE729FB6A692C25EEBBB90B6BC53249
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/pp1ZOhxV_TDhR9fUoy9GQ-B55F4.roa
Signing time: Mon 02 Jan 2023 00:34:58 +0000
ROA not before: Mon 02 Jan 2023 00:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.91.204.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:29:fb:6a:69:2c:25:ee:bb:b9:0b:6b:c5:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Validity
Not Before: Jan 2 00:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a69d593a1c55fd30e147d7d4a32f4643e079e45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:d5:dc:06:1e:e5:16:f7:8f:97:7a:c9:97:
d1:8a:dc:6c:ee:4d:bc:ef:d6:e5:09:ee:ce:2e:6b:
ce:af:6f:4c:c7:91:bd:6e:73:45:05:24:6f:a1:8c:
8f:a4:d3:47:86:2c:43:b6:a6:6f:1d:36:1e:ce:de:
9a:a7:4a:98:f3:29:a5:5c:9d:56:f8:ea:75:16:8b:
25:9a:a3:70:ac:11:a5:ec:27:42:8a:59:63:4b:e0:
92:1e:5d:84:1f:4d:89:95:73:c7:18:3c:83:57:01:
1c:ae:d2:59:8e:58:21:92:8a:72:0c:97:0c:be:3a:
9e:d9:71:f1:5d:4c:49:08:f7:41:b0:f5:c0:96:48:
81:92:93:78:d1:e5:6f:71:fd:56:82:56:a9:a3:81:
81:29:aa:b3:52:2e:5e:c7:d1:77:90:40:a2:23:46:
d0:71:a7:08:ae:41:31:f1:8f:2b:da:ec:c4:96:6d:
a7:0c:41:06:03:8c:95:77:c2:7f:b9:2c:72:82:0d:
43:5d:f8:b0:19:a8:52:cc:c0:6a:6f:97:76:13:da:
d8:4f:32:a9:17:ea:4d:6a:c6:ce:ef:a7:5a:d9:c3:
25:b4:c2:8b:5c:52:f5:7d:8d:51:23:e8:c2:85:09:
37:82:27:3b:4b:aa:51:09:40:02:53:8b:11:f6:73:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9D:59:3A:1C:55:FD:30:E1:47:D7:D4:A3:2F:46:43:E0:79:E4:5E
X509v3 Authority Key Identifier:
keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/pp1ZOhxV_TDhR9fUoy9GQ-B55F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:c9:97:f9:a4:3c:e3:99:71:a5:51:bb:08:c4:25:05:bf:25:
62:f5:ef:59:f9:f2:04:20:1f:09:61:f6:7b:41:3d:0a:51:ac:
a4:0b:16:cb:85:84:38:d7:39:c3:e1:92:db:79:4e:4c:75:2d:
aa:4e:40:11:b0:8b:70:75:2a:a4:d7:f4:f7:0e:c7:eb:97:8d:
1f:9e:79:4d:e0:cc:2a:13:9c:69:9f:80:b8:c1:30:02:d6:aa:
73:8e:ec:6a:4e:0f:de:a7:3a:86:80:d2:a0:d4:09:6b:cf:67:
42:4f:84:79:f5:d1:c3:42:64:47:c4:ca:0f:74:6c:4f:f8:ea:
c5:de:d8:23:02:84:c0:a2:af:0a:e0:84:6c:8e:e8:aa:de:fa:
07:4a:a8:8a:bf:cd:b2:c1:5b:b7:a6:30:b6:66:09:75:45:92:
2b:4d:fd:69:40:07:e4:6c:26:7f:52:04:79:60:5e:fe:44:11:
45:7d:b1:f2:88:53:8c:62:44:f4:12:aa:30:59:82:70:82:51:
dd:a7:35:03:4f:f8:c8:08:b4:eb:33:d1:2f:30:d7:b7:6f:8c:
7c:51:44:7a:00:8f:ce:66:8c:91:ab:3f:55:90:8b:b7:e3:6a:
48:dc:b0:8e:e5:6a:59:d2:c3:09:51:b3:96:33:c6:cf:b3:ed:
b9:ea:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:21 2024 by rpki-client on console-ams.rpki-client.org