Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/y91Rz3m21jErIb6ggYxTH3OF-PQ.roa
File: y91Rz3m21jErIb6ggYxTH3OF-PQ.roa (raw, json)
Hash identifier: 7OlBIzqrYFtb54BFc91+tx2147ua5PMa7gBOg5WQVlE=
Subject key identifier: CB:DD:51:CF:79:B6:D6:31:2B:21:BE:A0:81:8C:53:1F:73:85:F8:F4
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 01857115594748ABDB14A3542E1122A54DE4
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/y91Rz3m21jErIb6ggYxTH3OF-PQ.roa
Signing time: Mon 02 Jan 2023 06:05:02 +0000
ROA not before: Mon 02 Jan 2023 06:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201472
IP address blocks: 89.174.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:59:47:48:ab:db:14:a3:54:2e:11:22:a5:4d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbdd51cf79b6d6312b21bea0818c531f7385f8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:ea:dd:ab:61:13:01:73:1f:b4:28:29:f0:
d0:03:67:9a:24:bf:b2:2d:bb:ea:fd:e8:ee:0e:0b:
67:15:93:97:7b:49:78:b1:15:60:d5:8f:06:0e:ee:
e2:e1:3b:d8:f6:a0:c3:c9:bb:b2:fb:39:c0:37:b4:
54:c3:e8:26:46:b8:26:c6:ed:76:fb:70:bb:83:2f:
44:ef:7f:97:bb:b0:f2:d0:d7:76:2f:7b:23:52:62:
10:8f:0e:ec:31:b0:cd:79:d7:3a:8f:9d:14:39:4d:
cc:64:d4:29:d1:d5:fb:51:dc:19:41:ea:03:38:c1:
ef:96:78:78:ac:3d:ee:7e:9c:33:c9:05:62:1a:d4:
71:fc:e8:c4:17:54:8a:14:69:c8:e3:f4:03:71:42:
33:54:24:32:43:71:30:eb:68:e2:6e:30:75:c9:da:
0c:e6:49:a5:a0:83:91:d1:22:95:9c:d6:da:8e:48:
71:fc:53:b9:0b:3e:73:ee:a7:06:15:62:ad:21:82:
4d:c1:7b:52:87:12:a8:58:d7:04:df:4a:8c:d5:a7:
50:13:24:98:65:61:ea:fe:76:e2:d8:65:5c:15:1e:
c5:4c:aa:c3:de:70:ad:c9:84:85:a1:a5:76:0b:7c:
a2:63:19:cd:dd:81:d5:3e:f2:c2:19:6b:8b:36:c6:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DD:51:CF:79:B6:D6:31:2B:21:BE:A0:81:8C:53:1F:73:85:F8:F4
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/y91Rz3m21jErIb6ggYxTH3OF-PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2e:97:72:aa:ba:71:80:09:2f:82:4f:7e:e8:4f:e9:d1:7f:
a2:e5:8f:fb:9b:89:ad:10:7c:1e:2e:6d:db:da:5d:77:27:90:
0f:08:c9:ce:85:1d:72:5e:0a:84:69:33:60:f3:32:43:27:3a:
fd:0d:51:3a:b4:50:af:06:c0:6f:70:39:78:05:c8:7f:20:73:
9f:fc:5a:6b:62:56:35:85:a9:b5:87:a0:01:cb:40:c7:3a:f5:
f1:1f:01:bb:c9:25:03:24:02:38:9b:d8:bf:4d:2c:93:b8:c4:
8b:36:14:d7:ff:fa:f8:18:0f:31:01:20:c2:b7:05:47:7c:25:
03:dc:2e:fd:07:3a:18:0f:d1:ef:ec:2f:92:55:90:7b:45:fc:
91:27:a2:c6:1f:ed:a1:68:4b:07:45:9f:34:80:2b:93:db:de:
7d:a8:c8:f1:8e:df:33:0c:7c:19:9b:17:f7:1b:d6:86:d5:be:
3e:fe:9c:a5:09:4e:3b:20:a0:da:4b:a5:f6:e2:82:df:f4:36:
99:99:3b:5d:25:7d:e3:b3:38:bc:86:34:9d:8f:f3:8e:34:95:
c6:e4:72:95:57:18:6e:ab:8b:74:33:79:9b:ec:db:ab:93:8b:
0a:18:af:a1:ed:3a:e9:ca:5d:b9:31:fa:1d:66:f8:e3:13:4e:
22:6e:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:30 2024 by rpki-client on console-fra.rpki-client.org