Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yp0cBZJLrg9IDZj6bjknw0HeWRg.roa
File: yp0cBZJLrg9IDZj6bjknw0HeWRg.roa (raw, json)
Hash identifier: JJq7KtagGp03qtx/Pe1qsyTHKXa8iL+Hcr3y9f/3Y/0=
Subject key identifier: CA:9D:1C:05:92:4B:AE:0F:48:0D:98:FA:6E:39:27:C3:41:DE:59:18
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018776D85399E1365653CB29A1D62B15B30D
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yp0cBZJLrg9IDZj6bjknw0HeWRg.roa
Signing time: Wed 12 Apr 2023 19:01:41 +0000
ROA not before: Wed 12 Apr 2023 19:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.238.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:d8:53:99:e1:36:56:53:cb:29:a1:d6:2b:15:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 12 19:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca9d1c05924bae0f480d98fa6e3927c341de5918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:01:2d:35:06:2f:7d:49:11:54:09:9c:78:e8:
b0:00:db:39:aa:8a:56:7c:53:e9:d9:22:89:e4:3b:
3d:30:b6:50:53:b9:64:3a:ad:fb:6a:a3:e0:33:a6:
d0:2d:e6:fc:bb:7b:d6:85:03:ec:39:38:50:26:7e:
7f:c7:6f:28:af:0b:d0:d5:66:3d:29:e2:82:d9:a9:
2e:bc:c3:14:15:82:12:dd:aa:1a:f7:30:1e:7e:43:
10:55:c8:03:00:8e:b8:83:b1:ee:82:ad:74:ea:62:
7b:ba:75:99:92:98:6c:aa:5e:77:4a:cb:2a:ee:fd:
2e:6e:eb:29:7b:02:44:dd:ca:67:b9:b5:07:b1:9d:
e5:5c:45:c3:9e:49:61:b8:79:34:0a:6d:d6:c9:a7:
c4:ea:26:04:bc:16:42:a1:7a:57:6b:a4:00:3b:69:
12:6b:31:13:ef:1e:47:f0:21:a0:b7:bf:28:b8:d8:
96:5d:7d:fc:74:bf:c8:41:4d:1a:4a:69:c0:7d:60:
7f:57:5e:80:a6:19:23:2b:f1:a3:9c:89:28:d5:6e:
c5:14:95:62:e7:48:79:8f:b9:aa:a5:68:7a:1e:f4:
28:34:a7:f9:27:d6:6a:31:b1:f0:d4:6f:7d:5e:aa:
45:6c:05:86:85:77:bd:c1:ac:95:8a:51:44:42:20:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:1C:05:92:4B:AE:0F:48:0D:98:FA:6E:39:27:C3:41:DE:59:18
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yp0cBZJLrg9IDZj6bjknw0HeWRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7f:55:df:2b:a6:cd:9a:fe:48:03:df:ed:ab:0e:d6:3c:cd:
ed:d3:e4:1b:1a:20:31:f6:cd:32:00:6e:95:cd:b8:38:24:e3:
4b:bf:b9:38:09:8f:9b:2a:e7:9e:f9:82:84:10:eb:c0:0f:ba:
fb:d0:41:8b:5e:e3:2d:00:81:0e:37:ef:38:54:10:d6:76:f6:
90:aa:a4:0e:2c:5e:cd:64:1b:df:40:47:59:f9:d1:b0:e6:11:
ef:27:27:fb:c0:a9:15:e8:73:07:a6:86:18:b5:60:63:38:df:
95:fd:5e:b4:5d:79:f0:b0:62:4b:ff:2e:ba:b2:9c:63:6c:b0:
cb:01:b9:de:4d:d1:d1:bd:57:c7:38:66:73:18:8d:0f:06:0d:
77:1f:6c:7d:b2:cf:fd:0d:b0:de:92:eb:ae:06:2e:e5:d6:f7:
ee:81:38:55:b3:e8:82:11:43:ac:27:06:c4:7b:51:fa:b9:13:
e8:a0:b2:a5:e2:3c:40:b8:21:eb:6b:e7:15:49:f1:4f:8b:8c:
e8:6c:92:34:b9:db:33:af:c9:0a:a7:77:f8:d0:0b:95:eb:e7:
86:8a:5e:da:92:b8:4f:6d:b3:c2:2b:ca:e5:a5:10:da:2b:8f:
ec:ab:f4:da:59:2a:30:17:23:eb:d8:f4:92:2a:8c:7a:d7:ea:
3b:9f:2c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:01 2023 by rpki-client on console.sobornost.net