Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/uUZUsRnPVYC_k2sZi_kNw2IFsvg.roa
File: uUZUsRnPVYC_k2sZi_kNw2IFsvg.roa (raw, json)
Hash identifier: 77ZcwujdBK0+KgFMR1x8t6HabnKessFvajiIRBWLbrQ=
Subject key identifier: B9:46:54:B1:19:CF:55:80:BF:93:6B:19:8B:F9:0D:C3:62:05:B2:F8
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018964C0569813F7BF69C0207B2D79A53070
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/uUZUsRnPVYC_k2sZi_kNw2IFsvg.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.210.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 11:39:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:56:98:13:f7:bf:69:c0:20:7b:2d:79:a5:30:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b94654b119cf5580bf936b198bf90dc36205b2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bf:0a:02:41:d6:f5:7a:ba:91:1c:fa:0d:4e:
78:4f:82:17:05:ba:0f:f9:eb:0f:39:87:22:f1:d5:
0f:af:2d:2b:4b:28:58:e6:00:33:14:ac:a5:aa:37:
79:b8:7a:e8:f3:39:4e:cc:23:c0:2f:b3:5e:22:22:
f9:2e:42:0b:78:fe:19:d7:d1:80:fd:ee:37:ed:8c:
f6:53:53:00:a1:c6:44:3d:fe:80:fc:11:a4:5d:aa:
77:ea:3e:96:56:83:43:f1:b7:39:21:0f:5e:10:de:
1c:7b:ff:57:70:b4:5b:a6:57:ce:e7:37:53:93:93:
e1:a5:ee:fa:e3:09:69:97:59:95:87:a9:b7:76:ba:
fa:ee:27:7f:65:ee:1e:fe:8e:8b:22:b0:82:27:ad:
61:90:08:59:79:46:a2:fc:01:63:92:d3:48:28:6b:
d9:3f:00:e2:05:93:d1:92:a4:1a:f6:0d:b8:4d:dc:
49:78:fb:66:fe:44:f9:d2:0d:0d:11:18:54:91:b3:
58:38:01:be:1a:91:86:3a:e6:c6:a9:bc:b9:f5:c5:
5a:ff:fd:ce:4a:ae:e1:be:cb:f9:6d:b6:a7:c9:7e:
19:cd:d9:f5:1a:3b:99:89:b3:2a:02:60:24:16:18:
0e:7c:3c:bf:0c:7d:a0:bf:70:00:b9:52:f2:ce:87:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:54:B1:19:CF:55:80:BF:93:6B:19:8B:F9:0D:C3:62:05:B2:F8
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/uUZUsRnPVYC_k2sZi_kNw2IFsvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.68.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ce:c2:44:45:a5:fe:d8:90:c0:61:06:44:43:27:86:43:9e:
a2:aa:23:6b:8d:b3:e8:db:35:a5:ec:d4:d5:98:3e:2e:99:0d:
9a:57:8a:3f:c8:56:2e:b4:4a:24:9c:a6:4d:8a:e0:4f:b7:85:
07:78:af:2e:b2:bb:d0:2b:ee:a3:da:7c:7f:d9:b4:b8:8e:04:
a3:d2:ef:c2:d3:8e:08:de:ea:31:e9:51:8f:85:38:07:70:50:
51:b7:ba:72:d2:10:43:fb:1f:b2:bd:ed:04:48:06:87:61:1b:
b3:73:b4:25:ba:7f:16:c3:a7:d5:fa:16:50:c4:20:a5:11:42:
a3:33:d1:0c:b9:75:0d:de:80:78:f8:7c:75:07:61:01:f1:a7:
8d:98:e2:4c:de:68:80:26:9b:df:0e:05:19:8c:f6:f0:48:f6:
bc:01:e7:30:c8:3c:41:a8:bf:99:87:93:8e:a3:0f:da:69:25:
b4:ed:91:51:36:60:54:d1:68:7d:12:63:12:f5:80:1c:8c:d6:
97:40:bc:21:20:31:0e:39:60:79:44:02:6c:22:d1:82:3f:9d:
df:16:8a:ef:01:f7:75:db:8a:87:00:ee:83:9c:d2:ab:83:88:
b3:78:53:19:c4:db:12:1d:bc:18:ef:da:eb:28:84:89:17:06:
02:58:83:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:42 2024 by rpki-client on console-fra.rpki-client.org