Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/9qea8DILKBSCTQwn9jguUNarBlI.roa
File: 9qea8DILKBSCTQwn9jguUNarBlI.roa (raw, json)
Hash identifier: 1er+QjhN7gM6kla01zmsKXoiB5UVTVQvVYWFGm3+EdY=
Subject key identifier: F6:A7:9A:F0:32:0B:28:14:82:4D:0C:27:F6:38:2E:50:D6:AB:06:52
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 018C874470BBE85C2E27BACABDAEA5B26BEA
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/9qea8DILKBSCTQwn9jguUNarBlI.roa
Signing time: Wed 20 Dec 2023 12:47:38 +0000
ROA not before: Wed 20 Dec 2023 12:47:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31019
IP address blocks: 91.228.151.0/24 maxlen: 24
2a05:9280::/29 maxlen: 29
2001:67c:22dc::/48 maxlen: 48
2a05:9280::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:44:70:bb:e8:5c:2e:27:ba:ca:bd:ae:a5:b2:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Dec 20 12:47:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a79af0320b2814824d0c27f6382e50d6ab0652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:b3:ec:ee:3b:67:3f:3b:a8:b1:54:c9:b6:
ac:04:0e:ea:41:a8:51:c6:e2:88:2b:b8:7f:43:c3:
0c:4b:76:93:16:0c:a1:80:5a:64:df:46:87:88:5c:
83:94:92:c6:5f:62:81:af:bd:2a:10:5f:03:02:71:
5e:84:5b:c2:a7:9a:e7:49:68:b1:c5:b6:ef:33:a0:
62:85:c5:7e:de:51:cd:76:dc:7a:a0:c7:48:23:38:
35:56:3c:10:8e:24:2f:ff:b3:6c:75:d4:9f:c4:41:
3a:5f:ea:f0:3d:84:a6:c2:ef:b1:07:0c:c8:09:85:
8f:83:b3:63:4b:6e:d8:d5:e4:b8:5f:1b:d2:c0:1b:
88:d7:4f:cd:30:6a:05:7b:30:1d:3b:da:3b:0a:05:
d6:1a:e0:0a:8a:1e:01:8c:a7:dc:74:c2:71:ca:4b:
b0:98:ac:a9:1e:da:cb:c1:e9:f2:c5:ba:af:6d:20:
dc:59:6f:7e:3d:7a:d2:6d:7d:a1:f0:f1:6d:2d:bf:
8a:d2:56:33:27:3e:8c:cf:b4:c7:21:ef:60:58:7a:
a0:0c:38:e7:b0:02:31:2f:ba:e9:ed:af:06:9b:bd:
f1:f3:9c:4d:f6:ce:ec:d5:fc:4c:f1:a7:76:7e:33:
22:80:c2:4e:d3:09:5f:af:0f:fd:e0:2a:9b:a3:8a:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A7:9A:F0:32:0B:28:14:82:4D:0C:27:F6:38:2E:50:D6:AB:06:52
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/9qea8DILKBSCTQwn9jguUNarBlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.151.0/24
IPv6:
2001:67c:22dc::/48
2a05:9280::/29
Signature Algorithm: sha256WithRSAEncryption
15:71:91:97:42:7c:7a:bb:17:98:ee:d9:8c:a7:29:a3:64:01:
34:7d:f8:96:fe:82:2d:db:64:36:cf:d2:13:c6:90:83:62:7c:
49:77:c2:c3:85:a7:5b:6b:4d:46:eb:db:ef:14:b5:34:84:74:
28:9c:f9:e4:b4:09:93:6b:94:89:b5:81:77:c4:53:78:5f:9a:
19:ef:80:2f:bd:27:71:e7:77:8d:0b:44:76:92:09:65:71:77:
f0:df:6a:a8:5c:a7:c5:77:e7:93:2b:a4:51:21:49:b2:3b:d7:
a5:3d:ad:41:f1:d3:3f:ff:b0:22:19:ad:c0:f6:33:8d:d6:fc:
68:e0:fc:49:4d:e0:00:40:35:17:6e:c3:34:e6:0f:3e:49:9b:
3d:b4:27:7f:89:7e:cc:c6:1f:6e:ca:a8:ef:67:ba:25:5f:2a:
db:d1:14:1b:1a:c0:c4:96:7e:57:21:89:fb:1e:28:5a:b7:e9:
90:03:24:bd:06:55:5c:cd:c3:be:6e:e3:3f:04:f0:4e:df:a3:
01:f6:31:8c:b1:5b:75:bb:23:d9:39:12:97:e6:01:66:27:27:
92:91:50:10:73:14:20:03:f8:dd:a9:53:f1:22:a3:9a:e0:30:
e4:30:77:0e:7c:f2:88:e7:9b:35:f1:d6:3e:48:1d:e5:8c:c5:
95:83:89:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:21 2024 by rpki-client on console-fra.rpki-client.org