Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/X8-Am93a7Xxy6A5V7g2J_vaDPf0.roa
File: X8-Am93a7Xxy6A5V7g2J_vaDPf0.roa (raw, json)
Hash identifier: JFUQvnUfaVpaUS/+XvIbQOAzP3Ql3RHgZyohoim4PLI=
Subject key identifier: 5F:CF:80:9B:DD:DA:ED:7C:72:E8:0E:55:EE:0D:89:FE:F6:83:3D:FD
Certificate issuer: /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial: 01856EF43793202C96B9FAFE11E836773823
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/X8-Am93a7Xxy6A5V7g2J_vaDPf0.roa
Signing time: Sun 01 Jan 2023 20:09:36 +0000
ROA not before: Sun 01 Jan 2023 20:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43061
IP address blocks: 91.223.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:37:93:20:2c:96:b9:fa:fe:11:e8:36:77:38:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Validity
Not Before: Jan 1 20:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fcf809bdddaed7c72e80e55ee0d89fef6833dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:35:53:61:88:be:de:bc:84:eb:f9:0d:3f:
0d:82:ed:87:98:98:37:09:dd:10:b1:d0:bd:3a:d2:
2f:75:17:92:fa:4d:f0:fe:e2:ef:da:d3:89:64:94:
0e:b3:de:5e:5a:72:82:1f:68:54:75:56:2a:1d:3e:
0c:8d:df:3a:60:6c:19:75:e0:9a:36:b8:ac:7f:fa:
fe:b1:2a:ed:47:28:b9:e4:bb:a5:39:88:19:ef:3f:
bf:c6:78:f7:c8:a1:ab:39:96:8e:f5:98:1d:b0:07:
d4:d3:4a:27:2d:08:2b:ef:bf:05:4d:85:1a:42:4f:
46:cf:d0:f8:7c:47:e0:fe:df:ad:7a:9d:17:ba:58:
d8:be:89:95:36:28:42:3e:50:9d:31:aa:43:b6:b6:
96:9c:5b:b6:82:ce:9d:da:83:be:7d:36:e1:e0:71:
3f:4d:51:7b:94:18:8a:41:62:6a:d0:a0:dc:fd:8d:
8b:4d:bb:4e:80:bf:19:b0:7f:54:83:0f:2b:df:a5:
c2:8d:ef:c1:cb:90:a3:53:a4:b2:5d:da:c3:f7:5c:
77:eb:27:a9:ff:2a:d1:cf:35:13:a7:89:29:49:ef:
3b:ef:db:e0:13:3a:a7:c9:65:62:ca:a9:0e:3a:a8:
4a:d4:09:98:f2:49:4a:c1:e5:b8:73:5d:ba:d0:f7:
3e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:80:9B:DD:DA:ED:7C:72:E8:0E:55:EE:0D:89:FE:F6:83:3D:FD
X509v3 Authority Key Identifier:
keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/X8-Am93a7Xxy6A5V7g2J_vaDPf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.26.0/24
Signature Algorithm: sha256WithRSAEncryption
23:5b:95:ea:5e:5c:43:ac:d1:35:b3:27:34:81:56:ab:a9:3a:
df:c4:7f:29:d8:10:d6:bc:7b:f6:01:c1:b9:6e:85:66:98:c3:
4a:db:e9:1e:3e:6b:23:1e:f3:ac:37:92:02:c1:f8:67:f2:ab:
16:3a:25:aa:4f:dd:02:49:b8:65:12:3e:8b:ee:9e:a8:1d:57:
10:06:d5:96:41:d7:6a:ff:e3:70:65:25:e3:86:6a:38:a2:cf:
e2:da:64:bf:4b:8d:07:e2:b3:21:2d:94:d7:f7:19:12:47:50:
1b:24:30:cb:ac:b1:38:c8:43:14:48:96:c9:d3:47:b1:7c:51:
59:a8:81:30:77:0b:c8:dd:88:dd:25:74:a2:98:c9:7f:99:c0:
b0:93:ca:0a:7e:3f:97:1d:0f:48:4e:44:51:9a:f9:4b:23:13:
bb:bb:19:61:63:46:7a:60:47:c5:e3:fd:84:f9:12:1f:e5:dc:
1f:05:98:81:18:e2:4b:de:ae:17:35:20:b7:8e:03:ac:38:b7:
be:c4:39:ce:d4:c0:b5:5d:55:0f:01:e5:ff:43:c4:f5:1c:c2:
e3:d9:62:36:b1:8f:7b:32:cb:e0:25:97:51:4c:8e:09:4c:00:
b8:03:5c:c7:70:d2:3a:88:30:2a:a8:03:44:93:96:8d:c0:f9:
cf:5f:91:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org