Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/FepxDYT5NmjiarGgmWihZzLBtvI.roa
File: FepxDYT5NmjiarGgmWihZzLBtvI.roa (raw, json)
Hash identifier: Brt7m4wNAjuTYNlowh3x+LDVjJ9U42EuVX2FgF/p6qs=
Subject key identifier: 15:EA:71:0D:84:F9:36:68:E2:6A:B1:A0:99:68:A1:67:32:C1:B6:F2
Certificate issuer: /CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Certificate serial: 01856B8A1C643A6467629155F3C4F5CF4E28
Authority key identifier: DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/FepxDYT5NmjiarGgmWihZzLBtvI.roa
Signing time: Sun 01 Jan 2023 04:14:51 +0000
ROA not before: Sun 01 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202185
IP address blocks: 91.216.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:1c:64:3a:64:67:62:91:55:f3:c4:f5:cf:4e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcb1cf3d3f3cdc3426fb49f0a0c33dc04c8681c
Validity
Not Before: Jan 1 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15ea710d84f93668e26ab1a09968a16732c1b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:d2:9d:dc:68:48:ec:8b:44:58:2c:d9:9c:
67:b9:6f:50:6f:8d:59:c2:4a:3c:15:b1:16:e5:c6:
50:9a:bd:ea:90:d3:a2:1e:d0:9f:8c:52:d8:46:9d:
ac:22:44:1d:27:da:8b:e3:f1:5e:94:9a:1e:b6:7f:
82:5a:f3:a2:97:14:53:f4:1e:43:a6:a1:e7:bc:a1:
8e:c2:d1:c4:16:da:c2:51:cb:c5:e5:87:69:43:bb:
bd:4a:9f:5c:b1:64:a7:49:b6:ea:65:9d:58:77:d3:
46:63:3f:ec:77:9f:28:35:77:95:60:29:f3:27:b6:
4f:75:ed:0f:b5:30:42:c7:ff:aa:d8:a3:9a:bb:ee:
16:ad:41:9a:a0:cf:75:87:11:10:b1:ce:05:1a:de:
94:01:b3:df:9d:34:ae:34:62:0f:c5:b7:89:38:dc:
c2:c4:f8:f1:e2:9d:b8:96:4f:8a:e7:e0:3f:05:b6:
47:b1:b0:84:81:2b:59:db:e3:f8:80:f6:40:e6:1b:
c3:74:3b:31:76:d4:bb:9d:1e:0e:b3:7f:fc:5a:74:
75:b7:21:23:9c:81:82:26:79:57:75:83:8c:8f:01:
59:36:81:dd:1e:e2:8e:56:74:e7:68:ac:fc:0d:44:
63:06:26:ab:59:68:68:fd:8a:55:9f:77:ba:c5:4f:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:71:0D:84:F9:36:68:E2:6A:B1:A0:99:68:A1:67:32:C1:B6:F2
X509v3 Authority Key Identifier:
keyid:DB:CB:1C:F3:D3:F3:CD:C3:42:6F:B4:9F:0A:0C:33:DC:04:C8:68:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28sc89PzzcNCb7SfCgwz3ATIaBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/FepxDYT5NmjiarGgmWihZzLBtvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a408fb-5c80-4dca-8428-73669ba63f7c/1/28sc89PzzcNCb7SfCgwz3ATIaBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.115.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fa:40:30:0e:33:bd:a8:27:3b:b3:cd:8f:a6:32:fd:88:70:
99:72:82:f0:c8:ef:bc:a2:38:66:65:dc:c6:d0:a0:2e:24:db:
c7:11:e9:27:a9:2c:00:61:dc:c3:ce:ed:ce:0e:1f:73:69:2c:
8c:09:2e:5c:91:8e:00:aa:fd:2f:aa:f8:2a:3e:4d:4a:2b:bc:
a5:5e:c2:65:1a:d8:c6:ce:14:61:02:d4:88:f5:1d:68:a4:0f:
5e:5c:d6:75:fb:33:f9:9b:16:39:71:6c:a7:c1:db:87:13:b5:
dd:f2:a0:5d:3e:74:aa:00:84:4b:86:7a:12:56:2e:9e:68:a1:
14:ed:df:ec:dc:5c:42:b0:49:51:36:ce:81:a4:05:6c:ee:36:
1e:94:69:79:02:7c:9f:f5:e7:3e:d9:42:ba:93:3b:f9:e3:e6:
3a:f7:c2:35:2a:0a:c1:95:86:b9:ec:3e:79:ae:5b:e3:10:4a:
b0:b9:35:6a:4f:fc:d0:e7:5e:18:d8:f3:c4:44:d0:3d:d7:5b:
78:da:c4:30:55:3d:7c:7c:f9:1e:39:60:aa:65:c6:9a:e4:5e:
6e:9c:e9:c2:5c:6a:52:c9:e4:67:df:7e:71:86:1a:83:1c:be:
ac:3b:6c:2b:5e:be:ae:a3:2d:41:45:a3:bf:7c:d1:a7:c1:41:
c0:13:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:50 2024 by rpki-client on console-ams.rpki-client.org