Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/fJPAw8DAty9vqbQgadlCUbl92kw.roa
File: fJPAw8DAty9vqbQgadlCUbl92kw.roa (raw, json)
Hash identifier: hN35sQWqIiUgKFu+JfW9owvpGSh2Hq0FaVf20tXak8s=
Subject key identifier: 7C:93:C0:C3:C0:C0:B7:2F:6F:A9:B4:20:69:D9:42:51:B9:7D:DA:4C
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 01856EC1FC11F124EEBD5DB66D520990D239
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/fJPAw8DAty9vqbQgadlCUbl92kw.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 91.231.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fc:11:f1:24:ee:bd:5d:b6:6d:52:09:90:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c93c0c3c0c0b72f6fa9b42069d94251b97dda4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:ab:22:1e:c4:69:56:19:74:39:c5:e9:4b:
8b:2f:1b:53:70:64:9c:7c:69:52:1d:0a:5e:1e:92:
78:6d:6e:9c:08:ca:9b:10:72:f2:5a:cd:ba:16:23:
d9:0b:33:f0:e0:45:36:26:10:db:bb:22:be:50:d5:
60:a9:79:1e:d7:3e:fa:44:c9:70:71:c7:08:81:bf:
bd:29:6b:0e:24:81:3a:0a:de:68:fd:e4:d2:87:9e:
d4:7e:03:06:6f:fe:6a:53:d3:f6:a1:50:08:a5:6c:
ab:4e:fd:5a:da:11:cf:a9:60:bc:67:b3:b7:fa:15:
3f:9c:c2:f7:fa:af:0f:a8:93:c5:e3:2c:90:ab:5b:
a5:79:50:38:96:8e:ba:51:99:86:58:c6:47:2c:56:
4d:10:84:89:22:0d:ca:b8:bd:d9:fd:32:06:2d:4c:
db:c6:1c:58:87:19:21:6c:94:2f:0e:bb:2a:f2:4b:
b4:84:70:38:6b:76:c5:b4:3c:d6:90:81:a3:99:4c:
de:7d:d9:78:ed:3a:8f:f9:c7:09:46:aa:4b:3f:d6:
41:ec:bb:aa:34:eb:83:f5:1a:0c:e4:6a:90:eb:20:
86:19:8a:d3:07:a2:96:97:5f:f3:60:ac:c6:bc:8f:
aa:d1:9e:b5:d2:e6:f7:45:76:6f:31:8d:97:da:a2:
cc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:C0:C3:C0:C0:B7:2F:6F:A9:B4:20:69:D9:42:51:B9:7D:DA:4C
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/fJPAw8DAty9vqbQgadlCUbl92kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.35.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e3:aa:98:4d:fe:21:af:5b:16:88:72:f6:2a:32:43:1b:a4:
4a:37:be:ec:61:cb:e1:ad:18:42:a7:0c:f2:b0:f8:25:88:a1:
c1:aa:e9:56:75:f1:ab:4a:77:18:55:c2:0e:36:3b:15:d9:84:
61:7d:63:56:e2:d9:5b:ea:b6:3e:96:70:bb:1a:24:3c:a4:08:
94:68:89:3c:c6:27:78:24:41:0e:e7:88:9f:28:e0:5a:bb:ce:
77:08:c3:69:6c:5c:79:c4:60:66:e9:96:e9:25:73:5a:9f:31:
d7:06:0d:ef:ba:25:84:76:d9:64:59:bd:e9:3a:cf:ce:28:13:
0d:71:81:7c:53:7c:ab:50:e8:13:1b:67:1f:3d:6f:6b:27:fa:
e8:3b:fc:b9:7e:65:3e:c8:20:9e:47:76:23:d9:61:fc:f4:69:
ac:ec:12:fa:77:94:70:5b:2b:b8:04:97:99:3c:4f:4e:d8:76:
0e:d7:5f:56:bc:ae:e2:a0:47:a7:b9:af:54:7d:db:0c:b1:d7:
7f:31:64:56:b5:2c:ad:3a:57:e5:92:68:12:7f:b4:00:c0:74:
ae:15:4a:80:28:41:14:4b:52:1b:98:45:70:ba:bd:87:5e:1f:
c9:42:63:b7:51:da:2e:b6:1e:de:70:79:d6:13:04:b6:d5:2b:
55:19:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:28 2024 by rpki-client on console-ams.rpki-client.org