Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/RSsaBXQ9u1wmoB4-83Vwc7RzGV4.roa
File: RSsaBXQ9u1wmoB4-83Vwc7RzGV4.roa (raw, json)
Hash identifier: 0+zKRkGOSxExgWgFnYVwkUrkH0yidC7krQfDH2ruYKM=
Subject key identifier: 45:2B:1A:05:74:3D:BB:5C:26:A0:1E:3E:F3:75:70:73:B4:73:19:5E
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 018DF4FD2A19BC53F57A79E4FFEB9B9A5931
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/RSsaBXQ9u1wmoB4-83Vwc7RzGV4.roa
Signing time: Thu 29 Feb 2024 13:10:48 +0000
ROA not before: Thu 29 Feb 2024 13:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43775
IP address blocks: 91.147.128.0/19 maxlen: 19
91.147.128.0/24 maxlen: 24
91.147.129.0/24 maxlen: 24
91.147.132.0/24 maxlen: 24
91.147.152.0/24 maxlen: 24
91.147.153.0/24 maxlen: 24
91.147.154.0/24 maxlen: 24
91.147.156.0/24 maxlen: 24
91.147.157.0/24 maxlen: 24
91.147.158.0/24 maxlen: 24
91.147.159.0/24 maxlen: 24
91.147.160.0/20 maxlen: 20
91.147.160.0/24 maxlen: 24
91.147.161.0/24 maxlen: 24
91.147.162.0/24 maxlen: 24
91.147.163.0/24 maxlen: 24
91.147.164.0/24 maxlen: 24
91.147.170.0/24 maxlen: 24
91.147.171.0/24 maxlen: 24
91.147.173.0/24 maxlen: 24
91.147.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 11:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:fd:2a:19:bc:53:f5:7a:79:e4:ff:eb:9b:9a:59:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Feb 29 13:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=452b1a05743dbb5c26a01e3ef3757073b473195e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:d4:72:8f:0a:b2:ed:da:0c:58:49:5c:56:
d3:eb:7a:be:57:a3:b7:3d:23:e6:8e:8d:f2:30:3e:
ae:4b:97:51:cf:e2:a8:90:ce:d6:85:da:ca:6c:e2:
f6:71:19:da:43:08:48:31:78:66:8b:f7:0b:5d:ac:
68:a2:48:1d:68:a5:f9:50:8d:36:d3:58:d3:1c:89:
df:0d:2a:65:10:9b:1f:8c:f3:65:70:ff:94:4f:bf:
82:ec:0a:df:4b:41:ee:e1:4e:e9:e2:51:ad:75:47:
08:7e:02:a1:93:b5:ca:77:b6:ee:23:e2:f0:08:4f:
6e:81:8a:9d:44:7f:69:c2:f5:87:2a:5b:99:40:4f:
f1:76:78:ad:b8:26:05:ce:f9:8b:48:8b:41:7d:98:
80:58:c4:11:43:56:2e:75:84:8b:c6:13:76:30:48:
7c:25:0b:7d:da:f5:0a:29:a4:3b:4d:22:d9:a0:63:
9b:bd:dc:e2:1b:ac:ff:aa:39:6b:11:5a:af:2c:cd:
f7:21:78:77:5d:d0:7b:1b:6b:e6:54:83:5e:3a:18:
30:5c:a5:20:6e:7d:ea:8f:e8:c4:1c:0a:94:2d:5e:
ac:c5:94:cf:6a:0f:aa:01:14:ff:18:39:fa:2c:d3:
8e:e1:41:5d:94:2e:6a:73:9f:1b:c9:ad:f5:ae:7c:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2B:1A:05:74:3D:BB:5C:26:A0:1E:3E:F3:75:70:73:B4:73:19:5E
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/RSsaBXQ9u1wmoB4-83Vwc7RzGV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.128.0-91.147.175.255
Signature Algorithm: sha256WithRSAEncryption
81:5f:17:e8:d8:04:ec:7e:0b:b4:4b:b5:01:c0:fb:af:9d:df:
b1:a2:89:83:2a:c8:79:e3:16:8f:10:b9:12:9c:4d:3a:60:73:
41:45:a6:55:18:b6:56:59:c9:79:f9:4c:dc:20:48:56:73:6b:
06:94:6c:ac:00:76:ba:4f:d3:ac:54:0d:1c:3a:b0:26:53:d3:
d3:bb:91:0f:2a:b9:bd:43:4d:81:ce:c7:ac:52:b0:ae:c2:4f:
e5:e6:e0:30:b3:b9:d1:ac:5e:0e:49:22:7d:86:99:86:03:01:
41:d4:31:3d:6f:7c:76:61:1b:d2:27:ed:b8:bb:d0:0c:9b:4f:
d9:10:25:10:50:62:ae:8f:09:4f:98:43:1e:7f:c1:c6:69:7c:
1c:cb:d2:77:f5:4b:f0:63:11:f8:83:b0:99:e0:89:4f:53:a2:
e6:9e:86:0b:f1:e2:ea:57:8d:25:98:21:5f:9f:27:1a:e1:9d:
69:2c:70:b5:9d:9c:b7:fa:a1:b0:10:6a:25:a2:57:98:e5:78:
23:69:a6:f9:c6:27:6f:93:55:31:5a:cb:92:49:1d:37:ea:c7:
57:56:c0:74:33:a1:b4:50:79:5a:21:d7:f2:c1:40:43:83:2a:
09:60:44:66:9c:6a:36:07:42:c9:4e:07:35:80:4c:87:1c:f4:
57:e0:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 12:12:19 2024 by rpki-client on console-ams.rpki-client.org