Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/Jj2GUEw2JqrVMARj49gZ8YEbnkA.roa
File: Jj2GUEw2JqrVMARj49gZ8YEbnkA.roa (raw, json)
Hash identifier: l7VDb4pnfbvZIjv3OPzZPi0gyR3wXszsrLFMIxT5rUc=
Subject key identifier: 26:3D:86:50:4C:36:26:AA:D5:30:04:63:E3:D8:19:F1:81:1B:9E:40
Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial: 01856FDDD1890CBDF968FFF868E1FB4B1D90
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/Jj2GUEw2JqrVMARj49gZ8YEbnkA.roa
Signing time: Mon 02 Jan 2023 00:24:46 +0000
ROA not before: Mon 02 Jan 2023 00:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49381
IP address blocks: 91.229.196.0/22 maxlen: 22
193.169.44.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:d1:89:0c:bd:f9:68:ff:f8:68:e1:fb:4b:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Validity
Not Before: Jan 2 00:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=263d86504c3626aad5300463e3d819f1811b9e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:ef:70:8b:6a:f2:f4:5f:79:f0:d2:fc:a7:
5b:e6:ce:6e:a4:5b:24:86:c1:35:63:92:51:1d:ee:
f2:87:e2:fd:ad:66:6c:20:8d:f0:5a:82:b0:c6:df:
63:3a:78:a9:76:48:be:c1:a7:09:bb:5c:af:a4:4e:
65:23:91:74:55:de:41:39:3a:b4:62:0a:db:e4:97:
20:ff:ad:6a:20:0a:1f:34:54:f7:e8:b6:93:12:61:
7f:b8:d0:e7:2e:17:03:f4:3a:00:0f:e2:ec:ff:38:
16:34:7c:70:b6:c0:df:e1:9a:75:15:68:c1:2c:5f:
6b:be:05:54:ed:32:5d:94:04:d5:23:70:ce:8d:16:
3e:76:a0:4d:32:9e:31:80:82:e8:53:1a:06:12:94:
c7:7a:7e:ae:20:34:b2:23:5f:f9:bb:32:18:e3:41:
e0:79:fc:a4:4f:e0:b1:3f:11:ea:39:eb:69:f1:2e:
77:5b:a0:f2:a9:fa:56:14:ba:3e:2a:8c:61:c4:98:
a2:4d:01:0a:e4:28:b7:1f:f3:90:8c:bd:df:8c:02:
cb:d1:c9:54:df:84:82:05:11:ac:b9:dc:52:2d:78:
87:e4:a5:f3:35:6c:44:38:24:7d:10:bd:a6:07:0a:
92:f2:01:f9:3f:bf:f2:17:1a:ef:a6:5b:11:f9:db:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3D:86:50:4C:36:26:AA:D5:30:04:63:E3:D8:19:F1:81:1B:9E:40
X509v3 Authority Key Identifier:
keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/Jj2GUEw2JqrVMARj49gZ8YEbnkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.196.0/22
193.169.44.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:2b:af:55:03:ba:88:6d:38:a3:37:e1:11:38:c4:a1:91:fe:
ab:f2:96:b0:cd:cb:80:52:47:c6:83:ff:2b:71:f6:88:73:fe:
57:4e:c9:c7:b6:6f:52:06:38:ee:e3:39:39:98:be:b5:26:e0:
fd:8f:8a:02:68:85:af:c3:18:df:bb:81:e0:f0:ff:fe:68:a2:
96:bf:0e:97:74:e6:d0:f1:f5:9c:cf:53:0b:08:04:8f:34:fd:
07:fb:2f:71:b0:4a:7b:83:d3:fa:27:5d:14:a8:6b:89:c3:91:
46:98:fa:c1:0d:b0:f1:d7:c9:db:37:a6:9a:4f:32:c6:cc:d4:
5c:ad:f9:b4:a2:1b:55:3b:7f:f1:c7:5f:bd:9a:05:1c:da:52:
63:0d:20:6f:90:6c:98:40:c7:12:d2:96:a6:a6:80:9b:e8:ee:
37:01:d8:63:7d:48:c9:81:3c:a9:c7:9c:28:47:5d:8a:87:2d:
fa:e3:4d:79:32:93:7c:9c:8a:67:df:99:fa:f9:04:6b:1f:06:
d4:59:a5:4e:7d:38:67:3d:bc:ed:04:cd:03:4f:76:10:28:5f:
f3:e7:0b:d4:3d:1d:71:95:c5:74:21:6b:14:c2:d9:be:d1:92:
65:2d:6b:45:16:13:d1:11:28:c0:f1:4a:9a:ab:eb:56:f4:94:
1d:b7:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:46 2024 by rpki-client on console-fra.rpki-client.org