Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/0fzSh9-g7JRM0ACZcitQnmE9b7M.roa
File: 0fzSh9-g7JRM0ACZcitQnmE9b7M.roa (raw, json)
Hash identifier: rLl65oiY5JmvVsp8P0bfb/dwtdCUl1Ci5JIcVFndlXg=
Subject key identifier: D1:FC:D2:87:DF:A0:EC:94:4C:D0:00:99:72:2B:50:9E:61:3D:6F:B3
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 01857228127CB7B768A3A6DA908D3BB6829C
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/0fzSh9-g7JRM0ACZcitQnmE9b7M.roa
Signing time: Mon 02 Jan 2023 11:05:06 +0000
ROA not before: Mon 02 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41849
IP address blocks: 91.102.135.0/24 maxlen: 24
91.102.134.0/23 maxlen: 23
91.102.134.0/24 maxlen: 24
5.252.44.0/22 maxlen: 22
91.102.130.0/24 maxlen: 24
91.102.128.0/22 maxlen: 22
2a01:7140::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:12:7c:b7:b7:68:a3:a6:da:90:8d:3b:b6:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Jan 2 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1fcd287dfa0ec944cd00099722b509e613d6fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:f4:09:d1:4e:6e:2a:b3:bd:fe:c7:c5:aa:
e9:b0:1b:5d:df:67:95:50:f4:4f:a1:37:31:c6:91:
85:9b:53:43:e4:96:6e:33:cd:42:a1:28:67:bd:4c:
60:88:b0:45:9f:3a:e1:77:1b:ef:4a:17:99:de:c3:
42:7b:dd:d5:4c:a7:b3:e1:d0:b3:69:5f:fe:cf:2a:
2f:3d:ac:f5:71:97:a8:06:0a:2b:13:46:6f:51:c7:
bf:69:85:5b:e8:f1:d8:07:a5:2b:61:a0:2a:61:fc:
da:a0:b9:3a:d6:63:26:c5:8f:93:cd:13:ef:2e:3b:
1f:dc:62:87:d0:c2:8f:2e:f9:49:e2:95:0a:94:7c:
83:c6:6e:8f:1a:30:2c:10:13:bd:70:10:9e:28:a2:
8d:c9:97:6f:e9:c3:43:39:a3:f3:0c:1a:06:4a:a2:
8e:b3:fb:de:60:ed:a6:93:f3:93:c5:b9:a8:67:05:
e6:cc:3b:e7:03:ff:e4:42:13:42:57:99:d4:a0:90:
d3:90:2e:57:7a:c7:6d:30:2d:bb:85:f0:05:f8:d2:
70:28:05:dc:30:7f:2e:d8:f1:e3:16:6a:a9:e5:7b:
dc:6f:62:f9:ce:92:29:98:58:d0:15:31:b0:89:8b:
f8:ae:db:dd:51:b2:74:51:df:8d:d9:a6:ec:98:92:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:D2:87:DF:A0:EC:94:4C:D0:00:99:72:2B:50:9E:61:3D:6F:B3
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/0fzSh9-g7JRM0ACZcitQnmE9b7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.44.0/22
91.102.128.0/22
91.102.134.0/23
IPv6:
2a01:7140::/32
Signature Algorithm: sha256WithRSAEncryption
5a:4a:73:be:0e:5b:40:63:38:ea:82:18:23:0b:29:ef:ea:95:
05:05:4d:88:d3:6b:24:43:ec:34:a8:4e:3f:e8:f5:84:eb:f2:
10:1d:6f:49:91:b4:f2:93:83:af:06:cc:53:8f:65:73:53:76:
01:5c:0d:52:5f:5f:8c:90:ed:bf:8f:bd:19:35:99:e9:5a:45:
26:a5:5c:b3:8b:f1:29:c4:73:76:b9:9b:ec:03:70:12:0f:8c:
77:d4:9e:bc:52:b7:f8:c4:49:f7:08:c5:99:fc:e7:34:6b:7b:
ed:36:8e:49:39:cd:9d:d0:3b:be:bd:17:31:aa:af:7c:46:91:
03:87:a7:4d:61:08:14:3f:bf:78:4d:20:16:32:ef:83:4d:b1:
83:e7:b4:46:50:b3:d4:28:70:7e:2a:0f:1c:3c:f3:0d:8a:a9:
a0:64:30:a9:d0:4d:33:e5:39:42:b2:b5:f6:51:f5:6c:75:62:
27:bc:53:47:ae:57:70:9d:a0:ff:a5:7b:04:6b:f5:bb:60:00:
2c:6b:07:95:75:2d:f9:55:51:34:b8:8e:82:90:ea:f2:b0:c8:
49:ba:dc:e1:1c:dd:04:ca:59:d6:c5:c1:7e:59:4c:bd:41:0f:
5b:b4:a1:c7:e4:6a:9c:a7:af:e7:46:ea:e9:4f:83:c1:a0:b2:
02:0c:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:56 2024 by rpki-client on console-fra.rpki-client.org