Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FInldEXpCmACs2NwyLvY_MTpZ8A.roa
File: FInldEXpCmACs2NwyLvY_MTpZ8A.roa (raw, json)
Hash identifier: ufDbe0GcKtNSaYd2vhh/z4LKNDuFCX5R9Ut0n7DWyeA=
Subject key identifier: 14:89:E5:74:45:E9:0A:60:02:B3:63:70:C8:BB:D8:FC:C4:E9:67:C0
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018572DF1F0EF24ED10EA9C7B85930FF2E3E
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FInldEXpCmACs2NwyLvY_MTpZ8A.roa
Signing time: Mon 02 Jan 2023 14:25:02 +0000
ROA not before: Mon 02 Jan 2023 14:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29582
IP address blocks: 91.92.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:1f:0e:f2:4e:d1:0e:a9:c7:b8:59:30:ff:2e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 2 14:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1489e57445e90a6002b36370c8bbd8fcc4e967c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:f2:04:f0:bb:55:ce:00:4f:49:80:d2:e5:
57:9b:b5:5a:1b:a2:1d:e4:d5:23:9c:13:1c:33:10:
49:98:4b:22:37:1a:1f:c7:05:88:eb:66:d6:f3:cf:
85:24:49:d2:6d:bd:01:bd:87:89:62:01:4b:0a:2d:
01:d5:f5:48:6b:c6:8f:fb:c8:59:86:54:73:59:68:
7a:36:30:e9:11:48:81:1a:9b:d2:6e:a7:99:17:5b:
4b:a1:ad:4f:9d:d3:f6:89:0a:60:bf:59:3b:32:94:
2e:53:f7:bb:8d:58:4b:24:1a:a4:c7:c1:90:10:17:
1c:c5:70:99:1f:ea:a7:3d:76:6e:15:8f:ab:fe:9d:
f5:f7:49:32:d4:34:6e:f6:26:75:68:af:b8:88:f7:
87:c7:f7:a7:e8:ee:5e:dc:ae:85:14:0e:f3:16:98:
4a:da:77:c8:3c:24:6b:25:00:48:b6:11:a6:a7:56:
23:53:d5:ec:0d:e1:7d:b6:59:44:69:5d:0b:07:1b:
2a:d0:aa:5b:d7:35:89:c0:2f:19:ca:31:8e:e1:47:
09:9d:bc:57:64:69:22:94:03:30:69:cd:08:22:52:
9a:c7:ad:22:c7:09:a7:4c:34:a8:ac:67:26:f2:39:
ee:c0:4a:49:74:02:ff:ee:fc:35:28:f7:6b:c3:b5:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:89:E5:74:45:E9:0A:60:02:B3:63:70:C8:BB:D8:FC:C4:E9:67:C0
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/FInldEXpCmACs2NwyLvY_MTpZ8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.48.0/24
Signature Algorithm: sha256WithRSAEncryption
88:40:08:2e:1c:85:a1:b3:0b:ba:04:32:e1:71:13:6c:07:1d:
87:a5:83:c8:e7:10:62:f1:91:97:2b:82:99:79:fb:77:ad:3e:
b5:1d:f0:3e:81:da:6f:7c:c8:3b:84:97:4f:b6:df:1a:ee:e5:
1d:d1:4a:cc:ef:0b:e6:ac:89:ca:67:c7:e7:b4:09:82:a3:1c:
f3:b5:32:e1:c5:da:d4:43:af:28:ca:00:91:18:63:8d:52:5d:
78:65:16:07:99:d2:30:72:be:8c:46:c4:88:21:df:c9:0f:7e:
39:9d:0f:61:ed:4e:6c:f9:f1:1c:73:eb:66:16:80:2a:0d:c0:
82:e2:2c:98:24:12:ea:0e:70:bb:cc:12:1b:21:63:74:b3:ad:
57:0d:df:60:3e:2d:c6:5d:81:0e:e4:5e:66:22:0a:c1:e3:55:
e6:8e:8b:dc:35:d4:08:ba:8a:d0:99:48:e4:9c:49:a1:8b:cb:
64:55:7c:30:25:ea:64:72:90:f2:46:d3:ff:a9:83:58:c7:b7:
dc:75:df:27:a7:c3:bb:4d:75:b3:5a:9d:d9:04:c4:33:41:f9:
41:2f:e8:cd:5f:82:0d:b6:f5:07:34:19:d9:e2:de:8f:e4:b3:
4d:52:55:c2:e2:19:80:40:4c:38:4e:63:65:97:2e:a6:e0:a0:
bf:bc:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:59 2024 by rpki-client on console-fra.rpki-client.org