Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1S7fXl0mxMY-V8X-frR89WmJvUs.roa
File: 1S7fXl0mxMY-V8X-frR89WmJvUs.roa (raw, json)
Hash identifier: HJrCLu7cCl2I+M3J3L2xo5o8GNpISB3c+rskqTVZHwU=
Subject key identifier: D5:2E:DF:5E:5D:26:C4:C6:3E:57:C5:FE:7E:B4:7C:F5:69:89:BD:4B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571031349F433048223D030A6A259CD56
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1S7fXl0mxMY-V8X-frR89WmJvUs.roa
Signing time: Mon 02 Jan 2023 05:45:05 +0000
ROA not before: Mon 02 Jan 2023 05:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198352
IP address blocks: 91.190.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:13:49:f4:33:04:82:23:d0:30:a6:a2:59:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d52edf5e5d26c4c63e57c5fe7eb47cf56989bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:f7:fd:60:fe:74:94:df:fc:f7:9c:d5:09:
b7:bb:5b:c5:ab:cd:3e:8a:5b:75:bf:e3:a8:be:89:
3f:d6:32:2e:6c:e9:c9:18:45:65:75:fd:28:71:ff:
bc:3c:9a:f0:fe:52:e8:2b:35:b7:af:f2:4c:1f:0f:
55:65:06:39:b7:3a:99:64:03:53:3e:25:a1:81:30:
2d:dd:13:3b:51:f8:18:31:55:63:5c:1f:bf:3c:0e:
65:bd:7c:7b:10:34:76:80:43:a6:93:fc:a4:e9:98:
08:22:d8:95:ee:b7:ea:be:10:77:e3:dd:17:56:30:
81:9e:5f:73:d7:83:b0:b1:24:d7:62:38:44:e6:b8:
7f:24:c3:d7:54:3e:36:5f:63:84:a2:f4:f1:86:af:
df:a5:01:1f:35:20:b3:16:63:f8:31:3f:e2:d1:85:
fa:39:7a:f5:18:64:5d:2e:cc:16:70:3c:a8:c6:4d:
09:99:48:d0:58:28:b1:02:62:42:01:7a:62:25:f9:
40:85:4f:9e:8e:29:f2:d3:b2:f8:fe:46:d5:d2:ac:
db:ad:d3:ef:2c:f9:d1:62:49:1b:6a:69:22:63:cc:
ec:13:9a:2c:64:d2:55:2a:e9:fd:19:8f:c5:16:ed:
ba:15:e6:11:a8:e9:41:e8:a1:b5:cc:4a:3a:8c:3a:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:DF:5E:5D:26:C4:C6:3E:57:C5:FE:7E:B4:7C:F5:69:89:BD:4B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1S7fXl0mxMY-V8X-frR89WmJvUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.98.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8c:d4:7c:34:5c:c0:7e:0e:27:02:94:37:e6:7f:90:16:b2:
a9:eb:2b:4a:71:60:2a:41:bb:6a:1e:45:5e:1f:6e:c8:27:e7:
5a:30:3b:68:0c:45:fa:bb:d5:31:2a:fc:ae:8a:fd:97:61:86:
ee:cb:89:38:13:4d:25:7f:59:13:b0:ea:f0:9a:85:de:17:30:
e6:41:84:49:24:0e:f0:90:40:4e:90:1e:e2:7b:34:0b:e8:f6:
f0:a3:e6:72:f7:ef:ac:e8:0b:3b:e4:ba:f2:89:93:e5:db:c3:
89:b4:55:57:b5:16:bc:c8:b3:e4:cc:55:9a:97:15:e5:ad:07:
e2:2c:65:83:3a:97:96:28:36:8c:1b:72:49:5e:2c:74:cb:8c:
35:5b:d2:57:45:70:78:14:37:d4:b8:fc:13:c2:77:f1:06:68:
7f:a6:46:2a:e5:9c:9d:c9:89:ad:3e:6e:eb:71:60:6b:85:47:
ac:8b:26:e0:cd:d8:da:f1:60:2a:70:36:00:a9:07:e7:ed:4d:
79:a3:2e:50:51:fb:e1:eb:d6:00:15:4b:90:19:ee:15:c5:2b:
6a:8d:7e:61:22:58:10:f8:37:e5:37:a4:07:6e:66:df:f2:f1:
dd:07:a3:43:83:96:14:d7:17:5d:e0:a5:3a:be:86:73:99:d2:
5b:ff:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:27 2024 by rpki-client on console-fra.rpki-client.org