Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Ex36qt8TWqHffPbK53BtwJV1Mrg.roa
File: Ex36qt8TWqHffPbK53BtwJV1Mrg.roa (raw, json)
Hash identifier: qbZ6zMta6z9cSoVpPOnLa910vSJJYwcM52ofdObhg7U=
Subject key identifier: 13:1D:FA:AA:DF:13:5A:A1:DF:7C:F6:CA:E7:70:6D:C0:95:75:32:B8
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 01856D4AB2937C29A4D2B86F5DD0A3AE861F
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Ex36qt8TWqHffPbK53BtwJV1Mrg.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 91.102.232.0/21 maxlen: 24
91.102.239.0/24 maxlen: 24
91.102.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b2:93:7c:29:a4:d2:b8:6f:5d:d0:a3:ae:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=131dfaaadf135aa1df7cf6cae7706dc0957532b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:f1:88:54:76:3d:51:0c:29:15:ef:78:b1:
f6:40:eb:b1:5a:b5:e4:4f:62:46:aa:99:01:38:eb:
9d:fa:27:86:7f:af:76:aa:18:9d:41:aa:57:c5:34:
21:a2:0e:80:34:66:23:ab:1c:73:3c:5d:24:de:44:
17:6c:7c:bb:c7:b4:27:05:3e:51:f7:e3:a2:8b:6b:
b6:86:f3:5a:76:2d:53:47:23:4a:65:61:32:21:b5:
1b:73:75:37:31:24:fe:7b:0a:41:ea:a4:5d:39:db:
03:b0:2a:5f:05:94:6f:2e:25:e4:1f:07:a4:65:6e:
c5:4c:e4:d2:75:d2:21:01:d4:c3:64:0b:94:d1:1c:
3a:a1:7a:e1:27:0d:80:3e:2b:54:b7:07:ff:f6:e4:
11:46:0d:f8:46:a3:c6:42:32:a4:a0:20:96:c6:fe:
bc:7c:75:90:6c:e2:34:74:a9:46:54:41:00:b8:01:
86:5e:e7:7b:f5:5c:4c:6e:36:f8:4b:de:72:cc:ff:
9d:28:b9:44:4e:55:66:f4:e3:7a:95:84:b0:85:29:
0f:60:82:38:91:28:4b:16:0a:bd:07:20:89:8e:e7:
cb:b8:db:a2:4e:a3:25:2b:6b:9e:69:5c:67:d6:c9:
67:b6:7f:48:66:07:38:9e:cc:21:2b:b5:df:a7:e9:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1D:FA:AA:DF:13:5A:A1:DF:7C:F6:CA:E7:70:6D:C0:95:75:32:B8
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Ex36qt8TWqHffPbK53BtwJV1Mrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:56:92:53:07:92:79:ee:b0:20:9c:16:e4:1b:61:10:82:93:
e4:ce:31:df:bd:73:4a:8c:93:83:80:98:bc:0f:fb:3a:b3:30:
29:05:81:29:5e:38:5d:56:cf:99:f2:b1:8a:60:6a:63:03:cc:
1a:ba:e9:d2:65:8b:5b:5b:2b:fb:33:c8:74:a3:28:7f:7d:1f:
ca:18:ee:9e:d7:a3:85:1e:8d:8b:01:51:02:d5:4d:07:c0:ad:
dd:d7:60:49:a1:f6:bb:40:58:17:9a:8e:5c:07:eb:ef:59:43:
b4:f6:07:63:3d:80:31:22:91:56:67:5c:38:61:56:94:3b:97:
c9:61:c6:70:5f:00:68:fc:a5:0b:54:c8:1c:26:4a:1e:3f:f7:
41:62:b8:f7:d4:ae:f1:c6:80:6d:19:b9:08:e0:9b:8d:b7:fd:
f7:e0:4d:fe:9e:94:0c:75:02:b6:52:48:d8:61:6d:c2:5d:98:
cd:99:6d:67:07:dc:d0:db:11:b5:f2:48:ff:b0:24:57:f4:69:
1a:0c:4f:01:25:03:33:dc:9b:ba:2d:0d:47:80:7f:9f:12:4d:
20:91:8d:bb:3d:c9:d0:b3:49:c0:c7:d6:99:9a:ac:e6:d9:d8:
ec:ac:08:43:6f:55:ff:67:1b:d4:fb:68:ae:8f:70:13:ef:30:
7f:e0:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:20 2024 by rpki-client on console-ams.rpki-client.org