Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1-OWmIga8MUflW86SzILNUXnXw6g.roa
File: 1-OWmIga8MUflW86SzILNUXnXw6g.roa (raw, json)
Hash identifier: WHjCuY5tcXQfB9TyxRYfs6uXN+lRz7xWJmH7Gp/B5pM=
Subject key identifier: F8:E5:A6:22:06:BC:31:47:E5:5B:CE:92:CC:82:CD:51:79:D7:C3:A8
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 018570FB9E885250497DEE45E427BBA3511B
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1-OWmIga8MUflW86SzILNUXnXw6g.roa
Signing time: Mon 02 Jan 2023 05:36:56 +0000
ROA not before: Mon 02 Jan 2023 05:36:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197772
IP address blocks: 91.226.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:9e:88:52:50:49:7d:ee:45:e4:27:bb:a3:51:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jan 2 05:36:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8e5a62206bc3147e55bce92cc82cd5179d7c3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dc:7c:52:07:f5:bd:23:bf:c9:c6:d7:d5:9b:
e1:f7:27:14:02:9b:4a:72:c3:e7:85:06:db:ca:08:
e8:6a:d4:8d:e4:55:11:ac:94:82:e4:89:03:e6:5b:
1d:c6:52:99:05:83:d1:6c:56:f3:6b:16:38:71:d8:
36:42:6f:7d:a2:55:cb:51:a7:1f:2b:5a:2f:48:d9:
cc:50:6a:4b:19:ff:e9:30:63:aa:12:9b:95:65:24:
9d:ef:c4:40:10:57:3f:7b:39:dd:17:0a:a0:94:a9:
f8:39:a3:5e:b2:ec:35:fa:3d:6a:b6:4f:d5:a4:30:
e4:c4:68:73:f5:0a:10:42:07:ef:89:2d:e0:51:5e:
b9:39:61:23:64:12:72:84:76:df:31:2c:30:bf:b5:
df:2e:55:5b:05:71:c8:64:86:9f:85:83:64:26:c0:
69:16:b4:0f:6e:d1:76:53:70:60:29:85:0b:8c:0f:
20:dc:3c:82:00:80:0e:73:02:a8:6d:0d:bf:80:34:
73:56:49:b9:9e:58:0c:66:af:30:34:0d:2e:cf:d4:
72:a1:e6:ee:c3:ef:87:f0:cc:e8:78:83:db:54:58:
3a:b8:d3:6b:66:47:17:6a:e8:fb:c5:ab:d7:97:df:
5c:80:11:68:69:03:d3:c3:eb:1e:03:3e:d2:3f:2c:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:A6:22:06:BC:31:47:E5:5B:CE:92:CC:82:CD:51:79:D7:C3:A8
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/1-OWmIga8MUflW86SzILNUXnXw6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.176.0/24
Signature Algorithm: sha256WithRSAEncryption
81:2f:ad:7e:e3:a9:e8:a3:73:a9:d0:d2:b1:2f:53:bf:e2:62:
61:f2:fe:a3:4e:1e:52:1b:fe:c0:51:33:8f:4e:6e:fe:f3:cf:
67:b4:3f:88:f4:fa:70:43:1d:e8:6c:80:1b:7f:61:80:60:c9:
36:7b:f7:cc:6f:53:9f:7d:d3:76:92:2c:00:1f:ce:f0:63:93:
db:ed:81:cd:52:35:19:b5:74:dc:23:62:35:e2:82:e0:4b:9b:
1d:0b:3c:15:5a:be:cf:cd:2b:f1:dd:89:d2:74:f0:6d:39:5e:
aa:42:31:e9:8a:56:b7:41:12:99:22:ea:b1:a9:da:37:cf:30:
21:cf:5c:ca:49:21:04:f8:4a:56:85:b3:6d:62:9c:93:0e:84:
8a:9b:56:fc:92:32:a8:d1:38:85:3e:37:96:88:48:8c:b5:4d:
41:52:34:d2:c7:75:77:48:f9:99:7f:b4:17:31:1c:72:9e:2c:
e7:48:97:8b:df:b6:ea:0e:82:26:b1:16:62:d0:d2:15:2c:01:
61:72:c9:a9:3b:84:03:40:2f:3c:a0:01:0a:f8:d1:9e:b7:81:
4e:e5:ec:b5:70:9f:35:23:3e:dc:28:c3:40:0a:64:41:cc:54:
05:0c:3f:85:23:3e:8c:d8:a3:ec:62:2b:4f:75:b5:fe:04:08:
03:95:eb:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:41 2024 by rpki-client on console-ams.rpki-client.org