Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xvAMp_ALbeSRFpUvtBOKZsgK6fg.roa
File: xvAMp_ALbeSRFpUvtBOKZsgK6fg.roa (raw, json)
Hash identifier: SLk9pnUNXRyWF0cumCDJP/e2sm8CurlXNcR8MortKiM=
Subject key identifier: C6:F0:0C:A7:F0:0B:6D:E4:91:16:95:2F:B4:13:8A:66:C8:0A:E9:F8
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018CC56EFD4F5771CF1962EB4DD436478F0A
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xvAMp_ALbeSRFpUvtBOKZsgK6fg.roa
Signing time: Mon 01 Jan 2024 14:30:34 +0000
ROA not before: Mon 01 Jan 2024 14:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 91.232.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:fd:4f:57:71:cf:19:62:eb:4d:d4:36:47:8f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 14:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6f00ca7f00b6de49116952fb4138a66c80ae9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:5f:91:8c:e3:36:8c:00:fe:e1:94:af:ea:
b5:a4:bf:a6:cd:20:71:9e:a4:2d:7b:92:50:e5:5d:
10:c8:7a:a5:1d:08:88:5d:dd:4c:0b:44:8f:6b:f8:
d1:a2:5d:47:af:bd:b3:66:db:89:f8:cb:08:b8:62:
8d:dd:80:d3:97:40:42:f7:c7:ae:2f:55:35:86:d3:
e8:6e:89:fe:ed:e1:f0:ec:98:7a:a3:7a:8b:4f:37:
23:cf:8d:29:90:28:6c:38:4f:a9:1e:5a:de:9d:35:
a6:6c:2a:76:0a:91:59:91:1a:fc:9b:4b:f5:09:f5:
fb:53:07:26:65:47:b2:df:bf:f8:12:9e:0d:c6:6d:
91:82:5a:88:5d:4c:80:17:43:78:45:8f:1b:6c:05:
dd:27:ea:91:e5:b3:12:44:6a:c6:5a:de:fb:4b:62:
14:c1:e3:8d:02:64:10:56:7b:34:37:68:c9:8e:fd:
1c:4f:2f:6e:c9:84:66:89:e9:c9:4b:09:2c:d3:6a:
b1:4c:dd:5a:d5:3e:ca:d1:2a:5a:7c:64:39:35:31:
7e:5b:d4:cd:14:94:d9:80:dc:ec:b7:3c:1f:b3:05:
3f:e9:9d:d0:10:44:48:75:1e:69:67:5f:6f:c6:d5:
be:12:c4:83:6c:eb:fd:d6:50:86:81:c0:26:53:de:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:0C:A7:F0:0B:6D:E4:91:16:95:2F:B4:13:8A:66:C8:0A:E9:F8
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/xvAMp_ALbeSRFpUvtBOKZsgK6fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.136.0/22
Signature Algorithm: sha256WithRSAEncryption
27:fd:90:0d:94:18:88:8c:b0:2f:d1:b5:47:47:e7:d4:80:cf:
d3:79:7d:8f:77:9c:d3:a5:4a:f9:73:f3:30:4d:5b:7f:65:4b:
a9:1e:73:1f:97:da:40:b0:17:8c:e6:25:b1:d5:f7:fe:00:32:
35:a5:b2:fe:5c:e8:a8:f4:3d:b9:ad:fb:c6:8d:3b:f8:1d:62:
47:60:e0:1b:df:9b:69:00:56:6a:81:48:c1:67:7d:8c:58:d1:
a3:cc:69:ea:44:39:8c:2d:52:72:cd:06:cb:44:f7:23:5b:87:
c5:4e:c2:bb:e3:09:52:2e:a5:42:a8:32:9b:ca:c1:f7:86:14:
15:6f:b0:e6:9e:c5:b9:3e:1e:cd:26:3f:8b:b6:25:b4:16:62:
df:53:e2:d6:9e:b1:b9:85:e7:21:05:46:f6:7c:79:6b:cc:e3:
dc:19:fb:15:13:ca:8e:f6:e9:31:92:8d:44:80:55:55:da:ff:
e9:9a:9a:a1:04:c0:cf:15:89:96:c9:3d:4b:95:ed:c9:ad:26:
ec:46:50:f8:b2:95:6d:fe:99:4c:a4:66:0b:6a:f7:18:45:12:
e6:19:ca:f4:7f:b5:9e:2d:4c:cd:bd:06:17:78:a9:31:4a:b1:
32:50:db:8b:b4:0b:36:46:bc:f4:db:7a:9c:93:76:37:66:42:
cc:22:a8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 03:10:52 2024 by rpki-client on console-ams.rpki-client.org