Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/rAorM_V-oKtZ74eJAoK2XRAuxi0.roa
File: rAorM_V-oKtZ74eJAoK2XRAuxi0.roa (raw, json)
Hash identifier: 8F7CpxqOiJtBV/zT1vrLB644fPye4XS7oMBdvnSXe30=
Subject key identifier: AC:0A:2B:33:F5:7E:A0:AB:59:EF:87:89:02:82:B6:5D:10:2E:C6:2D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0188FCE91FCBC9390100F727A20795977803
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/rAorM_V-oKtZ74eJAoK2XRAuxi0.roa
Signing time: Tue 27 Jun 2023 12:51:56 +0000
ROA not before: Tue 27 Jun 2023 12:51:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.229.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 19:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:e9:1f:cb:c9:39:01:00:f7:27:a2:07:95:97:78:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jun 27 12:51:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac0a2b33f57ea0ab59ef87890282b65d102ec62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d8:44:13:88:96:53:94:3e:5e:82:04:01:68:
32:6c:20:54:cc:63:eb:e2:0b:26:08:59:fb:0e:2b:
7e:f4:81:74:6e:f0:80:6d:4c:15:ac:c8:87:81:bd:
b7:93:b1:a7:7a:cc:53:dc:8c:fa:54:46:03:0b:f9:
89:79:76:1f:60:4c:c4:d6:5c:cc:c7:7d:25:22:d7:
86:78:89:1c:38:54:4f:a4:7d:f8:99:df:cb:62:b4:
dc:d4:b5:cc:39:7f:26:6e:d9:ac:5e:c0:db:7f:6f:
23:7c:48:9c:92:88:ac:b5:7f:5b:b3:5b:f0:c3:85:
aa:d7:ff:99:c3:9a:b1:f3:b6:4b:05:1b:f3:58:6f:
36:b8:0c:e1:40:39:08:dc:74:c4:b4:d0:01:cf:18:
d3:52:fb:2b:20:a8:22:e9:05:a0:02:d7:b1:b1:2c:
8f:1d:c7:33:c7:e1:e1:d8:20:49:f9:e9:95:6b:c9:
33:4a:51:94:49:df:40:ee:eb:37:e3:d3:cd:c2:2a:
46:84:2d:56:cf:7c:21:70:f3:ba:a6:19:1d:39:23:
06:1a:74:af:68:6e:75:4e:2c:0f:df:fb:3a:f1:29:
d2:72:1c:1a:38:5f:4b:89:fb:1e:ae:68:51:78:de:
1e:4f:ac:d1:4c:8f:c6:d4:48:bb:49:7b:92:b8:b5:
d8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0A:2B:33:F5:7E:A0:AB:59:EF:87:89:02:82:B6:5D:10:2E:C6:2D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/rAorM_V-oKtZ74eJAoK2XRAuxi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/23
Signature Algorithm: sha256WithRSAEncryption
78:6e:47:61:33:70:78:52:e3:34:39:69:64:19:97:6d:32:39:
66:0d:f3:2b:8d:f8:fa:19:20:ca:b8:39:3a:f5:a1:f1:fd:07:
03:36:c4:71:da:e1:1d:fe:a0:48:fb:7c:5e:08:13:c8:37:75:
13:05:a2:f1:08:3d:b1:0c:8c:07:55:b6:a9:d0:36:d8:b3:a5:
48:17:e5:d9:a8:25:1c:b1:5f:4c:ca:aa:ad:18:69:52:cb:dd:
91:e6:21:9b:61:0b:b2:f5:85:f9:41:09:a6:0f:c0:6a:04:d9:
d8:c4:4d:06:1b:17:0b:57:ab:39:36:65:4d:06:7d:06:c4:32:
81:69:64:95:6d:5b:f9:8d:1c:aa:c8:fc:d2:de:ec:87:be:1d:
9b:d1:e1:dc:3a:1a:d5:a4:f8:4c:71:45:90:6a:6f:87:70:b7:
09:ef:cf:81:7b:20:6b:25:f6:19:33:24:a4:90:34:f1:c6:38:
67:31:9b:fd:da:0a:f9:40:00:d5:56:23:3a:ad:c0:28:7e:56:
eb:59:df:56:cd:91:25:10:a8:a9:4d:fa:cd:3b:bc:de:ed:04:
7e:c0:eb:d1:7e:18:5f:7b:7c:b6:29:2f:15:68:38:73:56:96:
84:bb:db:25:2c:cf:e4:cd:70:8c:cd:19:e6:8c:bf:3d:19:c3:
fa:c8:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org