Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/fFkfEWejUY1urNJtxl3UpUkzaeY.roa
File: fFkfEWejUY1urNJtxl3UpUkzaeY.roa (raw, json)
Hash identifier: 8odEBo8F1Nej5fCezSwT+S7lB6E0Ucj3oEe9UzgvXBI=
Subject key identifier: 7C:59:1F:11:67:A3:51:8D:6E:AC:D2:6D:C6:5D:D4:A5:49:33:69:E6
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 01856C65D9D3FF2D602FB66245F16A19B20F
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/fFkfEWejUY1urNJtxl3UpUkzaeY.roa
Signing time: Sun 01 Jan 2023 08:14:52 +0000
ROA not before: Sun 01 Jan 2023 08:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49853
IP address blocks: 91.212.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:d9:d3:ff:2d:60:2f:b6:62:45:f1:6a:19:b2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Jan 1 08:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c591f1167a3518d6eacd26dc65dd4a5493369e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:84:6a:a9:ad:3f:06:08:d0:71:61:2e:cc:
45:eb:fc:79:1f:02:d6:56:7f:05:64:df:a2:a0:fd:
c7:a4:e7:9c:11:70:48:26:e1:c9:0d:2c:63:ea:29:
53:a6:3a:45:b0:ae:ed:40:9c:21:a5:aa:77:ef:87:
24:8d:ca:e1:e6:15:6d:39:13:c9:be:9d:e2:f6:d0:
1c:99:91:13:4f:5d:ff:b3:0d:4a:14:1a:2b:82:36:
91:8b:aa:3d:d3:48:83:f5:80:72:de:45:c2:b2:59:
58:fd:c1:21:41:c6:06:31:c4:40:27:56:30:3c:3c:
e4:f0:5d:f0:aa:ed:87:d0:f4:99:ab:b5:a1:7b:e1:
9f:f7:20:ed:60:45:f1:09:15:92:6d:56:c2:91:33:
ed:57:43:aa:39:56:00:6d:b6:49:b6:49:1a:3f:99:
6e:c5:3d:48:84:34:3e:9b:ed:7a:ce:ae:67:19:9b:
cd:8f:5a:17:62:15:1a:5c:9a:b8:15:67:f1:89:99:
a4:43:78:2b:f8:00:c7:81:80:3c:8f:a4:7a:e6:aa:
7e:b3:30:5e:4a:dd:0e:5a:05:4e:3d:0c:9f:93:67:
17:09:1c:a9:8e:10:10:b5:71:9d:a6:44:05:ff:64:
1f:3c:e4:5c:55:1f:21:c2:b4:4f:df:75:e4:bc:1e:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:59:1F:11:67:A3:51:8D:6E:AC:D2:6D:C6:5D:D4:A5:49:33:69:E6
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/fFkfEWejUY1urNJtxl3UpUkzaeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.134.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e8:bc:56:bc:3c:ae:56:5a:bb:2f:7d:6b:ae:08:16:47:e8:
2e:29:ed:ba:92:99:9d:14:a7:fe:a8:fa:2c:1c:ed:25:fa:ba:
5a:75:84:2b:cb:13:55:87:c6:80:44:cf:2d:be:59:d7:b2:be:
ea:87:20:0e:39:4f:7f:a5:14:a0:28:4c:d3:20:9e:5f:89:e1:
30:b5:be:6f:83:4c:96:95:02:08:eb:69:1e:f3:44:a6:ec:ae:
ce:13:4f:f8:72:1e:9e:00:0e:62:62:d5:2e:04:e0:6e:03:50:
af:73:6a:2a:f2:bb:8c:7a:f5:3b:99:9f:f9:da:a9:9a:95:9b:
2f:b4:97:24:31:85:6a:8c:fe:5f:42:9a:af:24:1f:42:00:83:
11:65:6c:50:32:dd:18:4b:45:93:04:a9:3c:9d:6b:db:1a:03:
67:df:18:9b:c7:79:53:a0:a3:4d:01:6a:db:9a:ef:e1:73:9d:
75:de:c9:5a:94:e7:0b:c2:93:cf:18:37:76:6c:ce:89:b1:cb:
72:8d:74:75:5d:5d:a1:52:ef:36:a2:67:06:1b:c4:99:65:cb:
9d:ad:39:fe:17:74:74:cc:8a:71:98:8d:a0:6a:f0:44:9e:04:
24:d1:a0:4d:33:39:7c:ec:86:d6:6b:93:89:6b:82:8f:99:63:
a7:68:89:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:03 2024 by rpki-client on console-ams.rpki-client.org