Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/bpbVmr58Q3PxBPxUWHHZ3ItxxZ4.roa
File: bpbVmr58Q3PxBPxUWHHZ3ItxxZ4.roa (raw, json)
Hash identifier: E+89oM6/e7Lq2OAj7oQq6BP4Qyqt36SCUtIttcBR4fg=
Subject key identifier: 6E:96:D5:9A:BE:7C:43:73:F1:04:FC:54:58:71:D9:DC:8B:71:C5:9E
Certificate issuer: /CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Certificate serial: 01856CB840ACEB891FF41C2580AC16340251
Authority key identifier: E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/bpbVmr58Q3PxBPxUWHHZ3ItxxZ4.roa
Signing time: Sun 01 Jan 2023 09:44:52 +0000
ROA not before: Sun 01 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52034
IP address blocks: 91.220.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:40:ac:eb:89:1f:f4:1c:25:80:ac:16:34:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e86adb23ca8df1e472c259f5e09cfe89ae250112
Validity
Not Before: Jan 1 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e96d59abe7c4373f104fc545871d9dc8b71c59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:95:71:d6:63:f5:9d:cd:36:71:b0:73:79:
37:24:4a:1b:15:44:db:b1:a1:2e:49:5b:4b:45:15:
d5:d7:ba:90:ed:95:26:8b:ea:29:b1:0b:a4:b9:46:
a3:6e:7b:ae:32:7c:db:ff:3e:57:62:93:bc:cd:f5:
9b:69:87:28:57:ff:3b:91:57:91:5f:3b:a8:42:2e:
1d:22:cf:a5:a7:37:fa:d7:63:56:c4:fe:6b:1b:06:
89:a0:01:04:f8:78:17:26:7d:41:d0:b2:32:ba:db:
8a:fb:43:99:d5:af:70:cc:fb:82:ea:1f:ec:2c:16:
00:4f:04:0c:6d:70:8c:22:23:90:aa:ff:a4:9a:c1:
f8:8f:63:bd:69:9a:f0:db:b6:37:65:31:dd:69:93:
9a:a7:78:c0:e5:05:41:6f:85:9c:3b:27:d6:0b:9c:
46:c9:52:40:3e:88:06:d9:33:9c:44:a3:87:78:86:
5d:a6:d9:2e:21:76:be:09:56:69:68:a2:e7:95:d0:
5c:b1:24:d4:9a:3f:f6:6c:96:ca:61:46:e3:d8:69:
bf:ce:7d:2a:be:42:5a:32:6a:00:96:1a:b2:cc:bb:
c9:e3:68:6a:8c:aa:27:ef:d7:b4:3e:c5:88:aa:f2:
00:54:b9:8f:96:ba:80:ef:6a:04:24:4e:00:23:42:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:D5:9A:BE:7C:43:73:F1:04:FC:54:58:71:D9:DC:8B:71:C5:9E
X509v3 Authority Key Identifier:
keyid:E8:6A:DB:23:CA:8D:F1:E4:72:C2:59:F5:E0:9C:FE:89:AE:25:01:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GrbI8qN8eRywln14Jz-ia4lARI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/bpbVmr58Q3PxBPxUWHHZ3ItxxZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a051a8-32a8-448f-a032-926968271fb2/1/6GrbI8qN8eRywln14Jz-ia4lARI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:75:e1:ab:76:71:56:e1:06:d5:a0:e7:30:e8:4c:63:8c:52:
62:f1:70:6c:6d:85:2d:99:e3:9a:52:42:84:b2:a2:68:2f:2f:
98:da:93:cf:39:f8:a1:8a:6b:26:7e:e2:ed:b5:dc:61:cd:23:
b0:76:c3:0e:c8:0d:4f:21:66:21:fa:55:bb:77:0c:ee:4e:0a:
2c:f7:30:06:d8:fc:af:af:a3:4b:02:b0:ba:97:94:fb:fc:02:
9c:5a:b8:7f:e7:5b:8a:11:ff:c5:33:94:c5:a1:0d:47:1c:59:
f7:f7:e8:bf:83:03:c0:8e:45:ff:bb:2e:8d:2a:b4:99:fd:6a:
16:9f:b2:94:a4:60:17:15:65:f8:18:8f:84:13:7b:5d:2f:01:
fb:3d:72:b9:1e:c4:e5:93:38:9c:14:0f:e7:ab:12:e6:54:a2:
fd:fd:bf:48:43:b4:82:7a:65:fb:7d:7d:84:e1:d4:4c:fc:1f:
64:3e:4c:71:ba:23:c6:ef:cb:a3:fb:c2:65:2a:21:a6:7d:2e:
ba:c1:16:be:27:f4:38:c6:8b:34:70:c2:ff:16:51:68:4b:ba:
d5:bf:02:fb:f1:28:8f:ab:af:a3:5d:26:b8:09:ad:71:31:ef:
e1:f2:cb:3b:37:26:4d:75:5a:5f:e1:ab:98:67:c3:c2:69:d1:
5c:6b:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:09 2024 by rpki-client on console-ams.rpki-client.org