Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/0_20fo6JyLwZtMH1Vxhcs02ZvJU.roa
File: 0_20fo6JyLwZtMH1Vxhcs02ZvJU.roa (raw, json)
Hash identifier: uU7XzhuxRAFrexQRhIss7OkKqfjSLgxz9KHBWKKdfqQ=
Subject key identifier: D3:FD:B4:7E:8E:89:C8:BC:19:B4:C1:F5:57:18:5C:B3:4D:99:BC:95
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC727614B92735782E3A2E460A02A7894
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/0_20fo6JyLwZtMH1Vxhcs02ZvJU.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 91.240.243.0/24 maxlen: 24
193.43.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 15:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:4b:92:73:57:82:e3:a2:e4:60:a0:2a:78:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3fdb47e8e89c8bc19b4c1f557185cb34d99bc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:a0:8c:96:20:f6:e0:77:91:7c:44:9f:0a:
4a:d4:ea:ca:ba:f0:7d:d1:63:d5:32:c5:25:74:a3:
b9:85:c3:da:6f:ad:aa:0e:71:11:23:1b:13:89:37:
89:8b:f0:f5:87:77:6d:09:35:ec:9c:b3:89:6c:28:
7f:eb:10:0e:33:1c:d7:ff:76:0f:12:89:04:85:f1:
90:10:cf:8d:cb:e6:a5:15:14:80:46:98:f5:70:3b:
8e:08:5d:25:a0:22:93:46:dc:b0:1e:7e:a2:c3:f7:
55:2e:b8:87:9f:e8:d3:41:d1:06:0b:e6:79:cd:83:
b6:1d:2a:dc:e7:4e:cd:c8:20:2b:95:c9:c3:13:ce:
38:1e:cb:fc:f1:39:c0:c1:33:ff:54:73:9e:da:58:
3a:eb:76:8f:bd:04:2f:64:99:25:5e:66:c9:66:10:
7f:a5:da:9d:f9:64:59:3f:cb:c7:1a:7d:d6:0c:a0:
58:0f:d5:1a:66:a8:18:6f:7e:43:ce:da:eb:34:33:
90:d4:e2:6b:b9:ab:27:ef:d7:1e:f5:23:31:af:07:
11:f7:ea:65:84:68:56:94:d0:d6:16:62:f0:08:79:
e7:82:a0:3b:c4:28:51:f9:04:ae:91:20:c5:a9:bf:
01:64:7d:bf:8c:00:c3:02:da:3a:1c:6a:d1:6b:c0:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:B4:7E:8E:89:C8:BC:19:B4:C1:F5:57:18:5C:B3:4D:99:BC:95
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/0_20fo6JyLwZtMH1Vxhcs02ZvJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.243.0/24
193.43.249.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f4:b4:45:e8:05:05:00:37:f7:96:be:64:fc:64:86:b0:d2:
4e:fb:56:d7:6e:f4:49:25:4b:9e:75:18:55:b1:c4:21:c4:6e:
34:79:4f:95:79:02:5d:5b:23:d2:da:c3:ff:b3:0e:5b:60:93:
a5:43:1e:55:04:83:95:4b:5a:13:54:26:3e:3b:47:47:b9:16:
6d:20:61:33:dd:b9:31:e6:6d:23:cc:e2:28:33:37:12:20:c0:
3e:29:19:c4:2b:85:4c:c2:d9:9a:ee:b0:82:39:d5:94:37:5b:
97:86:6c:3a:1a:3a:d2:9c:5b:ca:81:7b:4f:c9:f2:fd:f5:4c:
50:ba:ab:b5:cf:f9:4e:7b:4f:37:71:c4:e5:9c:f9:b8:27:e7:
47:55:ba:bd:3f:d8:f3:16:5d:a7:df:e5:2b:cc:0b:d3:e6:78:
31:02:1b:bd:9d:c9:04:97:54:77:6b:2d:8a:ba:b1:9d:95:7f:
9d:dd:73:77:c3:f0:11:67:90:3c:e5:b0:32:74:17:9a:58:2a:
0a:9a:c4:98:33:79:38:1e:31:8e:f6:04:10:fe:27:3d:cd:d6:
cc:1d:94:45:b7:5e:6b:5a:e4:f6:8d:8e:54:5d:38:6e:44:46:
24:82:65:cb:c2:81:9f:a1:9b:58:d6:00:f7:2b:23:46:7a:8d:
1b:ca:1f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 20:56:59 2024 by rpki-client on console-fra.rpki-client.org