Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/9rUkXEVNq8LZdC1WCgkj3XJ1Mds.roa
File: 9rUkXEVNq8LZdC1WCgkj3XJ1Mds.roa (raw, json)
Hash identifier: c95g326PtKEsTrUw1axxYtM8uqiWY7wvX3E8ZDMZg9M=
Subject key identifier: F6:B5:24:5C:45:4D:AB:C2:D9:74:2D:56:0A:09:23:DD:72:75:31:DB
Certificate issuer: /CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Certificate serial: 01856C0122C1C63DEA5AD05914FD9B8172C7
Authority key identifier: 1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/9rUkXEVNq8LZdC1WCgkj3XJ1Mds.roa
Signing time: Sun 01 Jan 2023 06:24:51 +0000
ROA not before: Sun 01 Jan 2023 06:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28889
IP address blocks: 91.206.236.0/24 maxlen: 24
91.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:22:c1:c6:3d:ea:5a:d0:59:14:fd:9b:81:72:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0c823c360b5f8614892d35b103c64774fd65d
Validity
Not Before: Jan 1 06:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6b5245c454dabc2d9742d560a0923dd727531db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:65:54:13:d8:2a:56:be:ab:ec:22:28:f6:
8b:4e:21:84:1c:5a:de:87:32:77:f9:f0:08:64:dd:
b1:9c:84:e9:e7:69:ac:1f:23:49:27:8c:d9:90:6b:
fb:b5:1b:d3:87:15:12:11:33:70:24:21:bb:44:3c:
29:9d:4c:f7:a3:d0:fc:ba:a8:d2:73:20:7b:2c:70:
c0:4c:45:7e:f3:4a:d1:c0:c0:d4:b0:60:0a:87:a8:
b0:18:15:1a:c1:41:99:cf:c2:d8:6e:22:be:d7:10:
d4:03:55:a0:b8:34:b6:08:1e:7f:d5:6a:78:f4:9a:
0e:04:f8:eb:dc:91:74:5b:32:45:5d:36:78:77:da:
fb:86:34:92:cd:16:ef:f4:99:14:0a:a1:d8:50:f1:
cf:a3:66:fb:5a:83:01:d3:fb:f6:fd:e2:0d:69:a0:
d7:5e:5b:ff:91:d1:46:a5:ed:12:19:1b:76:14:e7:
d0:29:6b:22:c1:32:af:e3:2d:00:b2:87:31:fe:96:
ef:8d:42:ed:20:9b:be:41:2e:28:85:85:e5:3c:8d:
89:89:f0:d6:51:d1:0f:cd:2f:1c:f9:01:f5:42:4a:
ee:9d:69:73:64:bb:47:b0:12:ad:9e:d7:ed:ec:fa:
61:09:fd:4b:57:78:0b:ce:18:14:8a:28:57:fe:51:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:24:5C:45:4D:AB:C2:D9:74:2D:56:0A:09:23:DD:72:75:31:DB
X509v3 Authority Key Identifier:
keyid:1E:A0:C8:23:C3:60:B5:F8:61:48:92:D3:5B:10:3C:64:77:4F:D6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqDII8NgtfhhSJLTWxA8ZHdP1l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/9rUkXEVNq8LZdC1WCgkj3XJ1Mds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/492615-8162-4b37-bcbb-5c0d057ef2a6/1/HqDII8NgtfhhSJLTWxA8ZHdP1l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.236.0/23
Signature Algorithm: sha256WithRSAEncryption
24:d2:cb:bd:46:01:9a:3f:3b:11:96:ad:48:79:e8:70:51:fc:
ce:be:75:a9:5e:4b:d8:ab:df:f5:0b:8b:b6:45:d4:ac:e3:55:
95:a4:88:53:a4:56:48:97:7b:75:8b:60:e9:5c:56:02:aa:e5:
33:30:b0:52:d8:ff:58:d3:5e:3a:50:d5:70:a4:fb:0e:6b:7d:
44:44:50:a2:7a:96:f0:2c:49:6d:44:7d:e6:75:24:33:76:2d:
e2:d6:33:99:a7:fa:2b:97:20:49:e8:45:96:75:5a:a3:a9:4d:
6b:69:2f:7f:76:7f:77:24:39:37:c9:69:74:a8:52:11:23:df:
e2:84:7e:bc:1b:a6:a4:e2:19:e7:57:d0:14:58:ee:f5:e8:97:
13:5b:6b:c5:1b:7e:13:c5:ef:76:7f:66:0e:83:a3:a9:4f:a4:
ea:f4:75:ec:7e:26:20:c0:57:54:9d:ee:02:94:82:24:a0:c0:
33:c0:74:13:b5:b2:c7:d6:69:ca:94:9a:e1:db:bd:22:be:9e:
b1:23:1b:be:e4:7b:f6:9d:d3:fb:05:3b:54:34:b6:b8:17:6f:
50:6a:2d:e3:19:67:13:dd:fa:6b:5c:7e:17:4d:15:7e:b5:e9:
6e:c0:c1:65:87:29:2b:fd:54:c3:1a:2d:69:74:3d:33:36:48:
b0:1f:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:08 2024 by rpki-client on console-fra.rpki-client.org