Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/sJLZrbCT82k4CgF-OoRGjqw12fs.roa
File: sJLZrbCT82k4CgF-OoRGjqw12fs.roa (raw, json)
Hash identifier: jj+r5yZKQaJJ1tmuCkwox2IG1ocU63w2DVuEFhujTho=
Subject key identifier: B0:92:D9:AD:B0:93:F3:69:38:0A:01:7E:3A:84:46:8E:AC:35:D9:FB
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 01856ECB8D6111DD875B27903B42CCAF3B6B
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/sJLZrbCT82k4CgF-OoRGjqw12fs.roa
Signing time: Sun 01 Jan 2023 19:25:11 +0000
ROA not before: Sun 01 Jan 2023 19:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 185.76.201.0/24 maxlen: 24
185.76.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:8d:61:11:dd:87:5b:27:90:3b:42:cc:af:3b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jan 1 19:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b092d9adb093f369380a017e3a84468eac35d9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d3:d3:8f:ca:43:fc:88:d4:cd:3d:9f:8a:fc:
68:fe:45:8e:2d:5a:d4:95:f0:47:38:79:37:3a:18:
56:2e:ee:b8:a7:5d:a3:a5:fb:15:33:be:92:43:84:
95:3c:0a:c2:91:47:2b:42:31:04:4e:19:e7:e3:e0:
aa:55:d0:41:e4:c4:d9:26:d8:08:5e:c0:a7:15:71:
f2:63:a7:01:25:2f:f9:d9:14:2a:f1:c7:fc:2b:74:
35:de:45:f9:8d:e1:6e:1c:4a:e3:64:3a:fd:a4:ff:
eb:49:6a:a1:5f:3b:d7:59:12:d9:51:1b:47:01:96:
85:39:c3:00:d3:7d:7c:19:bc:ea:27:7d:3b:26:e5:
66:a3:c0:2e:c7:ed:d2:1a:6e:61:0c:c9:d8:15:d4:
67:d3:24:71:43:81:0f:54:f2:9a:92:48:07:15:88:
56:5a:50:4f:1f:45:ff:46:ee:75:0b:bc:ab:2d:81:
b1:31:86:94:e8:35:44:8e:be:89:0c:68:2a:30:30:
ac:2c:e8:58:18:3d:c0:88:ce:0f:d2:b0:3e:df:c8:
74:f8:d1:43:70:d5:d1:9e:5b:79:b8:7a:81:57:c4:
fe:26:df:87:7f:f3:18:ca:c3:f3:c2:cb:12:ae:e7:
d8:56:a7:7f:35:73:74:17:b4:83:b3:e7:70:51:41:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:D9:AD:B0:93:F3:69:38:0A:01:7E:3A:84:46:8E:AC:35:D9:FB
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/sJLZrbCT82k4CgF-OoRGjqw12fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.201.0/24
185.76.203.0/24
Signature Algorithm: sha256WithRSAEncryption
83:44:8e:c7:ab:4d:72:3d:40:c4:f7:8d:2c:5f:42:9e:5e:74:
28:c9:6b:d3:a8:34:38:93:32:a2:3c:13:5f:5a:ca:ce:05:d5:
d5:b6:85:2f:01:9a:19:a3:a5:b5:04:b8:b3:47:b4:01:e9:6c:
83:60:56:71:8c:6b:96:24:43:20:97:fd:97:8e:bb:14:e0:7d:
74:d2:69:fd:1e:63:7b:92:bb:37:17:17:a6:2c:02:23:23:9c:
ca:1a:87:f7:ab:46:f0:2a:8d:47:47:5c:e6:ad:c0:fb:fc:c2:
2e:ee:aa:52:3e:28:cc:48:17:ca:f7:b0:a4:1a:cc:c8:2b:66:
be:ca:46:56:2f:f8:6e:5f:81:19:11:0e:09:96:0a:af:80:0b:
2a:44:6b:ca:a8:54:ca:a9:ad:77:ce:d9:ca:5c:e5:60:34:f0:
08:be:4e:9b:a5:40:67:c0:cc:f8:31:16:69:a7:fe:ed:4c:3b:
bd:1f:69:23:5b:3e:a5:cc:da:d8:07:8a:05:81:17:39:4b:a2:
84:4f:6b:e1:b9:96:e1:b1:43:9b:9c:3f:37:1e:0d:d4:6c:db:
15:97:2f:92:14:c2:08:8a:81:68:80:2c:dc:a7:21:a4:fd:89:
6f:9c:01:b2:95:d1:07:3b:2a:e8:3a:f8:b3:c2:d2:fc:f0:f7:
35:74:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:13 2024 by rpki-client on console-fra.rpki-client.org