Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/3rqMOTClp51hOdhQdUaC0KutVrM.roa
File: 3rqMOTClp51hOdhQdUaC0KutVrM.roa (raw, json)
Hash identifier: V9oOVGUplkrYjb273nQaIm21PyPaA1HRnQzHFcCFiA4=
Subject key identifier: DE:BA:8C:39:30:A5:A7:9D:61:39:D8:50:75:46:82:D0:AB:AD:56:B3
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 018713D7DED790FD9A0958D2F69FDB03AAF6
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/3rqMOTClp51hOdhQdUaC0KutVrM.roa
Signing time: Fri 24 Mar 2023 13:38:46 +0000
ROA not before: Fri 24 Mar 2023 13:38:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25082
IP address blocks: 91.215.68.0/24 maxlen: 24
91.215.69.0/24 maxlen: 24
91.215.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 24 Mar 2023 14:39:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:d7:de:d7:90:fd:9a:09:58:d2:f6:9f:db:03:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Mar 24 13:38:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deba8c3930a5a79d6139d850754682d0abad56b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b4:2b:77:2c:7c:31:02:8e:0b:55:13:a1:fb:
a2:0e:c7:94:74:99:12:8d:9d:d3:5c:b9:bf:ae:38:
2d:50:23:ec:68:ba:f3:07:98:a5:d0:9f:aa:68:12:
d9:46:3f:a2:dd:a4:8a:61:4f:e8:61:3c:6d:f6:ec:
06:43:f4:88:a8:c7:2d:19:de:86:5c:e9:65:6a:dd:
8f:3d:2c:e9:61:09:ac:ce:a1:e7:0b:24:50:e2:a0:
97:92:36:2b:fa:82:e8:f6:e8:f0:a8:c1:ca:b4:27:
f7:3c:e1:1d:85:76:b4:06:52:10:75:49:ca:64:39:
f5:9d:db:32:b7:a3:e9:54:6b:bb:76:56:40:34:be:
e2:fb:bc:b7:ae:6f:03:26:99:0a:c6:6e:cc:06:48:
17:69:8b:34:05:3d:ae:7a:9a:fa:90:ec:ce:0a:f7:
15:49:97:76:1d:40:3c:ed:cf:f6:ec:50:c2:25:5a:
d2:03:93:49:f6:5a:ff:2d:a7:ed:7b:dc:d8:bd:9c:
cc:39:22:77:b8:37:06:81:f5:ae:73:29:ec:87:cc:
c7:ce:aa:ef:c7:1c:2f:21:b2:09:db:2c:e8:4b:c0:
33:49:16:ef:d0:59:43:fc:84:79:07:a7:a2:36:73:
18:b4:63:ac:a0:f2:19:0b:15:c1:e9:46:fb:e5:24:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:8C:39:30:A5:A7:9D:61:39:D8:50:75:46:82:D0:AB:AD:56:B3
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/3rqMOTClp51hOdhQdUaC0KutVrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.68.0/22
Signature Algorithm: sha256WithRSAEncryption
32:47:b1:74:85:5b:d1:1d:81:64:eb:6a:11:dd:e8:82:0f:d4:
40:da:32:ee:d8:e8:00:ea:53:0e:eb:89:ce:07:8a:33:95:67:
37:69:87:13:1f:23:73:5d:e8:57:89:d2:cd:51:3a:f0:8f:89:
ed:e8:b9:1b:ab:4b:91:c9:f1:f8:60:2c:91:42:38:5d:79:28:
ac:58:ba:df:9d:01:23:67:91:b3:ab:98:0b:24:e4:be:7b:65:
aa:57:c7:83:24:55:a2:41:ab:90:df:d5:18:c3:9d:5e:ae:9e:
b7:49:e9:61:30:b7:06:c7:96:3f:c1:ea:e4:c1:1a:82:ff:34:
e7:25:f5:a0:98:53:93:c1:11:89:dd:fb:73:6e:7f:1b:85:74:
2b:0d:8d:c9:35:01:d4:23:6e:ff:1a:b7:a0:eb:82:dd:0b:07:
5e:47:98:cc:e4:98:b6:44:7c:2e:45:74:3c:4d:ac:f3:58:05:
0e:59:21:24:e8:b5:d2:84:49:42:d3:43:50:e6:fd:e6:f4:bb:
56:6a:f4:99:02:40:40:07:36:00:08:10:37:2c:8f:2a:cf:df:
b5:bd:fc:fd:90:b6:25:73:af:3f:bf:76:04:bb:57:f0:b6:32:
24:c0:c7:8b:61:97:eb:05:59:5a:5c:08:f8:79:24:12:00:68:
c7:00:03:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:58 2024 by rpki-client on console-fra.rpki-client.org