Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/rh-Gg6Eu2TlOMAl3OBTBn_W8Hp0.roa
File: rh-Gg6Eu2TlOMAl3OBTBn_W8Hp0.roa (raw, json)
Hash identifier: iUCn8IYhxwoGwpiC+EcABPrhODVi/nT5Y3OziO3bg8c=
Subject key identifier: AE:1F:86:83:A1:2E:D9:39:4E:30:09:77:38:14:C1:9F:F5:BC:1E:9D
Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial: 018EBD8E7023971A4BDB3D073DB74A5E3062
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/rh-Gg6Eu2TlOMAl3OBTBn_W8Hp0.roa
Signing time: Mon 08 Apr 2024 11:53:32 +0000
ROA not before: Mon 08 Apr 2024 11:53:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35007
IP address blocks: 91.201.120.0/22 maxlen: 24
93.157.112.0/21 maxlen: 21
185.221.80.0/22 maxlen: 22
195.160.184.0/23 maxlen: 23
195.225.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:8e:70:23:97:1a:4b:db:3d:07:3d:b7:4a:5e:30:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Validity
Not Before: Apr 8 11:53:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae1f8683a12ed9394e3009773814c19ff5bc1e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:a9:6e:2d:a6:2c:2d:15:6f:f2:f7:5b:55:
e1:59:41:3d:6e:d7:a9:66:12:5c:e1:46:ad:3a:bb:
d2:e3:44:f8:f7:77:aa:95:3b:58:b3:c1:75:99:bc:
b2:c4:08:1b:96:23:eb:62:1a:3f:4d:0e:1e:0e:09:
57:e0:d0:c8:52:da:7b:7a:f9:09:ea:d2:d8:31:8b:
42:76:ba:26:df:1b:29:98:9a:0d:3c:f2:35:46:44:
26:35:3f:15:0b:c4:1f:3b:f6:07:0d:44:a4:75:91:
4d:16:9e:0d:40:05:46:32:04:a3:6b:d5:09:4d:cb:
b6:22:83:00:1c:8c:08:86:0c:c7:25:73:91:80:a4:
63:e0:d6:f3:9c:66:47:b8:9e:98:46:1b:be:7a:45:
0a:07:62:dc:42:68:18:72:96:1c:41:22:dc:a6:ce:
ea:14:12:22:59:84:69:b6:e9:47:12:c4:0f:3a:4d:
37:0f:eb:8b:ca:f9:02:49:8b:40:80:71:c7:41:8d:
a7:ab:24:60:f5:95:d0:89:17:e6:73:b8:ea:47:64:
d2:a4:a6:2f:bd:4c:6f:16:f4:b2:26:19:d0:25:b3:
e7:98:9a:90:23:35:bb:1c:fb:12:1e:0e:01:79:6a:
5f:69:fe:9d:04:7b:3e:00:4f:a7:24:31:05:42:49:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:86:83:A1:2E:D9:39:4E:30:09:77:38:14:C1:9F:F5:BC:1E:9D
X509v3 Authority Key Identifier:
keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/rh-Gg6Eu2TlOMAl3OBTBn_W8Hp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.120.0/22
93.157.112.0/21
185.221.80.0/22
195.160.184.0/23
195.225.36.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:5f:69:7b:2b:3f:aa:2e:5b:e5:95:ac:7e:f4:0d:f9:fc:10:
6a:0f:01:b3:cf:5c:7c:73:e2:8c:78:2e:b0:c3:29:9a:9f:97:
bb:34:33:27:b1:6a:bf:c0:71:64:a9:d0:3e:99:f5:51:48:38:
b4:ac:7b:f5:41:b6:8c:a5:1f:c8:f7:20:bc:6f:1a:ad:c3:bd:
26:b5:8b:49:f4:49:3d:55:f5:f9:75:d5:b5:b4:1f:3e:37:bc:
74:ef:ec:53:e8:62:ae:43:92:fc:3a:cb:7e:ad:21:2a:33:16:
b0:a9:6c:44:66:d2:db:00:e5:30:fb:74:fc:52:74:77:e2:aa:
05:27:b4:0c:75:53:99:f8:f2:54:00:3f:d6:c9:48:a9:27:3c:
ff:81:73:09:3a:4c:f5:55:f3:b7:d8:3b:ba:81:95:d1:be:45:
59:cf:5e:3a:ff:b1:0a:48:a5:0f:b3:34:d7:6e:44:d6:8c:5a:
de:33:46:9c:fa:5a:cc:8c:9d:a5:f7:30:e8:60:42:25:cc:af:
c0:69:5d:e2:17:c5:3d:8d:a1:3c:e8:d1:74:35:42:60:99:dd:
af:31:c6:41:67:85:00:70:57:bc:fe:08:73:b2:8e:8a:04:53:
28:ac:ca:5f:a0:c6:aa:32:eb:f9:77:33:cc:79:90:28:e4:db:
67:29:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:25 2024 by rpki-client on console-fra.rpki-client.org