Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/deogLXbfFln_7HbcKAlIckvccKI.roa
File: deogLXbfFln_7HbcKAlIckvccKI.roa (raw, json)
Hash identifier: EHenj1jXPCD5vdw5AbdA5C5uGfadGuOHOTSXUFhMzOc=
Subject key identifier: 75:EA:20:2D:76:DF:16:59:FF:EC:76:DC:28:09:48:72:4B:DC:70:A2
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0189288806CFC589F8D7AC00171044A362F6
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/deogLXbfFln_7HbcKAlIckvccKI.roa
Signing time: Thu 06 Jul 2023 00:09:10 +0000
ROA not before: Thu 06 Jul 2023 00:09:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.235.2.0/24 maxlen: 24
45.140.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 02:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:28:88:06:cf:c5:89:f8:d7:ac:00:17:10:44:a3:62:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jul 6 00:09:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75ea202d76df1659ffec76dc280948724bdc70a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:df:ea:66:70:82:47:f4:3f:1a:be:18:26:
9d:78:1a:6e:54:fa:1a:07:5c:e2:7e:33:51:bb:67:
db:c3:ae:fa:22:b9:42:63:08:39:5e:50:a1:57:b7:
f1:57:10:e4:ef:48:a7:13:f4:6c:cf:d9:12:21:ab:
58:69:80:8d:4a:ac:91:40:2a:6a:6d:3c:e7:24:dc:
df:78:0e:7e:9f:81:89:d1:a6:f5:ca:09:73:ec:50:
89:3f:f3:0f:ac:95:f6:c3:56:ef:81:4a:b7:a7:87:
e2:a3:11:c8:a4:55:c6:9a:9e:92:a2:e9:8e:2d:da:
31:6c:03:65:f1:d7:1d:ad:cb:9d:54:06:c8:b1:85:
34:bf:da:80:ae:79:d8:b7:1e:fc:b5:f6:5d:a6:11:
9d:b5:54:4c:92:39:2c:53:d2:aa:89:92:11:e8:28:
06:d6:81:c8:0c:ff:a2:f4:38:75:b1:7e:50:66:c1:
0f:cd:85:1b:63:6e:70:ec:50:cf:3e:28:5c:a7:70:
ec:3f:4f:da:28:7a:0e:d8:f6:82:cc:37:d2:89:bf:
0f:37:9c:f3:f2:56:ee:7f:c4:f8:6e:df:80:9e:b7:
26:d3:87:6e:da:74:7d:f2:d8:c3:76:f9:28:0b:e7:
33:75:b9:b6:8c:fd:7a:f6:28:a6:03:82:26:7e:8f:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:20:2D:76:DF:16:59:FF:EC:76:DC:28:09:48:72:4B:DC:70:A2
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/deogLXbfFln_7HbcKAlIckvccKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:1f:af:15:13:2e:a4:f5:03:e6:70:ea:90:4f:af:75:ea:c4:
de:21:12:10:5a:28:5e:b6:c1:a0:9e:7c:29:9c:99:cc:cb:c0:
ea:4d:6c:8e:5d:3b:37:e3:59:b4:61:8e:69:41:82:1c:b3:52:
eb:b9:02:d1:97:a2:d0:9c:0a:81:c9:04:b5:54:50:e7:73:b7:
9e:4a:b2:20:19:96:17:4e:d5:33:7f:3b:b5:83:73:d4:75:64:
e0:23:03:25:b7:f9:1d:b3:1c:3e:0b:5d:19:2e:c4:16:a6:8d:
51:4b:68:ab:c9:5d:87:8f:32:09:f3:19:5e:04:f8:6a:9a:fd:
89:80:6d:a8:7a:70:cc:07:69:fb:e2:a3:08:09:32:78:51:4d:
63:f3:f4:4b:33:12:30:26:45:d8:b7:b7:06:9f:e6:86:19:23:
59:bd:3f:e6:c2:96:de:2d:3a:29:7a:3d:af:4c:6c:96:c7:8f:
38:f6:9b:23:76:29:86:64:03:f7:7d:6c:fa:7d:fc:0a:da:52:
40:af:20:af:4d:ca:57:e6:cb:60:ae:68:eb:be:66:59:f0:ab:
d7:ea:d4:0c:f9:8d:8e:d7:33:f2:0a:3d:fb:19:be:14:37:53:
3c:14:1c:dd:22:d6:bd:a4:db:5f:24:23:63:7f:d1:fc:7b:eb:
f3:cd:a3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org