Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vBcU4nsgYqPvAU52eo853kVY0is.roa
File: vBcU4nsgYqPvAU52eo853kVY0is.roa (raw, json)
Hash identifier: TZ8lZx/6rEm6nnLhF7AQWWoS5GZe55Uvj7r62gLtJXs=
Subject key identifier: BC:17:14:E2:7B:20:62:A3:EF:01:4E:76:7A:8F:39:DE:45:58:D2:2B
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BAA16045E5C87A47352748DE3F95F3
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vBcU4nsgYqPvAU52eo853kVY0is.roa
Signing time: Tue 02 Jan 2024 10:31:40 +0000
ROA not before: Tue 02 Jan 2024 10:31:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204174
IP address blocks: 91.186.194.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 27 Mar 2024 08:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:a1:60:45:e5:c8:7a:47:35:27:48:de:3f:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc1714e27b2062a3ef014e767a8f39de4558d22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:81:39:d3:5f:5a:43:64:7a:95:67:6b:b5:3d:
02:f4:5e:9c:d6:e6:7c:68:ce:f6:c1:0e:67:b8:c4:
fd:8e:58:d5:ab:b7:58:64:00:7e:07:4a:25:38:81:
6a:a9:61:9d:0f:b2:b3:eb:96:e6:6f:e5:1c:13:4b:
d3:18:e9:19:80:0e:6d:c4:6e:27:62:bd:36:e5:70:
8e:6a:31:63:cf:4b:0c:bb:c4:3d:31:3a:ab:97:40:
de:b0:2e:e1:a6:14:98:e9:b6:c3:84:24:7b:5c:39:
4c:82:ab:1a:bc:98:bc:c0:51:45:94:86:02:85:c9:
23:12:e0:5b:a4:c7:d7:66:59:a6:3c:6c:98:9e:e7:
51:14:77:99:91:d2:49:e3:c8:b7:33:6b:d8:dc:c2:
0a:4c:d4:8f:d0:f1:17:a6:43:84:a9:87:53:a2:db:
9f:68:71:cb:3f:b3:a2:97:28:b5:78:c3:70:1f:65:
5a:4c:cf:ff:cc:88:54:b1:e8:eb:d7:ef:1a:95:08:
2b:a4:33:4e:0a:fd:02:e6:03:3f:7c:f2:1a:1c:ac:
ed:5c:6c:77:7d:19:55:ef:63:0c:70:da:10:c5:8e:
bf:1c:1a:1e:bd:e8:6c:98:3d:85:cc:5e:43:42:e8:
fe:73:a7:38:5a:1a:99:dc:ee:db:4e:30:69:4e:5a:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:14:E2:7B:20:62:A3:EF:01:4E:76:7A:8F:39:DE:45:58:D2:2B
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/vBcU4nsgYqPvAU52eo853kVY0is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.194.0/23
Signature Algorithm: sha256WithRSAEncryption
57:be:58:8c:98:9a:b0:db:5d:35:d7:95:dd:84:1c:66:03:8c:
b1:7c:8f:42:ab:bf:36:79:79:86:4b:97:0e:9e:ad:88:be:31:
af:fe:f4:f8:cd:07:39:b1:78:29:78:e7:d7:75:93:36:34:f9:
c5:fb:99:0c:f7:55:b1:82:20:b8:10:d8:a7:eb:8b:86:ce:de:
d9:1d:c2:13:b8:c9:a5:1b:0d:c7:49:b4:87:38:9f:ff:f4:f3:
b0:f5:f2:b4:79:86:86:62:62:36:fb:21:ec:0a:0a:ea:13:7f:
31:4f:35:2b:40:37:ad:a5:00:b0:af:cd:c6:5f:f3:90:4c:6f:
d9:bd:45:18:81:75:5b:87:a1:97:3f:4b:63:84:1f:26:d3:70:
7f:59:60:20:e9:e7:dd:df:47:30:ef:8a:d7:f8:8f:8b:95:da:
e8:93:5d:2c:4f:18:b1:0d:5b:06:bc:8c:d5:59:25:d0:e5:0d:
ce:13:53:9e:ce:db:6c:75:da:5d:69:2f:8d:c0:61:75:6d:91:
f7:59:72:9d:35:39:9d:65:66:99:17:3f:88:e7:38:75:e4:6f:
49:4a:67:0b:e7:d3:74:34:01:08:39:1b:9e:b6:53:76:94:94:
d7:62:aa:62:c3:02:cf:51:f3:6f:15:39:96:e8:cc:c6:cf:9f:
bc:ad:fe:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 12:42:48 2024 by rpki-client on console-fra.rpki-client.org