Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/zI1uS1xkK5sKJi-QuVAxKaKVyhg.roa
File: zI1uS1xkK5sKJi-QuVAxKaKVyhg.roa (raw, json)
Hash identifier: hMLJ1DIAIuLKym/eGXOCgi+qpFFOtPUCliE4efDS55E=
Subject key identifier: CC:8D:6E:4B:5C:64:2B:9B:0A:26:2F:90:B9:50:31:29:A2:95:CA:18
Certificate issuer: /CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Certificate serial: 01857246AFDE0D9229E33B7B5F9FED469038
Authority key identifier: 2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/zI1uS1xkK5sKJi-QuVAxKaKVyhg.roa
Signing time: Mon 02 Jan 2023 11:38:33 +0000
ROA not before: Mon 02 Jan 2023 11:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209607
IP address blocks: 91.200.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:af:de:0d:92:29:e3:3b:7b:5f:9f:ed:46:90:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f18aa1f55d635c96204ca79a82993fbcec1512c
Validity
Not Before: Jan 2 11:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc8d6e4b5c642b9b0a262f90b9503129a295ca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:a4:e2:86:28:c5:9e:2d:82:56:cc:c0:9a:
1e:4c:45:64:97:e2:31:19:8e:c0:87:3c:63:e9:c8:
88:06:70:6d:c7:22:a0:6c:42:bf:4e:f1:c8:7e:5b:
16:c4:ee:9a:55:d7:4a:10:da:9c:41:f8:ed:da:b5:
05:d2:26:48:c4:8f:e4:c7:6d:c7:cf:91:14:22:ae:
2a:da:ed:12:4e:c5:fd:59:8a:92:09:fb:3c:81:bb:
6c:0e:6b:92:dd:2f:af:be:c2:1a:cd:be:39:e9:86:
b7:76:72:cf:c4:40:b8:64:37:77:06:e1:9b:0a:e0:
57:90:0e:82:d9:2b:25:c9:5c:f5:b6:d8:50:1b:52:
53:40:ed:28:83:ce:89:b7:55:43:63:1a:58:08:2e:
b9:db:25:93:48:05:4d:28:98:93:5f:bf:ec:5e:23:
44:6f:23:85:cd:0e:99:68:1e:c4:81:b4:bc:05:37:
76:a6:a2:6a:da:e4:ea:ef:87:69:7a:76:a1:93:8e:
6c:c2:d2:cf:09:f5:21:55:05:b9:c7:50:8b:af:2c:
c1:a6:44:7d:a3:52:36:ac:34:41:9d:43:7a:73:4f:
3e:46:66:88:d9:ed:7a:60:25:17:b0:16:f9:25:7f:
49:0a:2d:58:24:9e:c5:64:2b:de:18:fa:18:2e:2a:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:6E:4B:5C:64:2B:9B:0A:26:2F:90:B9:50:31:29:A2:95:CA:18
X509v3 Authority Key Identifier:
keyid:2F:18:AA:1F:55:D6:35:C9:62:04:CA:79:A8:29:93:FB:CE:C1:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxiqH1XWNcliBMp5qCmT-87BUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/zI1uS1xkK5sKJi-QuVAxKaKVyhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/52e997-6d9a-45ae-a7c2-0d205fb1ad05/1/LxiqH1XWNcliBMp5qCmT-87BUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:33:fa:35:f5:bd:20:ad:ab:61:9e:67:94:19:10:41:ed:ff:
59:74:98:d1:c5:16:60:b6:23:1c:52:7b:aa:3d:36:ed:e3:66:
74:62:cd:81:63:db:14:62:29:44:3a:d6:71:f4:59:fa:21:7b:
3e:23:6f:00:73:ec:fb:d8:f9:b8:64:d2:cf:c7:72:b6:07:e5:
b4:89:8a:25:d0:68:00:53:fa:c4:ee:4d:ca:cc:8f:a5:5b:f3:
10:30:5a:36:1f:2f:15:5f:17:22:06:6f:17:37:7d:56:ed:ba:
c7:a7:8d:d7:3b:ba:01:0c:1e:ff:08:4b:5e:84:c7:d0:74:23:
d7:8b:a4:4e:f6:86:3a:bb:4f:5b:ff:5a:0c:7f:5a:74:01:53:
1a:9c:59:9e:b1:07:2e:89:04:fb:00:bd:db:02:55:7d:17:52:
ca:1c:c7:dd:22:ab:6b:7f:80:41:61:cb:63:63:e1:fd:18:fb:
45:47:f5:b1:99:07:6c:ac:83:09:9e:04:8b:c8:90:de:6e:93:
53:33:20:6a:73:83:e5:31:08:e0:68:43:fc:16:ee:d3:19:e2:
b1:30:a7:a5:f6:f2:5a:3a:46:e8:96:0a:57:21:bd:56:24:5a:
2c:3b:3f:95:17:79:da:e5:c8:96:db:1f:77:c2:8d:d3:b9:07:
81:98:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:20 2024 by rpki-client on console-ams.rpki-client.org