Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/W4h1olLf4M_6zb-ALpgwbHep3bs.roa
File: W4h1olLf4M_6zb-ALpgwbHep3bs.roa (raw, json)
Hash identifier: u499iTCYxLFjA1TE3twBaX1++ScPlHZsPmnVyQkfGCg=
Subject key identifier: 5B:88:75:A2:52:DF:E0:CF:FA:CD:BF:80:2E:98:30:6C:77:A9:DD:BB
Certificate issuer: /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial: 018B25EF83C509D95B0D47C53266046173A7
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/W4h1olLf4M_6zb-ALpgwbHep3bs.roa
Signing time: Thu 12 Oct 2023 22:08:55 +0000
ROA not before: Thu 12 Oct 2023 22:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56430
IP address blocks: 91.193.53.0/24 maxlen: 24
2a12:ec40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:ef:83:c5:09:d9:5b:0d:47:c5:32:66:04:61:73:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Validity
Not Before: Oct 12 22:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b8875a252dfe0cffacdbf802e98306c77a9ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a2:3e:6e:68:bd:c7:db:c4:c4:98:12:9f:af:
26:05:13:54:12:71:8f:34:11:fc:a6:23:52:8e:cf:
fb:00:12:5d:13:c3:51:39:9b:35:af:78:4f:d7:ab:
1b:64:f8:3e:e3:c8:61:27:38:e3:af:8a:11:91:7e:
ca:2a:06:35:d8:e4:67:7a:7b:b6:3d:68:f8:80:1e:
eb:18:6c:87:55:97:99:85:eb:20:db:4e:3c:cb:98:
dd:47:e7:a3:70:cd:b6:4d:90:26:96:a7:89:2d:98:
3b:de:4a:11:e0:0e:8c:5d:62:1b:2d:41:28:65:4d:
25:96:9a:80:48:5d:89:25:bd:52:9c:56:71:e1:e8:
95:49:e2:b8:2c:9f:3b:b8:44:41:da:27:9b:ca:6f:
a7:32:d6:42:68:7b:a1:c7:2d:68:7b:af:1f:4e:8d:
03:dc:d8:ed:ef:31:2b:0b:0e:79:22:2f:65:c2:4a:
07:9f:b2:1f:d7:8f:c9:6f:e1:75:de:48:ee:b3:4e:
20:80:f1:88:fc:8b:ef:d5:8c:c7:c3:f5:68:f6:a8:
28:c7:c5:14:25:c8:88:48:42:4a:71:9e:d0:da:5c:
d1:fa:77:77:33:7d:56:3c:f8:5c:82:07:a2:9d:db:
38:04:c7:7b:7a:00:c9:31:f4:32:bd:69:62:c7:84:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:75:A2:52:DF:E0:CF:FA:CD:BF:80:2E:98:30:6C:77:A9:DD:BB
X509v3 Authority Key Identifier:
keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/W4h1olLf4M_6zb-ALpgwbHep3bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.53.0/24
IPv6:
2a12:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
9f:cc:d5:96:19:95:ee:f8:37:7d:95:67:7f:ae:f9:97:0a:20:
52:67:f6:c6:e4:7f:15:60:86:4f:27:69:c9:88:7d:78:0c:b5:
69:41:3c:f3:99:26:a3:77:a9:09:0b:81:ae:e4:37:ed:fa:6c:
b6:e9:b8:e7:fb:0d:5b:cd:9c:db:05:ef:ad:f0:3b:8f:39:eb:
8a:68:7e:3e:78:46:cb:9a:f2:84:d4:7c:91:31:2c:72:cb:69:
f4:75:12:e9:dc:45:46:ee:ca:56:5f:e2:b5:34:b5:ab:af:86:
75:f1:bc:f9:ce:71:5d:01:de:3f:f9:57:1a:52:69:90:2d:c8:
90:ba:a4:ab:a9:9c:85:e3:d6:f4:32:c2:dd:b8:63:b6:51:f4:
d0:cc:51:0d:1c:0a:3a:a0:d3:b5:a7:d7:b2:ee:ad:24:f1:8e:
2d:7b:39:14:be:af:8d:76:c8:5c:ff:1c:a0:d8:b6:84:8a:5c:
f5:0d:10:63:a6:4a:82:1f:43:bc:38:51:e5:24:bb:c7:ba:62:
9a:ae:08:65:d1:51:48:6a:7b:ca:85:77:c5:da:44:29:61:f5:
a8:19:b4:b3:4c:a5:3c:4a:ca:5f:c6:d9:69:79:e0:4d:6e:c9:
4d:98:66:13:1b:bf:04:6a:df:13:3e:61:01:bd:a6:ab:5a:95:
73:98:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org