Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/cPpxTACc-oh12TfkPxHfelbTQsM.roa
File: cPpxTACc-oh12TfkPxHfelbTQsM.roa (raw, json)
Hash identifier: 78d0JVxAcmQPGyhY3JF204Xbkq+6VkyW3VipFfFrflk=
Subject key identifier: 70:FA:71:4C:00:9C:FA:88:75:D9:37:E4:3F:11:DF:7A:56:D3:42:C3
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01864555FC138A636EDB4C0924CBF09E94F5
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/cPpxTACc-oh12TfkPxHfelbTQsM.roa
Signing time: Sun 12 Feb 2023 11:15:08 +0000
ROA not before: Sun 12 Feb 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46450
IP address blocks: 91.186.196.0/22 maxlen: 24
91.186.208.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:45:55:fc:13:8a:63:6e:db:4c:09:24:cb:f0:9e:94:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 12 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70fa714c009cfa8875d937e43f11df7a56d342c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:15:e5:66:60:80:5a:1a:76:ab:46:ef:6b:
05:25:97:3a:b0:c7:4f:2b:b0:44:fb:68:a2:c4:3b:
df:f7:36:fe:9e:14:03:8c:b5:23:67:ba:5b:07:11:
0e:24:b9:0d:78:fd:c7:0e:ee:70:5e:43:2e:2b:e2:
39:35:3d:06:bd:20:96:62:ae:e2:aa:fe:67:ff:0c:
6c:e4:2f:86:e7:0c:74:3d:00:ff:b9:5e:fe:21:02:
ac:02:8a:73:ed:1c:bc:2d:80:c2:03:4c:82:af:06:
8a:67:22:69:5e:29:f5:45:07:fe:65:a2:6e:cf:71:
58:58:53:8a:96:60:c4:e8:c3:27:91:00:ff:2a:4d:
e7:09:31:88:99:f7:f4:4c:a7:94:d2:5c:bf:56:e0:
1a:95:43:95:00:bc:1c:25:7d:72:0b:50:0d:2a:b2:
0b:9a:cf:99:7d:da:14:b2:ab:c6:26:52:96:9d:a2:
a7:bb:a8:08:1f:8a:dd:59:fe:cc:cf:17:b4:56:04:
23:8d:d9:71:68:a4:82:6b:5f:e3:d0:a8:14:6f:21:
cd:8a:18:0c:b4:f9:27:1c:9d:2c:d9:f1:61:ee:3b:
43:61:44:c7:7c:43:74:75:bf:54:b1:22:f7:a8:0b:
94:d7:02:0e:56:79:ed:27:77:da:34:97:76:e6:61:
dc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FA:71:4C:00:9C:FA:88:75:D9:37:E4:3F:11:DF:7A:56:D3:42:C3
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/cPpxTACc-oh12TfkPxHfelbTQsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.196.0/22
91.186.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:8c:2e:fe:0a:70:a6:42:4c:9e:bd:41:34:43:05:b1:c1:38:
09:e0:52:ce:a0:59:26:cf:8e:26:6c:14:6f:13:12:85:b7:4a:
cd:85:2d:1b:7a:5e:24:1b:cd:bd:dc:76:bf:01:f4:09:a0:85:
1f:30:cf:d4:e4:b6:ae:00:89:18:a5:4b:03:87:84:00:2f:7d:
1f:ce:a5:29:a6:7d:a2:10:45:58:40:08:57:fc:07:27:6c:54:
3a:0f:f6:37:b0:e0:36:21:14:28:e7:a7:a1:01:17:2e:66:6c:
ad:a9:3f:92:4c:17:29:2b:70:3c:40:b8:2c:fc:c7:ae:3a:6d:
0d:57:82:ab:35:48:50:35:ab:2f:b3:c5:b5:08:fc:8a:f5:e9:
83:01:19:16:98:9e:53:bf:24:28:49:a1:75:06:bc:49:1b:00:
da:b2:e9:fb:8c:4e:cd:7e:91:19:dd:5e:23:39:72:2a:4c:a1:
f5:04:4e:02:41:85:94:de:66:a9:00:ba:fb:26:aa:f9:ea:d7:
4b:2e:9e:42:3f:c2:8a:90:c8:1b:ad:09:41:ea:58:05:0b:a4:
a3:bd:b5:bd:a3:8d:60:3f:82:a6:dc:5e:a8:d2:9e:ec:80:7f:
b7:76:57:05:60:67:26:80:4d:59:28:4f:59:af:06:ed:79:05:
e5:a7:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 09:15:39 2023 by rpki-client on console-fra.rpki-client.org