Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/RDRedF80eOUSDI597YEGzbqjRn4.roa
File: RDRedF80eOUSDI597YEGzbqjRn4.roa (raw, json)
Hash identifier: DlFumbG0ZookOITyNrCvnZjdLuQ198U2VVFS+aX4oZg=
Subject key identifier: 44:34:5E:74:5F:34:78:E5:12:0C:8E:7D:ED:81:06:CD:BA:A3:46:7E
Certificate issuer: /CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Certificate serial: 01856D94103F90665656452E48FC2DFEC044
Authority key identifier: 57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/RDRedF80eOUSDI597YEGzbqjRn4.roa
Signing time: Sun 01 Jan 2023 13:44:57 +0000
ROA not before: Sun 01 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49883
IP address blocks: 91.213.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:10:3f:90:66:56:56:45:2e:48:fc:2d:fe:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c5a76f28b71ea8dbf999abaab7a659839ac182
Validity
Not Before: Jan 1 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44345e745f3478e5120c8e7ded8106cdbaa3467e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:4b:d3:c1:3d:77:3b:c4:79:28:24:a2:89:
e7:5a:36:81:01:af:93:14:1d:7d:8d:e0:1f:3e:b5:
00:50:86:df:eb:a3:5d:80:6f:39:34:50:dc:bf:10:
c3:b8:70:3b:6f:f7:23:9e:7e:92:75:f5:3a:cb:57:
2c:4a:b7:7e:e6:ef:a5:4a:0f:69:8b:66:cd:a6:13:
d0:2b:95:fd:56:ef:97:5e:46:55:4a:52:da:87:e8:
25:28:73:7c:fa:67:c8:e4:df:55:18:e5:d0:84:5f:
11:a2:67:a3:95:4d:57:a5:ef:2b:d0:7a:c0:14:fc:
e3:98:84:7a:be:0d:ea:a8:f3:55:f2:cd:c0:e4:7c:
a4:20:d2:b7:6a:eb:8b:8d:f0:d2:ca:dc:b6:a4:a4:
69:cd:8f:a6:58:0d:4c:8c:58:a2:83:bf:45:c2:bc:
34:b9:29:55:20:d1:1a:7d:0e:52:07:fa:9c:1e:9c:
f2:21:6d:50:20:08:56:87:3c:ed:f2:ff:e4:41:09:
c6:d5:2d:10:a1:9e:47:b3:78:a4:f3:5e:5d:93:81:
e6:a8:8f:70:d5:38:c1:67:8c:ab:ba:3f:0a:d6:f6:
1d:3c:5d:17:f3:9e:da:c6:9c:65:30:f4:41:5a:4a:
36:68:c4:a5:f1:e0:0c:38:0f:4c:4c:02:7e:ac:fa:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:34:5E:74:5F:34:78:E5:12:0C:8E:7D:ED:81:06:CD:BA:A3:46:7E
X509v3 Authority Key Identifier:
keyid:57:C5:A7:6F:28:B7:1E:A8:DB:F9:99:AB:AA:B7:A6:59:83:9A:C1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8Wnbyi3Hqjb-ZmrqremWYOawYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/RDRedF80eOUSDI597YEGzbqjRn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c32b9d-8c7c-4441-bdb1-6a68251f1387/1/V8Wnbyi3Hqjb-ZmrqremWYOawYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.187.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6f:b4:f4:06:08:0e:0a:dd:22:24:c1:2a:f6:47:bd:3b:13:
af:62:24:39:0c:c4:2a:21:a1:e7:66:8d:d5:24:a9:d4:6e:6b:
d1:9a:0b:57:1c:cb:26:0a:93:5a:26:80:4c:9b:3f:24:dd:a1:
58:ee:f4:6a:9c:f8:c8:11:25:09:14:1b:8a:05:42:38:ff:d7:
f5:70:b3:db:b1:af:3d:da:13:ac:0c:30:af:d0:db:df:2d:ee:
e7:3f:e7:42:d4:3d:ed:e9:a7:06:52:d9:c0:71:26:44:20:75:
6d:61:fa:20:50:c9:92:a8:5c:85:b0:ab:4e:fe:e2:27:b6:47:
52:34:13:66:fe:33:19:b7:34:fb:dc:0f:60:1b:12:fd:e6:5b:
43:f8:52:2f:2d:dc:91:3b:a8:e4:8a:74:d2:03:16:a8:41:c3:
73:70:f5:86:55:27:86:68:90:d6:41:07:f3:9b:1c:c8:70:89:
00:17:1d:a7:9e:36:98:20:38:b8:ec:e4:6e:33:4a:55:ea:5d:
ca:6b:1b:5e:94:04:46:49:69:0c:b3:e7:3c:d2:9e:22:61:46:
f1:ee:0b:5e:19:f8:d9:20:3e:0f:d4:82:07:ca:78:b5:5c:c9:
c7:d3:dc:ad:35:34:ad:e9:7d:80:f4:04:4d:62:04:fa:bc:24:
89:1b:73:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:39 2024 by rpki-client on console-fra.rpki-client.org