Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/RpGl0nMu2QvZjS-EPrzoTRCQEuE.roa
File: RpGl0nMu2QvZjS-EPrzoTRCQEuE.roa (raw, json)
Hash identifier: BIUj2AOcyZjxbVTT3tiYC2sRj9OS/ha6xSgU4AJD6+g=
Subject key identifier: 46:91:A5:D2:73:2E:D9:0B:D9:8D:2F:84:3E:BC:E8:4D:10:90:12:E1
Certificate issuer: /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial: 018572559374EBAD9847DE7B223EB09F51EA
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/RpGl0nMu2QvZjS-EPrzoTRCQEuE.roa
Signing time: Mon 02 Jan 2023 11:54:48 +0000
ROA not before: Mon 02 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 91.244.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:93:74:eb:ad:98:47:de:7b:22:3e:b0:9f:51:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Validity
Not Before: Jan 2 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4691a5d2732ed90bd98d2f843ebce84d109012e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:51:a1:0c:ba:7b:79:14:c4:f6:3e:7a:82:bf:
10:bd:00:48:4e:0f:39:bd:a6:c5:8b:62:d7:cb:dd:
06:2c:fe:66:17:42:43:34:d1:21:39:83:ea:91:56:
76:04:68:7b:95:0b:31:3f:06:da:de:ff:d6:d4:4c:
82:0d:41:e7:33:ad:93:a7:f0:6e:19:9d:c4:10:67:
fb:0d:c8:1c:7d:b3:e7:f8:55:7e:32:02:f2:14:4d:
22:94:18:f1:4c:d9:a5:df:2a:d2:cc:30:00:15:7d:
1d:44:88:41:6f:36:a3:b5:37:32:16:0b:f6:08:fb:
75:a6:f9:23:f4:cf:7f:16:9d:ad:70:73:ac:cc:f4:
ec:1e:bb:4b:f4:77:4c:e2:db:6d:b9:d3:04:37:75:
5c:36:53:33:7e:e3:80:fd:81:e4:3f:f5:9f:30:b8:
23:38:5f:dc:ef:f6:0d:3e:25:00:45:b2:2e:0d:9a:
88:4b:90:aa:4a:0b:e0:a7:2f:72:eb:fa:4a:5a:33:
fa:a4:a3:7a:94:bd:f0:f3:7d:7d:ab:ef:be:d5:ef:
f1:40:cb:81:8c:09:fc:77:94:72:fc:04:5c:be:42:
3f:53:e2:91:41:30:7a:91:71:f6:a8:39:cb:73:8e:
49:44:13:73:01:78:38:c1:0c:ab:d6:ae:6a:67:7f:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:A5:D2:73:2E:D9:0B:D9:8D:2F:84:3E:BC:E8:4D:10:90:12:E1
X509v3 Authority Key Identifier:
keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/RpGl0nMu2QvZjS-EPrzoTRCQEuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.125.0/24
Signature Algorithm: sha256WithRSAEncryption
24:13:b0:39:ac:b0:53:bc:49:c7:4f:45:eb:80:09:6c:30:4a:
6e:a4:37:0f:2a:41:74:2f:c5:11:78:50:19:16:95:2f:e0:16:
bb:88:50:3b:ac:44:b5:c6:f7:19:d5:b4:fc:df:9b:e6:cd:8f:
c5:8d:98:23:b2:dd:f2:3d:f9:2b:ff:ca:ba:b3:60:9d:26:2c:
e9:72:69:a7:cd:97:9d:69:e8:2f:0e:fc:bb:6f:1b:77:83:09:
4a:c3:be:01:61:84:b7:da:40:32:08:9d:da:25:38:15:7c:8c:
89:e9:e6:7b:33:48:b9:78:d8:46:63:5b:f8:d1:be:c3:46:87:
6b:3e:90:e4:da:c5:1d:17:3c:24:37:d4:6d:9f:4a:c9:7f:39:
3b:a9:7d:41:a5:e8:f9:e0:81:ad:3a:e7:65:15:ab:9c:41:23:
09:81:d1:03:e2:b0:75:4a:0c:21:3c:d9:13:e5:a0:8d:d9:e7:
3c:08:f5:7b:73:f1:b1:5c:7c:f1:98:d3:eb:91:a7:59:44:bf:
12:d1:c1:4a:37:a0:30:2f:8c:0f:df:96:02:9a:bf:5a:b9:e2:
cb:7c:4a:f4:fa:05:a1:03:f7:72:8b:60:28:31:76:7a:58:f2:
82:cd:b0:7a:57:c7:11:72:ed:aa:87:e3:54:4e:6e:05:80:6d:
03:50:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:30 2024 by rpki-client on console-fra.rpki-client.org