Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/91vQBoawXimc0eY_6eK5TEPt3dY.roa
File: 91vQBoawXimc0eY_6eK5TEPt3dY.roa (raw, json)
Hash identifier: j0hXaHWKHTp3dz/hVqlgv2tGz7WKmuisP0fyjL9vhgA=
Subject key identifier: F7:5B:D0:06:86:B0:5E:29:9C:D1:E6:3F:E9:E2:B9:4C:43:ED:DD:D6
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 018570C2E49D50C431A50EE5D7B6DE8B6C26
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/91vQBoawXimc0eY_6eK5TEPt3dY.roa
Signing time: Mon 02 Jan 2023 04:34:58 +0000
ROA not before: Mon 02 Jan 2023 04:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47692
IP address blocks: 5.183.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:e4:9d:50:c4:31:a5:0e:e5:d7:b6:de:8b:6c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jan 2 04:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f75bd00686b05e299cd1e63fe9e2b94c43edddd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:ee:6f:8c:ba:b7:96:d2:ca:85:2b:0f:b1:
7b:ff:2a:6c:51:31:3a:24:51:2c:1f:7b:59:a6:11:
0f:2e:5b:73:e5:4b:b2:e5:a7:2f:2a:95:5f:a5:3c:
1a:bc:38:a7:d1:8f:cb:df:98:71:51:f4:74:b2:09:
43:95:94:2d:fb:2f:1a:6e:9f:3e:76:77:63:ed:bd:
be:63:c0:7f:ff:3d:57:4d:d3:cc:04:cf:01:11:f8:
00:54:2e:cb:a3:fa:e7:83:94:0e:0f:d5:26:02:5f:
d6:ec:33:b8:85:e2:63:90:f0:68:0c:3a:43:e9:90:
5e:d0:14:47:31:89:e4:9e:3e:1c:75:8b:8c:36:19:
94:0c:6b:9e:47:e0:ac:87:51:01:20:9f:2b:78:a2:
c0:d3:11:05:89:95:ac:b1:a2:f9:56:a7:5a:be:c7:
fb:ec:46:4c:da:f1:c3:e9:22:cb:ad:a7:1a:54:1d:
1a:48:42:d7:00:cd:7f:b0:b8:85:e6:09:57:08:fa:
0f:22:34:cd:a1:a7:12:08:1b:c4:7d:35:fe:37:89:
aa:63:11:4c:56:3a:34:f3:b5:df:af:be:73:5a:8a:
15:4b:5c:6e:eb:b5:c4:ce:79:94:21:2e:11:0f:df:
1b:34:97:9b:33:ec:ba:69:77:4a:b4:15:40:94:ce:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5B:D0:06:86:B0:5E:29:9C:D1:E6:3F:E9:E2:B9:4C:43:ED:DD:D6
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/91vQBoawXimc0eY_6eK5TEPt3dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.172.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e5:ac:f3:48:68:da:9b:38:7b:37:96:aa:0d:0a:1e:60:f8:
17:95:ee:81:63:13:be:f0:ac:fb:c5:9b:19:0b:5f:ce:ce:28:
a1:e3:5d:6f:a9:79:06:2a:d4:a7:8f:23:96:e3:3f:f9:a7:31:
cd:08:89:c3:e0:7a:ce:16:25:94:d3:c2:3a:c0:d8:ea:b3:21:
c3:a6:51:f2:55:33:f4:11:20:08:e7:f7:b8:23:ff:49:b6:bc:
bc:05:bf:68:a5:9e:64:bb:a4:54:f9:a2:c1:ae:f1:de:b1:1f:
69:42:0c:44:aa:1b:e2:61:23:0c:3c:46:ec:78:e4:70:b9:27:
f7:fa:6a:25:3a:db:9d:12:2a:c7:22:b0:53:7e:76:70:fa:1f:
d3:d1:6b:ed:18:24:21:3e:51:bb:59:85:ed:f1:70:1c:9d:9d:
3a:5c:46:0b:60:bb:15:51:21:e7:b5:f7:13:5e:4b:4d:e3:ad:
7e:07:fa:08:22:69:bc:94:93:21:db:71:fe:55:35:27:65:d6:
2d:99:33:46:24:8b:68:dc:d0:a7:78:e0:e5:71:94:c5:c5:e4:
42:ed:ea:e2:eb:0b:80:2c:28:94:d4:4a:9f:98:4f:70:f5:0d:
c0:5e:68:90:00:04:97:fc:13:48:0c:e9:95:c4:b0:2e:4f:21:
61:50:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:16 2024 by rpki-client on console-fra.rpki-client.org