Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/qy37WRu8wr4ogvO8xJSSQeaoGyQ.roa
File: qy37WRu8wr4ogvO8xJSSQeaoGyQ.roa (raw, json)
Hash identifier: D/BWzFebju9j5othFa6Sdq1eaEumAyXZjPmy1oDJtXs=
Subject key identifier: AB:2D:FB:59:1B:BC:C2:BE:28:82:F3:BC:C4:94:92:41:E6:A8:1B:24
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F341B30D68D1AC55BDAF6FA15E4141DD9
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/qy37WRu8wr4ogvO8xJSSQeaoGyQ.roa
Signing time: Wed 01 May 2024 12:22:28 +0000
ROA not before: Wed 01 May 2024 12:22:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214998
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 06 May 2024 07:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:34:1b:30:d6:8d:1a:c5:5b:da:f6:fa:15:e4:14:1d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: May 1 12:22:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab2dfb591bbcc2be2882f3bcc4949241e6a81b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:64:3e:9c:a8:63:0b:c2:d1:b6:34:77:86:
c7:28:77:7a:fc:45:d7:c0:4e:a7:c2:73:df:01:40:
3b:d2:78:03:35:17:82:b8:05:7f:7b:1b:77:50:96:
d1:0e:78:c9:3d:11:eb:dd:ea:e1:af:19:d6:4e:0f:
5f:02:04:98:56:f0:94:91:ca:73:ce:1e:ab:87:25:
19:18:87:26:96:9d:14:df:b7:27:57:ae:26:54:1e:
d0:0c:28:c4:2a:18:43:a2:c6:22:4d:20:7f:e0:3f:
ee:ce:6f:92:94:ae:47:b7:a5:ae:c3:ef:01:1a:3a:
9e:3c:0f:e6:0e:64:b2:6c:32:58:54:a8:93:2c:8f:
cc:57:be:8a:65:72:e1:dd:d5:35:e4:38:2b:fc:e5:
4c:ea:fd:85:01:49:b4:64:0b:6c:ba:46:5c:e1:e4:
a0:64:b1:c7:9b:20:e7:6c:b3:67:b9:63:0c:2f:96:
9f:53:d3:da:c1:67:29:69:96:85:27:0d:7f:26:07:
06:1c:ad:90:15:7e:39:80:be:35:76:b1:7f:a8:9e:
75:68:50:1f:e8:7c:53:95:32:a9:d9:53:fe:ef:23:
d9:8b:c2:a9:a3:e3:c8:80:81:1b:21:c7:1a:14:ad:
af:a6:f5:08:8e:74:6f:65:79:d2:cb:7b:70:9e:ac:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:FB:59:1B:BC:C2:BE:28:82:F3:BC:C4:94:92:41:E6:A8:1B:24
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/qy37WRu8wr4ogvO8xJSSQeaoGyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:7d:db:a3:ee:c1:b0:2d:79:a0:32:07:cd:72:d6:1a:d6:ea:
0c:ac:1b:9f:d7:11:d3:5a:e1:3f:73:8c:63:7b:43:ff:01:69:
cb:31:b8:9b:5a:26:20:8b:de:cb:7a:22:ec:fc:94:b5:d1:5e:
ff:df:cc:4a:12:bb:28:6b:0b:89:dc:24:ae:15:62:ef:4b:54:
24:47:d6:db:e6:0c:bd:c9:24:68:b5:d3:bb:b3:e3:53:b1:cc:
8e:61:26:45:f6:53:be:99:eb:86:6f:d9:5f:a1:6e:e5:ae:e0:
0f:92:04:00:b1:c5:03:c8:1c:ff:13:c5:6a:3c:4b:72:3d:7c:
4c:f7:62:07:97:a2:8c:43:e7:e8:f6:78:4d:28:c6:0b:f1:cd:
62:4e:4b:e9:03:5e:52:0d:9a:d6:fd:ac:5d:a7:33:96:7d:ff:
ab:d4:ff:3c:46:32:4b:b3:70:87:81:89:c7:78:c6:55:3a:a7:
bb:7b:11:91:70:52:6c:2b:75:90:4e:b0:05:16:b3:f6:bb:5a:
50:af:c0:50:53:aa:94:e5:9c:2f:4e:ec:40:4e:ca:aa:fe:7f:
92:14:e0:59:16:f6:44:2b:1b:bd:fb:d2:96:64:fc:a6:84:9d:
cb:ae:08:a8:8e:4e:1e:43:21:df:29:ae:a2:8a:c9:3c:14:f6:
c6:71:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org