Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/IxR2igPtIVbEBtAIbR_By1VcduM.roa
File: IxR2igPtIVbEBtAIbR_By1VcduM.roa (raw, json)
Hash identifier: ihNOitlu5f9RWBmrecG0/xEi7CoOA2C545xmZu5KzTs=
Subject key identifier: 23:14:76:8A:03:ED:21:56:C4:06:D0:08:6D:1F:C1:CB:55:5C:76:E3
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 01856DCAEE47B19BF4FE001E0D3F04BA0A0E
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/IxR2igPtIVbEBtAIbR_By1VcduM.roa
Signing time: Sun 01 Jan 2023 14:44:53 +0000
ROA not before: Sun 01 Jan 2023 14:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198307
IP address blocks: 91.226.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:ee:47:b1:9b:f4:fe:00:1e:0d:3f:04:ba:0a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Jan 1 14:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2314768a03ed2156c406d0086d1fc1cb555c76e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:f3:63:db:ac:be:e3:f1:83:b9:0e:6b:6b:
b7:1b:b9:02:2d:10:64:78:61:ac:3b:e0:32:1c:fc:
12:9d:5b:53:0e:84:50:00:38:a5:db:17:98:ba:3e:
21:6f:6d:d3:0c:3b:70:86:04:c7:90:2d:85:22:77:
27:0b:5c:d0:5c:74:a0:0b:86:c1:7a:e4:25:1f:24:
76:8b:d0:51:0c:14:bf:9d:d5:9b:57:b3:d8:23:02:
ea:7b:7a:8f:30:71:ae:d4:a4:f5:98:0f:5a:53:63:
44:ff:25:61:9b:f9:44:84:9e:15:88:52:68:5c:bd:
80:e0:e2:f2:27:ea:f6:25:fa:b1:40:86:d9:c5:50:
10:c1:c1:9e:0f:8f:c3:62:e1:06:7b:a2:f7:62:35:
fd:a8:57:32:93:9f:40:d0:95:de:6b:bb:79:43:1b:
3d:65:c9:2a:eb:26:f6:1f:f6:6d:04:ad:2b:a6:13:
c2:95:26:b2:d4:ce:6e:a4:93:30:bb:4a:d1:c6:1a:
9e:a9:8b:73:64:dc:c1:f1:fb:9f:6c:7d:79:32:91:
6f:7f:95:27:ab:86:f6:4c:6d:18:99:d9:d9:41:59:
b4:58:32:71:6b:be:a5:e3:1b:6d:61:b0:ce:22:e9:
b9:c3:f0:02:86:cc:09:37:28:e6:5c:f5:cd:66:db:
da:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:76:8A:03:ED:21:56:C4:06:D0:08:6D:1F:C1:CB:55:5C:76:E3
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/IxR2igPtIVbEBtAIbR_By1VcduM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.77.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5a:06:a8:d9:0f:60:a1:43:55:3d:2e:f8:ae:61:6f:f7:c9:
1e:30:8d:0f:17:56:f6:34:f8:ed:0b:39:16:71:6a:09:4e:46:
ec:aa:88:79:40:b3:3f:f9:91:11:3c:76:e8:20:9e:78:78:5d:
be:5a:86:93:7f:3a:07:24:f1:a4:6e:d6:1b:6b:4a:e3:ac:f6:
a4:f2:13:e5:bc:15:e4:f1:b1:44:f3:46:2a:85:f7:8f:25:ec:
5f:53:8f:68:65:31:65:c6:8c:df:db:fb:cf:d4:57:32:6f:b0:
04:dc:81:3a:2a:8b:e6:ef:6f:8b:f7:7f:81:be:8a:a7:7e:46:
cc:a8:13:fd:05:a7:ed:9a:46:d5:31:ad:6d:00:b2:4e:00:af:
a5:06:7c:4c:51:6c:16:6d:f0:fc:88:cb:7f:19:12:6c:77:33:
11:31:00:99:d1:b1:db:c2:8f:86:dd:03:90:ac:a2:a3:60:bd:
a4:0e:43:09:80:8e:15:d0:71:77:60:76:f0:1f:b9:9b:f0:28:
f7:95:c4:7a:38:54:0e:89:1d:e2:f9:50:7e:2e:35:ad:72:60:
b6:6c:40:51:69:ad:bb:0c:bc:d0:b1:ce:04:5b:1f:ec:97:b0:
4a:fb:7a:b0:c3:79:26:92:01:78:5c:0e:f6:b9:fa:97:80:77:
6b:f0:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:25 2024 by rpki-client on console-fra.rpki-client.org