Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/c0CINQGbdyegHQdBlo8CF9ffCCU.roa
File: c0CINQGbdyegHQdBlo8CF9ffCCU.roa (raw, json)
Hash identifier: aLhH48t4h4guCvAz2P79FLiXKwcnANm9bIC1PT0fkqc=
Subject key identifier: 73:40:88:35:01:9B:77:27:A0:1D:07:41:96:8F:02:17:D7:DF:08:25
Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial: 018571A78DB748A2726831096C36611D0709
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/c0CINQGbdyegHQdBlo8CF9ffCCU.roa
Signing time: Mon 02 Jan 2023 08:44:44 +0000
ROA not before: Mon 02 Jan 2023 08:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213095
IP address blocks: 91.239.56.0/24 maxlen: 24
163.114.159.0/24 maxlen: 24
2a07:fb40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:8d:b7:48:a2:72:68:31:09:6c:36:61:1d:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Validity
Not Before: Jan 2 08:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73408835019b7727a01d0741968f0217d7df0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:04:9a:ae:4d:bb:8a:9c:f4:ce:66:d0:0f:
df:4e:42:61:63:c9:dd:98:fa:4e:9d:3f:5b:14:e2:
fe:51:e7:f5:7b:be:f3:f8:f6:c7:f1:c3:79:65:f7:
7b:66:9a:41:b4:82:88:e0:dc:a5:4d:46:a0:2b:90:
98:69:b6:ce:a6:14:4e:08:ce:e1:c9:98:6b:0c:67:
81:22:d2:68:6f:9e:4f:02:68:b0:a0:f3:5f:f2:1b:
62:38:f7:b0:a6:85:cd:af:de:fe:18:df:f1:d3:10:
8b:59:ee:36:56:50:39:70:41:95:5f:e3:0c:e0:4b:
04:e4:66:45:6e:ea:ad:e5:15:30:4d:d0:d7:75:70:
b3:3e:cf:0f:60:83:f9:56:09:61:47:d2:b0:9e:42:
29:85:95:1a:f0:31:7c:40:3c:fc:33:53:3b:0d:76:
52:42:0a:c6:ab:b0:05:a9:c7:1d:b7:1b:d7:36:6f:
ad:d0:e3:0e:f0:9f:4b:73:aa:ad:95:ba:c0:2e:55:
d3:51:ac:0f:94:5a:ac:b5:47:3b:0d:fb:25:e3:72:
47:f8:a6:2a:3c:28:3e:ae:7f:f0:b3:f9:54:cb:0b:
ac:7d:23:48:c8:9c:e3:7e:88:e8:37:65:1c:56:41:
b1:09:93:d6:1e:d3:e3:b7:44:6b:66:31:5b:15:da:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:40:88:35:01:9B:77:27:A0:1D:07:41:96:8F:02:17:D7:DF:08:25
X509v3 Authority Key Identifier:
keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/c0CINQGbdyegHQdBlo8CF9ffCCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.56.0/24
163.114.159.0/24
IPv6:
2a07:fb40::/29
Signature Algorithm: sha256WithRSAEncryption
49:b8:a8:d7:5a:c6:56:45:ff:e4:f7:93:19:c5:42:f3:82:e5:
aa:54:3c:99:94:df:47:6a:f0:f4:ad:36:c2:56:0e:7e:2d:74:
43:84:54:32:78:88:a3:de:02:6a:ca:a4:b1:40:05:fd:3e:95:
53:86:75:02:fd:ba:a1:53:86:8b:95:63:23:64:d8:1c:0f:97:
07:c1:0f:51:82:92:77:49:fd:4e:d4:42:4f:2e:6c:a9:c6:69:
e0:38:99:36:e9:77:a0:fd:f7:18:06:90:03:d8:65:9f:f7:a2:
5d:af:dd:29:b3:3a:fd:76:66:ea:66:8f:77:89:5f:af:ea:3f:
df:3a:aa:e3:c1:2c:65:4d:ef:d4:c3:13:51:d9:69:56:ee:7b:
7a:98:00:7b:3e:df:2c:e8:6f:1f:be:89:37:a7:a7:83:b5:68:
0a:ae:0e:b5:e7:80:ef:86:fa:e4:a1:6e:c8:ed:65:43:25:66:
6f:51:47:69:39:9a:7f:fd:0e:bb:b3:95:d9:80:30:0a:91:60:
8d:9d:7f:56:2e:0d:5f:4b:be:82:27:93:61:07:1d:95:ae:48:
5f:15:ae:e8:21:74:e8:0b:9a:37:23:73:36:28:1c:8a:bb:1f:
fe:90:4e:44:c3:31:7c:00:df:36:5e:38:04:fa:ea:83:36:24:
2b:9a:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 15:11:52 2023 by rpki-client on console-ams.rpki-client.org