Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/o_1c5WPzKT1PpBG0AduqFeZ9qJ8.roa
File: o_1c5WPzKT1PpBG0AduqFeZ9qJ8.roa (raw, json)
Hash identifier: yOiWhDu+0rICZ0GRMLAwy+tVzADIlD6HFF5HiXFDbH0=
Subject key identifier: A3:FD:5C:E5:63:F3:29:3D:4F:A4:11:B4:01:DB:AA:15:E6:7D:A8:9F
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 0189D8DF94DED547B954F8663A11676592ED
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/o_1c5WPzKT1PpBG0AduqFeZ9qJ8.roa
Signing time: Wed 09 Aug 2023 05:57:58 +0000
ROA not before: Wed 09 Aug 2023 05:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 185.91.127.0/24 maxlen: 24
2a12:de40::/29 maxlen: 29
2a12:de41::/32 maxlen: 32
2a12:de44::/32 maxlen: 32
2a12:de40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Aug 2023 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:df:94:de:d5:47:b9:54:f8:66:3a:11:67:65:92:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Aug 9 05:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3fd5ce563f3293d4fa411b401dbaa15e67da89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:7d:96:86:2d:da:87:32:65:f1:48:5f:ee:
e7:e6:47:84:8e:84:93:62:4d:09:ff:bb:0c:2d:f7:
ec:b8:a6:a6:ad:ac:f9:dd:d8:a4:af:46:ce:15:4c:
8d:12:66:84:35:2d:50:6c:b3:4a:24:5d:68:bf:83:
8a:cc:b0:3b:08:a2:db:b0:d2:fb:c7:52:20:56:87:
28:c9:6a:37:27:c2:d9:59:0d:e4:9a:c5:f0:05:f2:
65:55:4c:1a:75:29:48:18:45:c0:2b:7e:b7:06:bf:
36:8a:be:9b:a1:51:d9:4e:9b:39:61:ef:d6:b3:84:
ca:d5:7b:e9:e3:5d:99:ed:d3:d9:99:7e:f1:d0:76:
fc:b8:0b:cc:62:bd:f0:86:b6:17:83:12:92:76:22:
a2:a8:1a:c3:1c:5b:58:c7:07:b1:3c:87:15:93:e3:
3a:17:25:16:04:2e:c3:74:f9:51:27:48:45:1c:82:
d8:fa:6b:aa:a0:2b:08:e7:fc:b2:14:5f:3a:73:ab:
84:63:8e:91:f6:b3:38:0c:1a:ee:e5:c2:25:34:fb:
dd:31:1e:dd:e2:e8:de:6c:02:28:6d:85:bc:f3:75:
64:91:b0:0d:99:0d:54:52:b2:15:48:5b:7f:13:57:
32:d0:a5:a9:20:54:ae:94:d0:dc:ae:98:29:0e:93:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:5C:E5:63:F3:29:3D:4F:A4:11:B4:01:DB:AA:15:E6:7D:A8:9F
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/o_1c5WPzKT1PpBG0AduqFeZ9qJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.127.0/24
IPv6:
2a12:de40::/29
Signature Algorithm: sha256WithRSAEncryption
0c:0c:e7:77:cd:f8:73:46:77:14:f3:63:be:57:c5:1c:86:c7:
d0:85:0b:b3:ba:6e:eb:c7:a1:d3:1e:5b:5c:19:7d:58:06:82:
0c:e9:26:11:58:0f:cb:92:83:af:e3:5e:0d:86:a0:05:9b:4a:
a2:b4:d1:93:38:8d:c3:d5:00:f0:48:c1:9a:43:d8:9f:3c:5e:
9d:d3:9b:0b:ae:7e:3d:96:76:41:7c:9d:30:65:49:91:bf:53:
76:5f:a6:3f:77:53:e1:d0:f3:9a:75:af:38:c3:36:c8:be:1d:
c0:e5:6f:78:2e:70:08:e6:d2:9f:74:b8:01:79:bd:29:db:ce:
96:a1:9e:8c:f7:cf:2f:c9:9e:ca:21:53:14:13:b6:b1:b5:1e:
9c:55:14:5c:5d:60:8a:db:ad:12:f7:db:dd:63:36:23:54:cb:
b6:46:75:24:8b:89:12:2c:4c:f3:58:43:8a:97:22:32:4c:6f:
61:a4:9b:e6:2a:cc:55:de:70:2f:15:79:18:a9:fd:d7:16:30:
99:91:1f:a6:f3:10:e7:06:08:8b:fa:76:b3:72:21:55:35:c9:
8a:12:42:d5:38:33:c5:13:cd:b6:92:99:d0:78:90:03:77:41:
87:23:c2:8c:86:81:b2:96:a8:b9:0e:00:96:9c:d7:6d:4b:94:
d4:18:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org