Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0DD2_Y-rEXoucUNGCXHyxyFnPag.roa
File: 0DD2_Y-rEXoucUNGCXHyxyFnPag.roa (raw, json)
Hash identifier: 5rqZ5hvtCtYbE1RWDGQWLEXXyBm1N7LdsblfyD03ZG4=
Subject key identifier: D0:30:F6:FD:8F:AB:11:7A:2E:71:43:46:09:71:F2:C7:21:67:3D:A8
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C598D04131BAA8CD86DEB94B707B5
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0DD2_Y-rEXoucUNGCXHyxyFnPag.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212442
IP address blocks: 91.236.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:59:8d:04:13:1b:aa:8c:d8:6d:eb:94:b7:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d030f6fd8fab117a2e7143460971f2c721673da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:02:37:ba:3b:17:db:76:ed:ea:34:75:5a:c0:
ae:7d:99:7f:84:c6:f4:08:f2:88:6f:fc:78:14:15:
6c:f8:03:e9:72:b2:cf:be:f8:94:d3:83:90:41:c5:
73:f7:02:07:d3:c2:81:cc:29:33:79:e8:db:8a:23:
4b:22:0a:13:70:f9:df:bc:11:3c:32:e5:67:72:bd:
31:83:66:51:75:4b:b9:45:3f:dc:2a:09:29:e3:5e:
83:b4:ec:7f:b3:11:c5:7c:ab:6d:17:e7:01:af:17:
63:18:2d:2d:54:c8:ae:0d:c2:21:9d:21:e6:70:d5:
28:d7:3b:e1:f9:34:c7:2b:3b:87:38:1f:cb:ed:02:
c8:64:1e:27:88:93:47:c5:f3:ad:e9:a2:c7:1c:a7:
79:96:97:2d:d0:3b:80:ea:76:6f:40:d3:b8:b3:3d:
0e:37:d2:f6:64:76:db:c5:54:7b:9c:9e:35:0c:32:
51:a1:29:74:27:45:0c:b4:0c:21:8d:c1:77:52:3a:
ec:2a:61:53:e6:fb:88:ad:5c:6e:2e:95:47:66:e1:
a7:1d:3f:cd:d6:28:08:4f:c4:80:90:3f:05:a4:a3:
e8:5a:c5:29:9a:91:b2:b8:b8:a4:42:61:7a:00:6d:
ba:6d:1f:d4:b1:c8:1b:4a:3a:e7:2a:20:60:b4:7d:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:30:F6:FD:8F:AB:11:7A:2E:71:43:46:09:71:F2:C7:21:67:3D:A8
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/0DD2_Y-rEXoucUNGCXHyxyFnPag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.74.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a7:b4:88:70:a7:20:be:06:53:e0:09:18:ad:08:b3:4f:02:
1d:56:71:d8:bc:c1:33:cd:cf:87:95:ce:7f:bc:52:e9:44:b1:
7b:bb:92:7a:b6:b6:10:fa:c1:d4:81:58:50:88:65:76:4a:ed:
80:59:ee:3d:14:e8:f5:1f:89:67:c9:c5:aa:27:b1:4d:60:b8:
ad:3b:88:75:3a:25:11:12:19:36:09:9f:a1:ed:e5:9e:59:bf:
bc:ec:44:c9:f4:c1:2c:23:a2:42:86:9a:b4:d3:e0:4b:d2:7b:
ec:d2:04:bc:af:02:09:b4:ee:23:1c:63:32:0d:5e:de:68:0a:
de:e5:a3:69:be:4a:6b:b7:8a:38:c9:94:06:b5:c7:8e:b9:a3:
18:cf:81:03:2d:48:47:f7:30:2c:50:63:b6:63:9b:91:5b:fc:
b9:64:da:d5:53:69:0c:b5:12:f5:c0:a0:ee:aa:5e:34:4c:f0:
d2:a4:99:6f:43:bc:31:79:54:df:86:e3:c0:44:de:17:a9:44:
98:50:7e:d2:64:4d:b8:17:15:19:27:53:8d:1c:c9:ae:27:d0:
78:1b:70:2d:67:b9:b7:37:b6:c8:d5:bf:b8:1c:71:12:35:0b:
db:50:ea:cb:75:59:6a:1a:36:f7:03:f4:73:74:36:b7:ec:80:
3b:21:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:17 2024 by rpki-client on console-ams.rpki-client.org