Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OmA2YUSbFsMhoHqj9ls6EiTBHKE.roa
File: OmA2YUSbFsMhoHqj9ls6EiTBHKE.roa (raw, json)
Hash identifier: U7Mn3DT44OMgM7q9I8m+jzm3BlIZCIonm4HS6T5XFwo=
Subject key identifier: 3A:60:36:61:44:9B:16:C3:21:A0:7A:A3:F6:5B:3A:12:24:C1:1C:A1
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F780EDB97B496105BA02E5171C9C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OmA2YUSbFsMhoHqj9ls6EiTBHKE.roa
Signing time: Mon 02 Jan 2023 11:38:51 +0000
ROA not before: Mon 02 Jan 2023 11:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211694
IP address blocks: 91.229.132.0/24 maxlen: 24
91.229.132.0/23 maxlen: 23
91.229.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Jun 2023 12:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f7:80:ed:b9:7b:49:61:05:ba:02:e5:17:1c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a603661449b16c321a07aa3f65b3a1224c11ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:35:99:e2:d5:01:25:b1:20:65:e0:48:3a:
9c:3c:b9:94:f9:7d:47:9b:62:eb:9c:d2:be:47:66:
71:e3:bb:b3:01:29:6d:13:12:b5:5b:78:d8:dd:28:
0b:97:b9:b0:b7:2e:a9:f7:cd:b7:83:c1:97:77:07:
4d:2e:d1:2e:4f:f7:f6:3d:83:c2:52:71:d4:02:a8:
e9:0a:06:c5:9c:6e:7c:ac:18:bc:08:0f:33:f2:36:
91:f8:d4:af:78:78:37:83:b9:a7:4c:a9:85:91:e5:
be:58:5c:83:42:ac:9a:74:ce:ed:12:c9:40:de:4d:
77:24:40:6c:3b:45:3e:d0:9a:65:a3:12:dd:2b:04:
a3:ec:35:52:e7:35:26:b0:e6:9d:aa:6f:48:40:ec:
11:f4:06:94:9f:df:2b:a6:9a:05:a6:72:fb:57:a6:
62:5c:07:55:33:cd:4c:10:74:e0:c2:50:ac:97:15:
1d:b7:4b:a4:15:68:2b:fc:1e:70:90:c6:95:9b:ab:
30:78:fa:38:48:c2:df:f0:f0:9f:05:9d:e6:25:b4:
3b:f2:b5:4f:b3:31:6c:9c:3d:91:7b:80:be:be:f8:
75:56:7d:d3:b8:31:4b:0e:05:83:f9:54:c1:21:0e:
6f:97:74:36:e7:2c:90:74:f0:d2:19:02:99:ce:1c:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:60:36:61:44:9B:16:C3:21:A0:7A:A3:F6:5B:3A:12:24:C1:1C:A1
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/OmA2YUSbFsMhoHqj9ls6EiTBHKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:38:c9:8f:59:81:0e:58:eb:33:6f:e6:05:f2:00:a6:69:90:
bf:ab:17:f5:4a:02:88:a2:ae:35:e3:a1:37:9a:66:e5:1c:5c:
28:63:2a:f3:21:e2:a5:19:bb:a7:49:32:e0:7b:cd:72:99:44:
3b:b1:d7:d3:e6:75:3b:c9:d0:2b:ea:dc:fc:8c:07:ab:68:86:
b9:38:15:88:99:3f:07:f8:f1:ad:3d:a8:7a:55:2c:37:41:c4:
36:24:cc:60:3b:5d:5b:66:34:96:ca:cd:1b:2a:a2:89:11:a3:
93:07:90:b3:89:18:7b:48:42:b7:fd:c2:4b:07:d6:11:1f:6a:
6f:76:e5:a4:84:f7:51:20:f9:81:59:52:48:d2:4a:10:d0:36:
70:c9:a3:4a:13:c9:f1:ed:4e:e0:f2:c2:e3:48:92:c8:32:8d:
2a:61:c8:c4:78:bd:47:94:f2:6f:db:13:8c:8c:93:14:9e:44:
2e:40:05:4c:1f:15:82:a9:11:c6:ab:56:6a:e9:79:31:df:50:
81:a6:00:c1:cb:64:03:69:36:63:82:2c:0b:18:19:c7:d0:eb:
49:ee:fe:2e:0d:f6:95:3a:ed:d1:50:cf:9b:08:98:ba:b2:dd:
3a:1a:a9:96:bc:4d:e6:19:13:4a:0a:94:23:97:e1:a4:df:f9:
b0:2d:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org