Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/62q-uyaD4w_1V7BpoUv1kg3zO9o.roa
File: 62q-uyaD4w_1V7BpoUv1kg3zO9o.roa (raw, json)
Hash identifier: kGuCvqNBa2zNfbRfnUnenyx2A+a0vRiYxdAB3YBLWfk=
Subject key identifier: EB:6A:BE:BB:26:83:E3:0F:F5:57:B0:69:A1:4B:F5:92:0D:F3:3B:DA
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018C6EF171C337DF00BC5BAAF5DFF35F077F
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/62q-uyaD4w_1V7BpoUv1kg3zO9o.roa
Signing time: Fri 15 Dec 2023 19:26:06 +0000
ROA not before: Fri 15 Dec 2023 19:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60707
IP address blocks: 91.151.95.0/24 maxlen: 24
213.142.143.0/24 maxlen: 24
91.151.83.0/24 maxlen: 24
91.151.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6e:f1:71:c3:37:df:00:bc:5b:aa:f5:df:f3:5f:07:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Dec 15 19:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6abebb2683e30ff557b069a14bf5920df33bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:dc:83:ba:5f:e8:02:61:eb:7b:a1:1e:c0:
8b:e7:b6:09:89:60:77:3b:9d:58:73:a1:94:5b:0e:
36:cd:bc:72:a7:75:56:86:16:05:35:59:70:2d:45:
1b:e6:09:72:77:c5:0a:64:dc:bf:57:44:b2:16:83:
b6:3e:5e:f3:9b:11:5f:82:f8:1d:e1:ea:4d:8f:bb:
3e:88:9f:41:95:fe:b8:ac:dd:4c:33:1a:2f:97:88:
86:f9:a4:3d:d9:9e:b9:f4:a6:17:23:76:a7:bd:ba:
2d:46:13:60:8d:6e:76:d6:33:3a:f1:ea:b3:34:41:
04:b8:43:42:78:86:c0:bc:47:5d:14:d2:d5:52:e9:
bb:58:8e:4b:ea:7f:28:97:0d:3c:a0:03:9d:11:9a:
0d:9d:76:a0:f7:3a:f1:75:ce:9e:8b:ad:75:a1:7c:
22:f5:49:05:04:19:ab:97:0d:05:3d:8b:c1:bd:7c:
e1:cd:2f:fe:aa:95:61:82:8b:ea:0e:a7:3f:24:ae:
05:15:ce:fd:70:92:00:9f:a2:67:d2:5f:47:c3:f9:
b4:f4:8d:c4:55:3e:73:2e:80:67:d0:cc:e1:6c:70:
7f:13:d1:e7:33:d5:5e:bc:d8:7a:6a:ba:68:60:8d:
ad:13:9f:55:31:a6:06:63:be:d4:78:98:1b:a9:b4:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:BE:BB:26:83:E3:0F:F5:57:B0:69:A1:4B:F5:92:0D:F3:3B:DA
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/62q-uyaD4w_1V7BpoUv1kg3zO9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.83.0-91.151.84.255
91.151.95.0/24
213.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:07:e5:6a:e8:34:aa:23:6f:18:94:22:0c:85:4d:ba:88:8d:
3f:4c:38:68:07:55:3e:4a:31:07:76:5d:8e:1f:f5:95:b9:17:
74:5e:9a:ad:10:1d:e0:ef:d0:0c:5b:32:67:d3:a7:55:ad:0a:
16:51:f1:7d:d8:c8:b4:2b:a0:ce:01:67:22:85:d0:5d:23:1b:
fa:e5:55:02:a1:c5:43:57:9e:7b:04:7f:b8:06:8b:c0:e7:13:
82:df:7d:64:b4:79:f0:8d:7b:d4:b5:88:07:0a:26:9e:74:d1:
67:dc:c0:09:06:e2:6a:f4:da:77:94:5e:2a:6d:0f:05:83:b0:
1b:9a:10:2f:d0:a6:8b:04:b6:31:0a:92:ce:99:20:56:5d:d9:
53:a3:82:b0:76:bd:44:c6:01:9d:07:b1:57:3c:44:aa:2a:b2:
61:02:65:c8:4c:92:c9:ef:1f:f0:ad:0a:4b:9a:fd:3a:9b:06:
b6:5a:40:6e:7c:72:06:39:dc:88:6b:0e:ac:0b:58:f5:62:64:
75:26:f2:60:71:23:46:77:e7:d9:2b:24:69:0e:a5:1c:cb:aa:
31:92:c2:d9:85:4a:af:c8:5a:d0:d9:53:75:c2:f9:ac:fa:d8:
53:19:23:4a:95:d6:db:26:84:cb:d4:64:21:32:93:cf:80:87:
08:7c:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 23:35:20 2023 by rpki-client on console-fra.rpki-client.org