Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/66opGzGwQemZEpZ4a_ue9-xT2No.roa
File: 66opGzGwQemZEpZ4a_ue9-xT2No.roa (raw, json)
Hash identifier: 5urnLf93EtzwaO2LhyuUWgDMk0azVdiJa8wwVdigvOg=
Subject key identifier: EB:AA:29:1B:31:B0:41:E9:99:12:96:78:6B:FB:9E:F7:EC:53:D8:DA
Certificate issuer: /CN=39cef2e2df5b4ada21e4736b00b7eb89e4d3eb39
Certificate serial: 01856C7833BD70CC1802DCE123C4278BE467
Authority key identifier: 39:CE:F2:E2:DF:5B:4A:DA:21:E4:73:6B:00:B7:EB:89:E4:D3:EB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc7y4t9bStoh5HNrALfrieTT6zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/66opGzGwQemZEpZ4a_ue9-xT2No.roa
Signing time: Sun 01 Jan 2023 08:34:54 +0000
ROA not before: Sun 01 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56693
IP address blocks: 91.226.182.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:33:bd:70:cc:18:02:dc:e1:23:c4:27:8b:e4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cef2e2df5b4ada21e4736b00b7eb89e4d3eb39
Validity
Not Before: Jan 1 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebaa291b31b041e9991296786bfb9ef7ec53d8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:22:df:a3:f7:46:86:37:b6:e4:bf:c2:a4:
79:50:0b:02:57:e3:1b:75:08:60:b8:44:2b:2a:7b:
e6:60:ab:9c:cd:5b:ff:f6:76:82:34:82:90:f3:64:
16:a8:61:a6:82:0d:d7:36:4b:d4:9e:f9:9c:26:48:
4c:0e:b4:dd:e8:b8:ec:d6:f6:ae:87:76:f8:ae:bd:
9b:68:93:c9:bf:01:35:f0:13:24:04:e1:b9:f2:8c:
5d:02:59:06:c8:37:19:04:98:68:85:ef:d2:f4:9b:
ee:39:4f:57:60:15:da:28:50:a4:6c:7d:2e:eb:d3:
ea:2c:7a:cd:c4:cb:f0:12:83:84:2d:08:50:63:d0:
9c:72:45:d6:f3:06:66:c1:b1:31:38:e7:f0:6a:b0:
10:b4:a6:6a:ca:4f:06:32:43:c0:57:12:2b:35:0c:
d5:4f:18:1e:e9:fc:bc:ed:5b:cd:5e:21:22:a8:60:
bf:99:97:18:57:11:7a:59:49:b3:b8:84:d7:5d:cf:
2c:9d:f4:a2:99:c2:67:6a:7f:18:1f:d3:22:ea:af:
fd:f5:50:4a:3d:68:92:40:8e:b9:5d:1a:26:18:30:
82:34:af:44:cd:fa:93:98:7d:c9:05:36:9b:cb:8a:
31:6f:42:d5:42:7f:6e:9a:48:56:77:1a:7c:97:ef:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:29:1B:31:B0:41:E9:99:12:96:78:6B:FB:9E:F7:EC:53:D8:DA
X509v3 Authority Key Identifier:
keyid:39:CE:F2:E2:DF:5B:4A:DA:21:E4:73:6B:00:B7:EB:89:E4:D3:EB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc7y4t9bStoh5HNrALfrieTT6zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/66opGzGwQemZEpZ4a_ue9-xT2No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b1b49-bb7a-4a6e-ba9c-f224de60b49b/1/Oc7y4t9bStoh5HNrALfrieTT6zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.182.0/23
Signature Algorithm: sha256WithRSAEncryption
55:66:60:0c:37:f5:ec:02:7a:06:a8:a0:9c:7d:2a:8a:dd:d3:
d8:99:5e:03:65:99:f4:bc:ad:e5:a5:4a:38:3c:77:0b:09:07:
3d:dc:80:96:e5:29:98:da:25:6a:25:92:fa:c2:43:8d:3f:02:
96:3a:e5:7d:b0:21:43:f6:51:d4:8c:3c:d1:74:d0:f5:f6:60:
d0:a6:15:2f:f7:22:e8:3e:a2:e2:ac:8c:5d:d4:38:cb:07:0f:
c2:f9:ca:76:2b:b4:31:43:28:fc:5e:27:5b:9d:ca:de:2e:1e:
dc:4b:86:45:97:ce:ae:fc:cf:2b:e5:7c:b7:24:ac:7f:08:e2:
0f:2b:10:47:41:56:50:61:35:98:fc:34:e9:db:a3:80:75:b5:
38:d9:cb:28:27:04:7d:61:1b:92:95:33:73:40:0e:4b:6d:3f:
b4:0c:b4:4b:1a:26:bd:28:3c:69:17:d5:53:67:67:70:98:a4:
3b:98:0a:20:70:49:85:d9:e2:ae:ec:ec:f7:e5:29:04:9c:20:
e3:e3:2d:e1:9c:96:fb:df:71:a6:3a:3e:a7:1d:b7:2b:f1:d3:
15:3e:9a:65:27:bb:51:67:b4:c3:6b:a4:b2:fc:74:7a:8c:fb:
58:b8:fc:7b:6d:09:46:a3:4f:0a:66:54:b3:8b:60:01:8f:24:
d0:8d:fd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:07 2024 by rpki-client on console-fra.rpki-client.org