Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/o0F5obpbDWBA-7q5lNQfsLYVZ9I.roa
File: o0F5obpbDWBA-7q5lNQfsLYVZ9I.roa (raw, json)
Hash identifier: rvbsd/+2k34ceMkiEG3MIsW7w95qNXDlFOgmuCn8ce4=
Subject key identifier: A3:41:79:A1:BA:5B:0D:60:40:FB:BA:B9:94:D4:1F:B0:B6:15:67:D2
Certificate issuer: /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial: 018572031BA25623270CC1089BAB20BAE8A3
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/o0F5obpbDWBA-7q5lNQfsLYVZ9I.roa
Signing time: Mon 02 Jan 2023 10:24:44 +0000
ROA not before: Mon 02 Jan 2023 10:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212011
IP address blocks: 91.206.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:1b:a2:56:23:27:0c:c1:08:9b:ab:20:ba:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
Validity
Not Before: Jan 2 10:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a34179a1ba5b0d6040fbbab994d41fb0b61567d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:b5:40:f7:3c:4b:09:c5:5d:20:40:ee:93:
e3:33:47:76:dc:49:e3:98:52:7b:19:36:4e:47:9f:
fd:56:e3:6b:dd:04:12:41:91:8b:1a:10:9c:16:e4:
66:dd:11:eb:dd:76:da:80:17:1c:98:97:96:92:61:
45:90:65:db:13:fb:52:3a:33:25:c9:94:d0:ae:15:
9d:29:b8:9c:d2:af:11:86:31:04:de:bb:b1:ae:a7:
64:9d:d4:aa:e4:63:12:e0:31:3c:aa:28:34:c5:0f:
02:1c:bd:1e:74:ae:29:9e:17:34:4b:d4:e9:f9:16:
37:20:dd:6f:f5:dc:36:61:04:f6:d5:b5:cf:8e:37:
0a:1b:b2:68:02:99:2b:49:1e:27:ce:49:ee:c6:07:
ba:53:f6:59:f1:47:90:2e:f0:68:62:f7:cc:dc:bd:
f6:4a:9b:10:83:43:f2:7a:17:01:3d:58:36:b7:7f:
36:a0:12:e8:e7:1f:05:1c:92:73:97:80:70:f7:2e:
06:cc:aa:62:1b:67:54:44:27:c9:a0:56:ec:f3:ba:
f0:a2:64:32:e8:60:f6:37:7c:b3:70:8c:a5:71:ce:
95:7c:20:a7:74:55:7c:3e:36:e9:6a:6a:98:db:3d:
3e:55:63:67:31:b6:5c:42:65:5e:1c:d4:ee:fd:68:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:41:79:A1:BA:5B:0D:60:40:FB:BA:B9:94:D4:1F:B0:B6:15:67:D2
X509v3 Authority Key Identifier:
keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/o0F5obpbDWBA-7q5lNQfsLYVZ9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.70.0/24
Signature Algorithm: sha256WithRSAEncryption
13:55:d3:a4:12:5b:3b:34:ab:7b:ff:76:1b:5b:16:76:96:94:
45:26:2c:97:a7:65:4d:3e:3f:2d:e9:ca:46:c5:88:ce:7a:d6:
d3:c2:56:48:e6:49:d4:be:bd:04:97:74:50:4d:75:6d:48:01:
57:90:0a:df:e3:94:de:3a:eb:23:a7:32:14:4e:5d:7e:9b:df:
1e:dc:18:23:d8:05:60:bc:11:ef:cd:27:b2:59:1a:b9:7e:64:
73:cc:9d:69:88:36:ce:fa:9e:4d:09:cc:d3:9c:29:bd:91:ab:
f3:f8:e9:c0:22:8e:76:06:19:38:b0:09:fc:ae:2f:e3:e1:95:
c1:6a:68:3d:93:84:02:35:e1:1d:97:74:80:82:8b:1c:58:aa:
17:a7:49:63:4f:b4:2f:3a:35:95:c3:09:23:0b:f6:44:79:5e:
f8:ab:01:93:35:a2:2a:73:a7:48:51:84:c7:b1:ee:c6:eb:43:
d3:0d:44:61:d3:84:ff:3b:c2:a4:c1:b2:41:3a:35:84:92:39:
94:08:93:2e:fc:3e:15:a1:d6:db:af:9d:33:70:f9:d4:a5:31:
ff:71:b9:69:b0:8f:80:f4:58:61:27:0a:a9:68:55:21:dc:ac:
fe:e2:2e:b6:8f:b8:ed:0e:e2:ca:ab:cc:a1:6c:9d:fc:69:a9:
9f:b0:4f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:52 2024 by rpki-client on console-ams.rpki-client.org