Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/1-K7fYqBweU7KKjhn5DCaAKM_Arg.roa
File: 1-K7fYqBweU7KKjhn5DCaAKM_Arg.roa (raw, json)
Hash identifier: KU1eM5VjvSLpIjL/3HjrKFu2zS5QP5SFxoLc+jj/qmI=
Subject key identifier: F8:AE:DF:62:A0:70:79:4E:CA:2A:38:67:E4:30:9A:00:A3:3F:02:B8
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0185720C786A39D94C992F78204B4EEB64CE
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/1-K7fYqBweU7KKjhn5DCaAKM_Arg.roa
Signing time: Mon 02 Jan 2023 10:34:57 +0000
ROA not before: Mon 02 Jan 2023 10:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 91.238.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:78:6a:39:d9:4c:99:2f:78:20:4b:4e:eb:64:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 10:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8aedf62a070794eca2a3867e4309a00a33f02b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:1e:e1:ed:d2:e1:d8:70:82:33:ba:de:e4:
04:c5:82:68:b9:57:8e:c6:e9:38:30:00:db:95:c3:
6c:1d:82:9e:52:92:81:2c:34:2a:eb:0b:19:72:aa:
28:ef:ff:f1:ab:6c:09:b9:38:ea:01:68:1b:66:fb:
ec:1d:d7:73:df:66:47:42:de:85:32:9b:ec:df:4f:
69:a2:b7:7e:65:3e:6f:b2:ad:f0:78:67:91:17:31:
3a:4f:f2:1a:8f:9e:65:ff:29:02:66:8b:f1:17:d3:
91:9f:2c:8e:3b:87:b2:cc:2a:35:7f:82:c2:48:98:
18:2c:f1:e6:ef:3c:0e:c0:a3:9c:7b:53:e6:33:81:
ea:4c:cd:93:f1:91:dc:3b:b6:c0:3a:b8:35:ae:5b:
4e:b9:35:0e:da:e9:2e:fe:27:79:57:22:72:0a:6c:
4d:dc:1b:38:11:b8:86:5f:a5:1b:76:77:1d:38:a1:
01:da:17:1f:e9:82:c7:1f:48:9a:5b:4f:c5:13:75:
8c:29:06:9b:64:53:d6:31:61:97:57:8d:53:06:9f:
14:1b:40:3c:eb:3b:36:73:45:5a:df:7d:ee:fc:16:
96:4d:9e:58:2a:96:ff:4e:b9:55:f1:07:48:69:e6:
a4:36:cf:d7:84:14:f7:59:60:75:49:ff:62:24:b5:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AE:DF:62:A0:70:79:4E:CA:2A:38:67:E4:30:9A:00:A3:3F:02:B8
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/1-K7fYqBweU7KKjhn5DCaAKM_Arg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.70.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:69:65:10:63:9b:b2:f0:ee:83:88:a8:72:75:f3:d2:f5:40:
2d:b6:5e:bd:71:f5:0c:4f:e7:b5:d8:00:29:71:8d:2b:80:88:
5c:97:1f:c0:af:de:56:8b:89:19:fa:63:cd:d9:7b:95:d3:36:
25:c9:ba:4f:89:0f:a3:55:85:2f:2e:d0:f7:00:42:30:0f:8e:
14:1c:78:e3:93:be:b6:a2:8f:cb:10:59:bf:42:0d:98:45:c4:
26:1e:d5:93:9b:1c:32:e3:c0:df:4d:64:2c:a5:77:c1:f4:4b:
dc:c6:61:c7:a0:85:5c:03:e2:56:42:21:45:f2:e6:64:29:dd:
d6:c9:de:49:c2:0e:6f:f8:8b:dc:5a:1a:21:d8:58:0c:94:58:
03:a4:a6:bb:fd:59:ea:9c:fa:7a:61:dc:cd:0c:bc:e6:ff:c2:
a0:f6:28:00:02:e3:61:66:8f:e5:68:7a:2a:8a:d1:28:23:cb:
4d:e3:1e:1c:60:76:2a:2b:62:67:c9:d2:03:2e:05:d6:7b:cc:
23:2f:cf:70:6f:af:a0:80:e7:12:47:63:7d:49:f0:0b:51:25:
8d:93:ab:42:04:ac:09:be:6e:31:88:c8:77:86:b7:67:89:f2:
12:a8:03:07:e3:34:a8:7e:a1:c6:b6:12:92:3c:9d:c4:24:eb:
80:05:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:31 2024 by rpki-client on console-ams.rpki-client.org