Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/5zEiiHTwOdWN2ggAbSH3CaOOucw.roa
File: 5zEiiHTwOdWN2ggAbSH3CaOOucw.roa (raw, json)
Hash identifier: gdZvKmVQJpPUuYZfrFDqR/zfwgm1NucuKbUPl4Welh8=
Subject key identifier: E7:31:22:88:74:F0:39:D5:8D:DA:08:00:6D:21:F7:09:A3:8E:B9:CC
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018B5D50C4837A50903E945F8DD98E4EC849
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/5zEiiHTwOdWN2ggAbSH3CaOOucw.roa
Signing time: Mon 23 Oct 2023 16:14:16 +0000
ROA not before: Mon 23 Oct 2023 16:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:50:c4:83:7a:50:90:3e:94:5f:8d:d9:8e:4e:c8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Oct 23 16:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e731228874f039d58dda08006d21f709a38eb9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:10:8b:22:4e:f3:b3:bf:2e:23:77:cd:9f:
44:72:0d:fb:00:64:78:df:59:e5:bc:4a:04:3b:1c:
8a:0c:fd:7b:63:33:77:be:71:0d:e4:66:55:a0:5e:
11:80:a6:d1:8b:00:42:a8:45:e4:99:28:93:8e:52:
45:54:49:fe:f3:06:88:b7:56:4c:e3:00:c9:10:9b:
6e:72:3f:51:35:82:a7:75:24:6c:fe:2e:9a:98:27:
db:74:81:1b:9e:d3:6a:98:d8:c5:84:f4:9d:b3:3d:
7e:da:d1:39:b3:b2:59:84:41:b2:87:e3:3c:c6:18:
96:c4:a5:57:fc:dc:cb:97:46:24:fe:34:c4:15:be:
4a:68:8c:4e:8d:5d:6c:02:c3:75:d5:a5:6e:36:ba:
60:54:68:26:6c:22:74:4e:bf:64:5f:cc:59:21:10:
9f:0a:bd:38:97:de:b0:56:7d:39:0f:78:92:ac:c0:
c8:f9:95:bb:5f:01:80:ba:ef:b3:a8:0c:01:b6:4a:
2b:9c:0c:d4:db:99:4e:33:1c:9b:df:a8:d3:59:9d:
06:2d:5c:2c:2a:6a:be:8c:2f:fb:ea:04:74:25:2c:
fc:ba:cf:1c:15:b7:e1:fe:27:5c:8d:40:1b:c2:9b:
29:36:2d:0f:c1:7d:26:f2:e0:88:08:6b:61:ef:cd:
6a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:22:88:74:F0:39:D5:8D:DA:08:00:6D:21:F7:09:A3:8E:B9:CC
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/5zEiiHTwOdWN2ggAbSH3CaOOucw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:1e:9c:7d:3a:00:79:3c:64:b2:04:46:57:36:3c:0d:2c:de:
ed:51:13:a7:29:3a:e9:36:30:08:bf:71:88:47:c9:74:6b:5b:
65:07:a5:57:c1:70:66:c2:3f:e3:af:c1:bf:94:4c:c2:e0:3a:
c0:a7:fa:0c:e2:d1:3f:bf:5c:72:dc:61:10:b9:a5:9b:51:91:
61:02:be:2f:d8:9f:97:be:dc:f1:e9:d3:01:4f:96:1c:2f:5a:
4b:03:f4:c1:46:c5:d4:3d:34:ca:64:93:d8:c1:e1:60:74:b7:
fd:c9:32:af:09:a9:3d:ee:7f:42:ae:49:95:e0:0e:cf:8c:ad:
fa:6a:61:ff:a2:c7:fa:1c:e5:d7:44:43:6c:76:99:e8:6d:19:
a0:eb:78:8a:00:8c:12:58:cd:cc:17:6e:72:95:2a:fa:19:ac:
97:70:8c:a4:36:e0:be:bb:3c:b4:0f:2d:9a:34:ae:d4:22:67:
31:38:a1:43:d0:7d:a6:03:fe:85:35:61:f2:5b:b1:06:6f:0e:
b8:de:57:73:a9:06:1c:df:06:4f:bc:37:7b:c7:e1:49:22:c4:
91:90:4c:f2:72:e0:9e:03:cf:d7:25:0f:9b:a6:c6:7c:07:92:
ee:fb:18:63:c9:9f:48:e4:86:3a:c3:a2:9d:39:b8:82:71:63:
ee:c9:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:43 2023 by rpki-client on console.sobornost.net