Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/Zs1UpDsK-wuUgp_7HrqfcmJofQk.roa
File: Zs1UpDsK-wuUgp_7HrqfcmJofQk.roa (raw, json)
Hash identifier: TpIcFaewvKv0Nya63gcE50bQcR/QzkaA+xYCwP94ou4=
Subject key identifier: 66:CD:54:A4:3B:0A:FB:0B:94:82:9F:FB:1E:BA:9F:72:62:68:7D:09
Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Certificate serial: 0185720C4515C65842986A3D84B285E5CCC3
Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/Zs1UpDsK-wuUgp_7HrqfcmJofQk.roa
Signing time: Mon 02 Jan 2023 10:34:44 +0000
ROA not before: Mon 02 Jan 2023 10:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51972
IP address blocks: 91.222.63.0/24 maxlen: 24
91.222.60.0/24 maxlen: 24
91.222.60.0/22 maxlen: 22
91.222.61.0/24 maxlen: 24
91.222.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:45:15:c6:58:42:98:6a:3d:84:b2:85:e5:cc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d
Validity
Not Before: Jan 2 10:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66cd54a43b0afb0b94829ffb1eba9f7262687d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:b6:2e:c4:4d:a1:80:c0:0e:6b:86:e6:8b:
d2:1e:6f:cc:9c:8c:4d:00:46:8c:fd:3d:29:8b:2e:
bd:0b:a4:41:ed:04:79:e7:50:3d:04:8f:47:75:f0:
39:09:f5:80:fd:92:c1:51:73:68:ba:12:e9:6f:d0:
a7:43:c5:c3:03:ab:fe:27:29:e1:3d:e4:2f:0a:7d:
ac:b2:ae:db:c3:d8:12:bc:fe:1a:14:36:62:60:ad:
d5:4b:f2:3a:5c:87:84:48:32:9d:4b:29:d7:ae:bd:
02:90:28:2a:5b:ac:11:b9:0f:15:23:6f:ec:f3:52:
eb:b2:15:7c:e7:19:72:b9:ba:81:da:a9:fa:04:b8:
a9:53:a8:28:fe:ee:df:3e:7d:38:4b:06:d0:95:8d:
cd:d6:86:0b:34:5f:cf:df:04:97:53:0f:ad:f8:2d:
d8:de:a1:ef:e7:45:91:1d:7d:f4:f5:89:e3:20:c2:
4d:c9:ac:93:d3:8d:f0:0d:d1:b3:8b:01:2b:c1:9d:
a8:58:57:59:1c:8f:e7:c3:ef:e7:aa:18:f1:5c:25:
0f:a5:eb:40:df:ef:83:f3:a1:7c:1f:80:54:44:08:
b2:b8:5e:e3:50:60:b2:93:5a:80:24:af:95:a0:6c:
51:97:2c:c7:77:02:1e:3c:21:38:bc:fe:72:39:53:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:54:A4:3B:0A:FB:0B:94:82:9F:FB:1E:BA:9F:72:62:68:7D:09
X509v3 Authority Key Identifier:
keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/Zs1UpDsK-wuUgp_7HrqfcmJofQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.60.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b0:24:48:a8:19:ce:d3:36:a4:cc:a7:f6:98:2a:89:3b:28:
52:66:14:78:e0:97:35:4e:c1:d1:82:80:06:4b:fa:04:f7:06:
2e:78:b1:92:03:e9:19:e6:1f:6e:f7:e4:cc:86:13:8e:a9:6a:
e7:32:ac:67:1d:a4:30:ed:f0:a1:e5:cf:fd:9e:21:cf:de:32:
af:87:f2:d3:ac:e6:a7:b9:49:53:a9:11:d5:be:10:89:26:ed:
e7:2b:3a:e6:4e:44:d0:85:ca:2e:de:7b:c2:f4:03:fd:2d:45:
72:76:43:6d:14:d9:41:08:94:31:a3:d0:7d:35:a0:46:ab:32:
8e:4b:dd:c8:02:71:d0:8c:72:9b:9c:5c:58:92:0f:28:e1:eb:
f3:ef:8d:20:90:57:b4:41:64:dc:20:cc:35:b6:64:22:66:87:
eb:d5:df:5d:e2:4d:4a:8e:e4:f6:88:94:30:d8:f3:4b:32:5b:
da:ae:3e:bf:ec:a0:96:46:09:bb:b1:d3:7a:c4:1d:70:54:f6:
99:a8:10:83:85:11:f7:89:06:f4:04:ea:d9:c5:e1:db:cc:bb:
27:9d:3a:fe:41:14:38:fe:8b:2f:1a:ef:d1:59:54:90:5b:b5:
61:b1:50:05:b6:09:72:c9:6f:ce:6f:80:1a:7f:c4:54:76:a7:
8f:e2:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:52 2024 by rpki-client on console.sobornost.net