Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/7hdePAA1Vyp9l3V9ovMRrWkBNsQ.roa
File: 7hdePAA1Vyp9l3V9ovMRrWkBNsQ.roa (raw, json)
Hash identifier: AocCJ5UZxgujVEcjA7l1+OFWzYJtK2HAnSothVeIjS4=
Subject key identifier: EE:17:5E:3C:00:35:57:2A:7D:97:75:7D:A2:F3:11:AD:69:01:36:C4
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0188C4C143590CD623AEAF2C052860CB3CA0
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/7hdePAA1Vyp9l3V9ovMRrWkBNsQ.roa
Signing time: Fri 16 Jun 2023 15:09:39 +0000
ROA not before: Fri 16 Jun 2023 15:09:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59676
IP address blocks: 91.212.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:c1:43:59:0c:d6:23:ae:af:2c:05:28:60:cb:3c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Jun 16 15:09:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee175e3c0035572a7d97757da2f311ad690136c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:4f:f4:d6:0a:06:85:4a:93:97:3a:fa:5d:
b2:cd:59:f8:cd:4a:cd:e5:3e:7f:11:c1:03:17:28:
c5:38:e8:50:ca:89:ef:d4:53:af:6d:e3:fe:72:3a:
98:fe:f4:53:bf:50:5a:41:33:29:03:31:48:2b:91:
d6:a8:71:35:9d:1e:4c:e4:bc:81:58:46:73:0e:fd:
16:03:dd:c9:d4:9d:39:ab:a0:95:27:79:73:45:4c:
3d:64:b5:3b:50:a8:28:03:d3:09:09:03:b7:dc:b9:
99:4e:34:fc:03:7f:a7:9e:81:5e:f8:c8:76:21:f9:
6f:a7:e5:4c:cc:da:2e:7f:10:80:63:cb:88:0c:18:
2e:b7:1d:a2:6e:8d:d7:c9:c5:36:0c:bf:9f:f7:68:
7f:85:bf:93:8a:6f:34:58:7d:0e:82:47:74:f5:77:
ea:4a:f1:55:45:64:5f:f0:24:1a:4d:a9:9c:48:79:
24:fd:58:48:03:0d:4c:86:26:3d:44:a7:85:6b:fc:
56:b1:a5:09:cb:d6:69:08:77:34:f6:d5:61:f2:01:
e7:c1:65:24:ec:7b:33:2d:68:6e:88:8d:5e:2b:8d:
87:6c:64:0e:a8:7f:54:7d:16:1e:ca:85:52:30:00:
cf:b9:d2:99:98:2a:ee:6f:9a:86:73:09:74:04:f3:
20:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:17:5E:3C:00:35:57:2A:7D:97:75:7D:A2:F3:11:AD:69:01:36:C4
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/7hdePAA1Vyp9l3V9ovMRrWkBNsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.90.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8a:dd:17:3a:2c:e6:e3:87:60:0d:74:de:4c:8d:2f:a8:1d:
ad:88:13:6e:c8:f2:e1:82:90:f5:8a:b1:4e:06:13:c2:ef:e8:
57:ac:1a:6a:6d:24:6b:ec:23:43:5f:e9:a5:a6:e9:b4:66:1f:
1c:ac:8c:00:68:01:b6:73:c1:8e:19:e0:e6:c1:cc:61:5f:54:
22:51:96:26:08:c2:ee:01:8a:34:42:d3:59:8a:23:ee:e4:7e:
04:62:54:4e:2a:93:26:39:8b:f9:5c:4c:a5:66:48:5e:9d:9c:
c5:1e:1b:0a:19:a8:f8:7b:a7:80:66:d1:70:91:fc:29:a2:26:
16:89:4e:23:0b:9b:14:c7:f5:1e:83:67:f2:2b:59:40:01:7d:
84:6a:fa:08:1d:ed:a1:cd:a2:19:1e:dd:da:5b:86:fe:b0:19:
7c:33:3d:aa:b8:0b:a1:e3:58:6e:5b:34:bf:d2:9f:d0:19:c0:
a7:10:18:3e:97:3a:ac:08:7d:6c:b0:9e:13:64:92:ad:d4:f3:
ef:04:d8:f9:c5:92:5a:4c:bf:2b:0c:44:ee:0b:58:91:36:67:
92:b8:4f:26:8c:a2:cf:9c:91:98:02:b0:72:6b:a6:90:d3:62:
2a:26:2d:15:1c:d7:38:e8:8a:6e:73:bb:11:a4:7c:cb:41:6f:
78:97:50:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:29 2024 by rpki-client on console-ams.rpki-client.org