Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/w8shxXSl1YlOYYDsLtzTXzsrmmE.roa
File: w8shxXSl1YlOYYDsLtzTXzsrmmE.roa (raw, json)
Hash identifier: qbDHptAevw+3ZeGk+R0bPbfgWLLFgQDtCGXh5UHg0Pk=
Subject key identifier: C3:CB:21:C5:74:A5:D5:89:4E:61:80:EC:2E:DC:D3:5F:3B:2B:9A:61
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 018CC726815CAA4D083AAB2F5952159A45D3
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/w8shxXSl1YlOYYDsLtzTXzsrmmE.roa
Signing time: Mon 01 Jan 2024 22:30:38 +0000
ROA not before: Mon 01 Jan 2024 22:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209607
IP address blocks: 91.200.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 00:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:81:5c:aa:4d:08:3a:ab:2f:59:52:15:9a:45:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jan 1 22:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3cb21c574a5d5894e6180ec2edcd35f3b2b9a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:2c:7f:97:ef:1c:5f:8b:7c:fb:6e:3f:3a:
6a:b8:06:b1:95:2a:96:82:66:0f:45:d8:5b:53:25:
c8:3c:0b:f2:85:75:93:4a:33:65:63:f5:bb:95:2e:
37:b5:c1:f5:83:65:76:b9:d1:c5:d1:0b:ba:ff:c7:
a7:aa:2c:97:6e:d5:de:11:08:0c:a9:66:12:2f:a2:
b6:53:2d:00:f2:78:8b:61:77:9e:33:f2:be:ba:11:
56:74:3d:5f:dd:9e:3e:62:eb:ca:76:44:26:bd:5a:
61:d0:e4:e7:39:83:ae:98:59:24:40:7a:1c:7c:8c:
da:4f:4d:f8:d2:18:83:a6:ca:89:fe:bf:ed:63:ed:
d2:87:4a:20:11:4c:07:ad:14:1b:2c:24:bb:2f:40:
f0:1f:e4:0f:20:75:0d:df:e2:67:44:aa:90:c8:55:
e2:18:00:4d:e2:af:88:0a:ac:74:7b:dd:7c:4c:7f:
34:e1:bc:c5:68:86:3d:7a:7b:fe:ca:7e:5d:78:9a:
09:ef:c1:11:c1:4c:46:90:a3:e0:a7:46:84:db:29:
fb:20:01:45:83:fd:aa:62:e2:0d:1b:77:44:77:bb:
d7:75:49:44:28:47:c9:4c:21:1b:37:49:fe:4e:08:
d7:6e:e6:5d:44:d4:e9:69:fa:59:0f:9d:80:54:23:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:21:C5:74:A5:D5:89:4E:61:80:EC:2E:DC:D3:5F:3B:2B:9A:61
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/w8shxXSl1YlOYYDsLtzTXzsrmmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.75.0/24
Signature Algorithm: sha256WithRSAEncryption
55:46:77:22:a9:35:14:04:ec:81:c5:63:bb:bf:5d:a2:4a:d1:
1b:53:a7:49:a7:1a:e1:c3:01:cb:49:75:c6:b9:c5:40:8c:0c:
db:dd:94:4f:93:6c:b1:ad:8a:b1:26:85:43:2c:4c:5c:5b:ba:
d2:c6:33:60:fe:7d:a5:1b:70:b5:77:de:ca:9a:b0:20:54:16:
8f:55:21:aa:aa:64:8f:14:ba:e2:89:ed:77:41:73:04:0c:79:
38:93:64:85:92:b9:f2:3d:82:3c:6b:09:9a:59:27:10:74:dd:
b0:d7:77:b6:ac:75:6c:97:d1:4e:76:8a:88:43:b1:19:d0:e0:
f6:f0:43:53:dc:44:16:02:11:26:36:dd:87:a0:9c:23:06:9e:
b8:f4:7e:7d:6c:84:72:bc:cd:04:d7:33:be:31:28:00:2c:54:
99:56:90:62:f8:31:78:17:19:d4:bc:3a:16:d8:b4:3d:c9:a5:
4d:74:18:29:84:dd:84:3d:e9:41:3b:cd:ca:c6:2a:4a:dc:e8:
ac:88:ea:f6:68:fd:d0:8d:61:09:de:ee:5f:09:b0:3f:9c:5e:
e4:fc:a4:34:f4:74:e9:d3:8b:37:bc:a1:81:3e:4b:7b:dd:e7:
8d:2c:3d:57:92:c4:ec:cf:d6:c1:f4:4e:b7:f5:7e:2d:2c:8f:
6b:e4:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:58 2024 by rpki-client on console-fra.rpki-client.org