Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rzMWuxnCxcWunz5LO4aCeAKG-5Y.roa
File: rzMWuxnCxcWunz5LO4aCeAKG-5Y.roa (raw, json)
Hash identifier: /JHQBQ1RZOQ0hhApkzNWwbzRATqPCoOltpRSGKcf/ig=
Subject key identifier: AF:33:16:BB:19:C2:C5:C5:AE:9F:3E:4B:3B:86:82:78:02:86:FB:96
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018B8F781F6E29F786C5F2EF30A4612EB88E
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rzMWuxnCxcWunz5LO4aCeAKG-5Y.roa
Signing time: Thu 02 Nov 2023 09:58:16 +0000
ROA not before: Thu 02 Nov 2023 09:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 92.61.110.0/24 maxlen: 24
91.190.186.0/24 maxlen: 24
91.190.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:78:1f:6e:29:f7:86:c5:f2:ef:30:a4:61:2e:b8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Nov 2 09:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af3316bb19c2c5c5ae9f3e4b3b8682780286fb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:fa:90:fe:d5:42:8e:44:a1:c4:3a:18:d3:
17:1f:ce:83:b0:cc:fa:91:62:0a:ea:35:ff:b1:fc:
62:67:94:2b:d7:1f:db:12:64:5d:57:c5:7d:aa:e3:
47:36:08:a2:5f:ab:04:eb:36:46:da:e3:ac:b1:89:
3b:be:e5:f8:52:8b:29:56:c0:99:21:a7:f3:11:3a:
1d:d9:2e:4a:83:06:d2:be:60:ea:55:cb:d2:dc:4e:
b8:fe:74:5a:1c:ee:d0:a1:e4:b5:02:c3:9c:34:6f:
30:96:07:95:17:df:ec:b6:26:3c:2a:b6:c6:47:73:
6d:2b:72:3b:a5:03:b4:a2:fa:92:02:5d:d8:8c:24:
d6:1a:2d:1f:3b:b5:9f:ab:74:88:b0:0a:13:54:67:
5d:88:ac:10:71:5e:30:4a:e8:e3:dd:fb:97:e4:dc:
83:26:52:e8:7f:93:04:31:c6:0c:54:92:2b:fc:6c:
40:04:54:0b:5d:0c:99:34:4c:7d:76:bf:4b:e6:fd:
4e:13:e0:5d:99:64:51:20:28:ea:83:41:6a:6d:e8:
fa:3f:0d:4b:2a:77:82:0e:03:26:67:8a:37:44:1f:
ac:5a:92:f8:4b:11:58:74:7c:b0:69:1c:7c:d2:c6:
8a:0b:35:88:d8:74:4e:f9:6a:20:8a:e4:dc:25:dd:
4c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:33:16:BB:19:C2:C5:C5:AE:9F:3E:4B:3B:86:82:78:02:86:FB:96
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/rzMWuxnCxcWunz5LO4aCeAKG-5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.186.0/24
91.190.191.0/24
92.61.110.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a1:ac:b9:de:19:25:9d:6d:63:60:73:c1:70:02:b5:78:5c:
ca:0e:aa:a6:91:e1:09:fb:33:13:68:e7:06:18:fa:2d:37:ae:
d0:de:41:a1:e5:16:e1:25:74:f2:4e:cc:10:19:63:a2:41:af:
8c:ab:c8:95:9c:de:6a:12:7b:98:6a:0f:ca:61:d3:3b:d0:82:
0d:85:5d:20:8e:15:9c:f3:61:f9:83:bb:e4:68:93:62:06:70:
3a:29:61:67:15:e5:c9:72:69:c9:84:ae:52:99:99:30:36:34:
8e:8b:f9:f1:f5:a2:42:e3:1e:3c:7d:9b:31:8f:be:e3:88:0c:
fa:85:41:66:6a:29:d8:ce:55:b4:c5:7e:48:79:14:dd:dd:05:
9a:51:cc:d3:e8:4d:bc:8e:29:11:ce:31:d0:09:e7:35:8b:0e:
94:5b:32:89:d2:0b:e8:37:8a:08:5b:a8:ed:65:67:d2:3c:4c:
9c:e4:fc:29:90:50:12:8a:7f:2b:d9:75:6a:fd:8f:bc:30:ac:
6a:82:57:6d:1d:35:6e:c2:de:9e:2c:a8:af:0f:8c:28:d4:5a:
b5:3b:22:6f:9f:95:6c:f3:37:58:90:03:d5:64:1c:c8:22:ed:
6f:48:07:8c:31:03:3b:c4:6f:de:ef:c2:1e:06:55:39:22:3f:
3e:00:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 07:03:21 2023 by rpki-client on console-fra.rpki-client.org