Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/aCOWOoaGOP41r0ydycoloH2QJlY.roa
File: aCOWOoaGOP41r0ydycoloH2QJlY.roa (raw, json)
Hash identifier: O1/Dk1IQ5isYiz8bi0srYFQwztS36w5U9SGKJa+m6pw=
Subject key identifier: 68:23:96:3A:86:86:38:FE:35:AF:4C:9D:C9:CA:25:A0:7D:90:26:56
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: 01856C5CAB1047650CA45E4F2CC586F3EAE4
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/aCOWOoaGOP41r0ydycoloH2QJlY.roa
Signing time: Sun 01 Jan 2023 08:04:50 +0000
ROA not before: Sun 01 Jan 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.207.1.0/24 maxlen: 24
91.206.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 14:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ab:10:47:65:0c:a4:5e:4f:2c:c5:86:f3:ea:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jan 1 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6823963a868638fe35af4c9dc9ca25a07d902656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:ac:49:8a:19:21:41:4a:86:e4:4a:7f:82:
ea:1e:05:33:b4:7f:35:d9:3e:ae:75:65:be:21:1e:
8e:2b:f8:db:d1:a6:4f:36:c9:02:96:88:8d:4b:5b:
86:d8:b3:2a:29:c1:2f:6c:6a:9c:cb:9a:f3:2b:5e:
be:71:f3:54:8f:d1:03:56:a7:9c:32:91:0a:34:72:
cb:25:65:46:db:e5:ef:a9:25:c8:e7:09:79:20:ef:
79:99:b7:e4:7f:4f:9c:5d:79:37:84:16:89:2d:16:
77:62:55:2c:e4:2b:c1:27:ae:15:ee:ad:10:c3:ea:
fb:ef:07:74:64:59:e4:6f:f7:40:5a:12:e2:95:dd:
a0:b6:b4:57:47:bf:e3:83:cd:03:fa:24:c2:09:4c:
85:7f:d6:5a:20:51:39:66:7d:42:e1:bd:58:7c:f1:
2c:bd:b2:b4:80:30:2b:17:e2:ba:15:f1:9d:4f:b7:
77:e8:7d:20:92:e9:4a:c2:c1:f2:56:64:e4:d6:e0:
78:a0:8b:18:e9:db:1d:33:cc:12:3f:4e:82:d5:d3:
88:da:f7:a8:d4:90:34:57:be:42:21:93:a9:95:3b:
73:e0:22:fb:5f:b3:21:68:ff:c9:54:5c:8c:e8:a7:
9a:0b:ef:01:69:49:40:2b:75:d6:90:01:51:f8:dc:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:96:3A:86:86:38:FE:35:AF:4C:9D:C9:CA:25:A0:7D:90:26:56
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/aCOWOoaGOP41r0ydycoloH2QJlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.209.0/24
91.207.1.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8c:b0:6a:43:07:43:09:2c:ab:00:b3:2b:83:13:b3:7d:89:
19:14:46:30:ae:2e:6d:ae:2c:2d:35:40:a8:47:0f:66:83:03:
63:3b:ac:bd:4b:9c:96:b8:45:04:2d:a9:0f:77:44:06:bb:24:
18:03:34:8c:38:e6:b5:3e:e0:a2:6f:22:d6:63:32:a5:1b:bc:
7d:de:1a:d8:b0:97:ce:3f:78:75:1f:16:33:2b:43:ac:d2:e4:
28:d0:81:e5:a5:cd:35:21:f5:22:80:f1:f7:4a:c6:8e:d9:29:
ec:25:b0:f0:18:bc:75:a0:47:17:2b:d9:d6:c2:22:ad:e7:ed:
e6:93:b0:a9:bc:6f:55:01:b7:2a:b7:04:05:9d:cf:f4:1f:d1:
43:86:d6:87:18:14:8a:29:bd:c6:2c:07:e4:a2:7e:15:29:68:
85:ea:a0:5c:64:1e:09:d0:fd:53:b0:97:4c:0a:d4:83:4c:da:
d5:fb:aa:2e:6d:87:fb:d8:00:df:5b:ac:65:0b:47:68:09:d7:
66:b8:53:e3:32:39:51:5c:28:02:4d:52:e8:01:7b:9e:11:7a:
3b:39:5a:b2:a4:ee:53:42:e7:41:ab:b8:95:a7:a9:ee:6c:95:
95:94:60:1d:5f:4b:4c:ca:2b:91:a2:d3:98:fe:be:f7:a3:7e:
7e:8e:6a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org