Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/OuyFva0a7QBXKCxKirv2M6XT33w.roa
File: OuyFva0a7QBXKCxKirv2M6XT33w.roa (raw, json)
Hash identifier: cBb6S9vX75i4z+u1qd0/BfnRaZmRnZxSL++g6vBSYAY=
Subject key identifier: 3A:EC:85:BD:AD:1A:ED:00:57:28:2C:4A:8A:BB:F6:33:A5:D3:DF:7C
Certificate issuer: /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial: 01856EF422455185F2AF23F67A2C0887EC92
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/OuyFva0a7QBXKCxKirv2M6XT33w.roa
Signing time: Sun 01 Jan 2023 20:09:31 +0000
ROA not before: Sun 01 Jan 2023 20:09:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12785
IP address blocks: 91.223.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:22:45:51:85:f2:af:23:f6:7a:2c:08:87:ec:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
Validity
Not Before: Jan 1 20:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aec85bdad1aed0057282c4a8abbf633a5d3df7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:40:e6:3c:e1:d1:c1:1d:31:96:3c:27:96:82:
7e:cc:13:26:e5:9c:55:27:06:ee:2c:b5:a4:a8:76:
e2:bb:7e:46:4b:16:22:d3:95:da:72:be:e8:ff:f6:
fe:48:6d:fd:bf:f4:5f:3e:c4:af:cf:76:52:c3:74:
95:bd:94:da:86:06:3f:ae:86:09:5d:a2:8b:d8:99:
f5:f3:12:b8:70:ed:bd:76:fd:0a:12:ad:44:39:14:
b5:46:22:70:24:fa:c7:62:96:3b:0d:16:88:ad:7c:
f7:8e:ce:3d:48:d4:13:e9:aa:12:ae:ed:f1:dd:bb:
ed:32:f5:8f:8e:98:27:53:04:70:9f:84:2e:e8:91:
49:af:38:fa:84:3a:47:f6:62:a7:13:5d:cc:32:14:
52:6b:c8:71:f7:2e:47:c9:94:af:3f:f2:30:fc:d7:
5f:23:e8:07:68:6e:df:de:67:35:0a:28:09:42:25:
a8:c2:31:e3:24:a5:f6:e5:80:ae:6a:03:cf:03:15:
83:5e:be:cc:20:30:6f:fe:e5:63:66:7a:f6:1d:9b:
cb:6e:ef:97:aa:16:a8:10:45:10:78:7e:c7:b3:f4:
21:d9:bf:40:3d:23:eb:ce:61:88:e2:e4:72:d9:c8:
41:db:8b:1b:80:a3:ac:09:94:54:28:ea:65:60:a0:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:85:BD:AD:1A:ED:00:57:28:2C:4A:8A:BB:F6:33:A5:D3:DF:7C
X509v3 Authority Key Identifier:
keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/OuyFva0a7QBXKCxKirv2M6XT33w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.230.0/24
Signature Algorithm: sha256WithRSAEncryption
81:39:11:5e:64:ca:41:e5:79:7d:e9:4f:46:f5:5e:b5:32:e0:
19:15:58:74:c3:54:ca:df:0c:06:57:aa:51:94:0d:bb:ce:b8:
6e:15:b6:d4:f5:3f:01:7b:63:fe:51:a7:23:5d:2f:a8:c8:6e:
83:1b:4e:5c:cb:2a:29:32:10:24:f7:1e:b5:94:c9:72:48:fa:
df:af:2e:be:dd:6f:07:68:ae:6e:44:bc:f6:25:10:c8:91:2f:
79:89:8f:ff:6a:7e:15:3c:e7:ce:e6:5d:37:6a:99:3b:7f:92:
44:6a:96:e3:bf:b7:9a:19:f9:79:be:6b:6b:19:48:30:bb:5d:
01:dd:0e:97:38:de:15:50:56:08:8b:6c:a5:1a:08:9a:34:4a:
32:18:21:3f:94:88:0d:2e:17:43:37:d7:65:fb:33:87:f8:4e:
53:98:85:10:a8:5a:3d:bf:95:03:86:65:f4:9a:4f:a8:c5:fb:
03:f5:6d:5f:d8:6c:a6:84:f3:9c:5c:9b:54:d9:f3:4a:fc:46:
25:2d:eb:bb:98:3f:6e:74:bb:f9:30:12:6a:1d:71:8f:b3:c0:
ba:b9:4b:d1:0b:31:f3:f3:08:b9:be:10:49:81:62:23:a8:9d:
87:7e:3d:99:45:48:cd:16:54:5c:4a:32:72:e7:4e:3a:b1:71:
59:f0:3b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:32 2024 by rpki-client on console-ams.rpki-client.org