Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/__0oAabbe0AWE_FwCNqrmZZqark.roa
File: __0oAabbe0AWE_FwCNqrmZZqark.roa (raw, json)
Hash identifier: qq0zFYhnXzGJQoxv3gr82xslo4vmEbi0cDqyqVvRJGQ=
Subject key identifier: FF:FD:28:01:A6:DB:7B:40:16:13:F1:70:08:DA:AB:99:96:6A:6A:B9
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 01910230494B5F4429760721AFF1D7829923
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/__0oAabbe0AWE_FwCNqrmZZqark.roa
Signing time: Tue 30 Jul 2024 05:50:04 +0000
ROA not before: Tue 30 Jul 2024 05:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210756
IP address blocks: 91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 23
185.109.28.0/24 maxlen: 24
185.109.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 12:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:30:49:4b:5f:44:29:76:07:21:af:f1:d7:82:99:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jul 30 05:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fffd2801a6db7b401613f17008daab99966a6ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:57:b4:bb:20:b3:02:3c:fe:6b:d6:30:3f:62:
f8:b9:be:0f:59:ab:f9:b2:86:f3:e9:2d:cd:5c:e1:
8e:e0:a0:27:ae:9e:b9:6f:e3:74:2f:78:90:01:6e:
3f:36:f1:f7:34:08:d2:19:3e:b8:d2:c6:f1:03:d0:
32:15:b1:75:8f:b1:ce:ba:ee:e5:ed:c0:b6:3f:01:
2c:77:63:48:bd:f4:94:77:dd:51:c4:a4:63:78:05:
92:b6:91:95:0c:92:a3:e0:d0:88:97:00:48:7b:a6:
aa:90:ce:0d:25:e3:e9:43:84:b7:a9:bc:ad:32:10:
9c:72:e8:c0:a6:24:9d:e3:54:9e:46:90:af:d3:c2:
12:65:3b:b4:9b:78:82:a8:1b:18:18:a4:b0:9f:59:
c8:7c:69:69:6e:e2:6c:5e:f3:c7:ed:da:d1:f5:64:
61:2c:9e:7c:a9:d8:7e:3b:6d:71:25:0a:da:f4:55:
25:7e:b6:5a:f4:61:78:07:fc:bc:38:e6:7c:c0:78:
7b:08:38:ea:10:cd:b1:bb:cc:8d:32:f3:b2:16:42:
3a:53:df:d2:0b:08:9d:8c:bf:84:52:50:e9:00:2a:
2a:ad:40:cc:d5:b3:bf:1a:3a:05:a9:7e:15:50:9a:
8e:ed:20:d9:2c:5b:3b:83:b4:aa:f0:f9:f0:6b:a9:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:28:01:A6:DB:7B:40:16:13:F1:70:08:DA:AB:99:96:6A:6A:B9
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/__0oAabbe0AWE_FwCNqrmZZqark.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.245.0-91.202.247.255
185.109.28.0/23
Signature Algorithm: sha256WithRSAEncryption
da:5f:80:55:d2:50:75:7a:a5:ec:fa:41:ee:41:8f:77:fa:60:
2c:fb:d2:33:63:cc:37:5e:46:f3:2c:c6:0b:ca:27:dc:82:5a:
f1:fb:10:80:74:8b:1d:87:a6:44:9e:be:17:6c:75:39:3d:48:
f7:af:79:6b:b4:73:38:01:4e:03:ea:0c:4e:f5:3c:77:ba:de:
2b:33:f9:d2:af:f3:81:01:9d:d2:d9:38:6a:5b:d0:30:64:42:
5d:37:08:50:c0:40:2b:51:cd:57:f5:eb:5a:76:1a:6f:40:4d:
f4:c9:bf:46:b1:b5:d4:18:8d:6f:0f:8f:ab:40:9b:00:ce:6e:
e1:8d:79:35:8c:41:cc:18:d2:29:ab:8e:37:1a:b4:9c:51:71:
55:97:b3:f1:eb:be:06:cb:a3:44:89:28:83:d0:04:79:01:fb:
1b:04:5c:23:48:29:a1:af:dd:58:40:24:d2:78:2f:04:14:e6:
74:a2:c7:45:b8:6e:8e:47:9a:aa:c5:78:60:70:94:72:cd:f0:
9d:62:95:2e:ea:ff:71:05:52:8d:cf:90:ca:e5:54:07:6e:5e:
ac:f1:b5:c0:cb:6a:a9:9e:04:69:bf:fa:9a:36:a8:95:ff:24:
b0:97:ae:34:e1:4a:08:9d:07:92:de:58:3f:2b:43:a4:be:a6:
be:e6:a6:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:19 2024 by rpki-client on console-fra.rpki-client.org