Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/rrgGkKiviJQMbkgl_RlEqYxsIeU.roa
File: rrgGkKiviJQMbkgl_RlEqYxsIeU.roa (raw, json)
Hash identifier: V9aD58fT1zC0MPsnbYI86UU8au5v85Zeukf0IJjyclI=
Subject key identifier: AE:B8:06:90:A8:AF:88:94:0C:6E:48:25:FD:19:44:A9:8C:6C:21:E5
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA27010223444F476468CDCF2917353A
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/rrgGkKiviJQMbkgl_RlEqYxsIeU.roa
Signing time: Fri 10 Nov 2023 16:53:20 +0000
ROA not before: Fri 10 Nov 2023 16:53:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 91.234.192.0/24 maxlen: 24
45.9.152.0/22 maxlen: 24
178.239.28.0/23 maxlen: 24
45.87.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:27:01:02:23:44:4f:47:64:68:cd:cf:29:17:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeb80690a8af88940c6e4825fd1944a98c6c21e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:71:6c:dd:fb:ae:b3:e1:82:49:40:97:72:
e9:71:b2:64:11:3d:ec:32:7e:21:7f:e2:5a:53:5b:
46:8c:c8:39:5e:49:42:11:3f:47:4e:a7:be:7e:5a:
a2:c1:b4:65:f6:2a:11:a7:e0:55:ed:08:b9:9c:64:
e9:8f:c6:a3:76:21:41:80:e2:f1:4b:09:3b:05:71:
94:8b:23:88:0f:21:d8:97:75:36:81:74:df:cd:d8:
bc:e4:ef:0f:3a:78:0c:49:5f:9e:02:8e:09:55:89:
c3:be:c5:41:f2:48:40:7b:2c:76:c2:2b:7e:3c:68:
42:26:3d:10:33:c6:f5:d5:13:de:d1:a6:a9:ad:b4:
c2:af:69:33:ed:1e:99:8c:c0:41:7d:bd:9b:24:63:
57:a4:c7:89:05:47:c2:7c:a5:21:cd:17:db:c9:bc:
d1:b9:52:df:4b:fd:50:73:ad:1a:e2:c4:ec:30:02:
0d:0e:ed:80:61:ea:64:d4:e1:28:61:50:80:42:b7:
9b:26:d8:fc:5b:10:25:a5:09:94:d3:37:6f:02:94:
0e:21:9a:b5:62:bd:39:53:44:4b:41:a3:2b:6a:e2:
e4:74:e8:28:18:7c:88:10:03:72:03:30:d2:cd:a7:
08:a8:3e:d4:30:29:20:2c:21:dd:ec:a0:22:e1:b3:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B8:06:90:A8:AF:88:94:0C:6E:48:25:FD:19:44:A9:8C:6C:21:E5
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/rrgGkKiviJQMbkgl_RlEqYxsIeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.152.0/22
45.87.44.0/22
91.234.192.0/24
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:98:d6:3b:fc:a8:37:e6:fb:4c:18:20:e5:ad:cb:00:2e:2b:
b3:b5:95:1a:39:74:11:69:7d:cb:a4:1c:63:8b:68:aa:4e:28:
24:f8:c1:79:4d:8e:e9:2d:a2:1d:fb:7b:e2:4f:39:c8:7f:0c:
66:57:73:97:54:e6:e1:2c:c6:21:ce:fc:f1:22:a8:46:17:1c:
ec:31:1f:c2:a1:8f:84:ff:23:d8:5d:e7:32:f7:60:eb:99:9c:
be:1e:a3:e0:70:e6:25:53:42:80:15:1a:1f:c4:e3:68:bb:52:
c9:dc:2f:d0:37:ed:a2:44:9b:72:a0:d4:c1:ba:c8:e0:e9:55:
57:7a:4f:03:d1:2f:41:ca:14:a6:ee:dd:a8:f6:82:0e:94:5e:
3a:10:70:8f:18:1f:04:b1:27:6c:94:7f:e1:39:39:97:f4:f2:
6d:1b:6e:85:8d:5e:e3:40:61:52:73:e0:d5:19:10:72:73:87:
0a:ad:de:1c:df:f9:22:e8:63:e8:be:a3:f6:8a:e6:9a:73:3d:
8f:b4:d9:d9:72:c9:53:e3:3f:d9:29:6d:94:8a:43:66:15:05:
61:fc:bb:1a:38:56:79:a8:86:b6:9b:63:73:88:a6:49:39:b7:
a7:ca:3f:e1:3b:6a:a0:09:15:c1:51:bd:98:70:13:dc:76:01:
2f:15:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org