Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pDWNQzZKlavtdrPq4adANdNxxnw.roa
File: pDWNQzZKlavtdrPq4adANdNxxnw.roa (raw, json)
Hash identifier: tGmcKuDZfpEXLkwSyL4t7+OkttWik4vNP0OmBROVikA=
Subject key identifier: A4:35:8D:43:36:4A:95:AB:ED:76:B3:EA:E1:A7:40:35:D3:71:C6:7C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018FD17BE13249B84AAB869CE1817118D4D9
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pDWNQzZKlavtdrPq4adANdNxxnw.roa
Signing time: Sat 01 Jun 2024 01:48:27 +0000
ROA not before: Sat 01 Jun 2024 01:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 91.246.49.0/24 maxlen: 24
91.247.177.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
188.253.12.0/22 maxlen: 22
188.253.96.0/19 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jul 2024 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d1:7b:e1:32:49:b8:4a:ab:86:9c:e1:81:71:18:d4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 1 01:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4358d43364a95abed76b3eae1a74035d371c67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:7c:43:b9:dd:ce:b6:d3:ee:35:57:56:69:
6c:be:f1:18:c3:34:4d:80:8e:f9:43:19:57:f0:b2:
72:1d:8d:24:6c:89:e3:47:63:f4:9d:ce:2f:fd:12:
c9:6b:c3:d5:a7:70:a6:ba:70:1a:e3:8e:04:18:f7:
2e:a2:47:f4:76:6e:94:b1:d9:9b:d6:6c:10:b4:e5:
af:f8:fb:63:54:bc:f2:82:86:15:1d:20:21:c7:1f:
88:8d:a6:fd:07:a3:1f:5e:d4:6b:31:74:ac:40:3d:
d8:af:58:68:86:63:55:d4:5b:de:bf:d6:7e:8d:16:
87:63:cc:3c:1f:b1:80:41:0b:e2:6c:87:83:6b:79:
a0:6d:3b:3a:ec:83:0e:20:7f:d6:a2:f6:f1:94:0f:
62:26:91:be:04:ff:e2:ed:db:18:0c:4b:69:6c:f0:
82:09:28:91:19:ea:50:2d:b5:bc:dd:45:d2:21:76:
b3:4d:03:52:ee:4e:d8:ad:49:05:0b:1e:dd:eb:86:
75:c6:64:d7:36:4e:88:e5:d6:3d:33:77:4e:b4:b2:
8d:7a:30:0a:37:e3:d8:cd:63:ca:18:6b:13:1f:ff:
48:1e:5a:21:c8:d7:53:62:bf:d3:a7:9a:8c:e7:dd:
f3:e8:cb:29:05:5f:da:e7:2f:ce:2f:1e:15:34:a9:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:35:8D:43:36:4A:95:AB:ED:76:B3:EA:E1:A7:40:35:D3:71:C6:7C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/pDWNQzZKlavtdrPq4adANdNxxnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.49.0/24
91.247.177.0/24
185.215.246.0/24
188.253.12.0/22
188.253.96.0/19
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
83:40:4b:b9:8b:b4:57:13:5e:9b:53:c0:84:ae:5f:28:d0:9c:
0a:22:06:9d:6b:19:dc:b4:23:f5:cf:0a:09:50:a2:f1:2f:4b:
02:07:46:56:b0:0e:e0:a4:e8:8a:38:c6:3c:ba:6d:9a:e9:8d:
41:57:d4:36:ab:a5:a3:3d:86:34:25:e4:33:77:be:b3:ff:17:
43:23:12:d2:0c:4f:ac:c2:f2:5c:b9:b3:e1:9a:4f:34:f0:d3:
b1:cf:f5:94:1d:c4:55:2a:af:d6:fa:81:28:52:d0:09:fd:90:
6c:25:43:2e:4d:35:a0:62:88:ed:10:3b:77:b5:46:41:8a:12:
32:db:14:bd:78:8a:a5:ef:9f:8f:de:30:f7:da:99:cd:1b:1c:
0b:6f:e2:a4:63:12:6b:69:70:43:b4:27:63:c7:22:00:99:24:
c1:f0:cc:24:a5:66:8d:cc:7f:70:7e:4f:6b:20:5a:74:eb:dd:
20:e5:41:d2:bd:e1:4f:67:57:f1:e4:64:c1:58:30:d6:a5:26:
75:11:c3:82:7f:56:81:8a:4b:14:e0:55:a0:59:69:ac:92:47:
a0:9a:4a:2c:c7:1b:a3:23:f2:71:81:57:a6:f0:76:a9:f0:3e:
19:4f:1d:bc:08:3d:8c:79:a3:92:d0:21:45:77:c1:9b:e3:64:
cb:08:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 19:43:33 2024 by rpki-client on console-ams.rpki-client.org