Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/Xh31ZdY0v5OpbVQjqq7pKG46tv0.roa
File: Xh31ZdY0v5OpbVQjqq7pKG46tv0.roa (raw, json)
Hash identifier: 1OQXZcMw9e3lUjcIGT98JHJJrQ0aD8j6Zko7nJzpOA4=
Subject key identifier: 5E:1D:F5:65:D6:34:BF:93:A9:6D:54:23:AA:AE:E9:28:6E:3A:B6:FD
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 01856EA6CC3D8A67D5E226AB2DF7C074CEAE
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/Xh31ZdY0v5OpbVQjqq7pKG46tv0.roa
Signing time: Sun 01 Jan 2023 18:45:03 +0000
ROA not before: Sun 01 Jan 2023 18:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51193
IP address blocks: 91.216.198.0/25 maxlen: 25
91.216.198.0/24 maxlen: 24
91.216.198.128/25 maxlen: 25
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:cc:3d:8a:67:d5:e2:26:ab:2d:f7:c0:74:ce:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Jan 1 18:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e1df565d634bf93a96d5423aaaee9286e3ab6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:79:f1:4d:93:e3:13:ce:a6:07:dc:30:bb:aa:
2f:fe:77:f9:8a:37:da:03:b8:a8:27:f0:ef:4f:40:
4d:e9:98:33:49:67:f3:cd:8e:56:f8:6a:82:ab:4e:
e0:c0:fe:ea:ba:b3:e3:22:74:51:a2:79:c3:d4:11:
af:7e:f7:73:49:b1:54:1e:b1:1a:84:38:69:54:68:
f6:8d:f7:08:eb:d4:6c:6e:79:6b:bd:1c:92:17:b9:
88:fe:eb:49:b2:58:f3:1d:27:bc:0b:f2:f5:ba:43:
65:5b:74:f7:de:e8:49:29:43:29:79:be:ac:8c:37:
9c:fb:d0:76:a5:8f:f3:c7:3d:51:a4:67:79:4d:d7:
45:d6:d8:af:49:e2:d3:9d:90:1b:bb:f1:60:4d:aa:
85:b2:36:55:26:8e:9c:bb:ca:5a:d5:b2:91:11:45:
cf:05:bb:43:89:b0:e4:9b:59:6d:c6:e1:5c:03:97:
32:df:94:f2:bf:8a:be:e6:95:6c:16:f1:17:23:74:
49:31:53:11:fe:a3:f3:2c:ab:70:b7:ad:6e:59:1d:
1d:fa:c5:73:d6:7d:d4:18:99:2d:a1:f7:a9:4e:b6:
a6:0c:42:66:9b:28:e1:73:6a:1e:ce:27:10:dc:de:
e5:85:55:c5:89:dd:c3:40:ed:fa:79:62:4d:90:1d:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:F5:65:D6:34:BF:93:A9:6D:54:23:AA:AE:E9:28:6E:3A:B6:FD
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/Xh31ZdY0v5OpbVQjqq7pKG46tv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.198.0/24
Signature Algorithm: sha256WithRSAEncryption
97:20:60:e4:88:3c:d3:9c:8e:45:fc:76:7b:01:03:46:cd:db:
26:e9:29:ea:39:6d:66:39:71:6e:99:73:c9:78:8a:c5:c9:7b:
19:2e:dd:28:b2:8f:b8:bc:5e:59:48:f0:96:8c:83:a0:c5:75:
3c:23:2a:c9:cf:4d:94:c2:2a:51:2d:4f:25:37:5f:cc:a4:66:
66:45:c7:3f:9c:e9:9d:14:ec:c7:80:12:1a:95:43:8b:38:e0:
aa:9c:73:b7:0d:f3:68:5a:a7:3e:8b:37:8b:5d:f5:67:32:2e:
c4:22:81:6b:8f:da:a9:4b:27:10:aa:08:0d:3a:63:3b:aa:5b:
81:fc:1e:ea:59:27:aa:91:22:32:01:5c:13:73:58:97:8c:33:
f5:21:b2:18:58:58:a1:03:15:1c:3b:1d:1c:c1:ec:7e:ca:5d:
78:39:60:30:6d:21:cf:b6:86:22:77:ec:32:e2:f6:f4:54:70:
0f:ba:eb:30:15:19:6c:85:b7:fc:03:0b:fd:4c:4c:11:03:f9:
87:d0:9c:32:7e:82:39:34:71:5f:7f:0f:c5:07:3d:51:52:0c:
1c:cf:2c:47:b9:55:9c:30:5b:95:e8:2e:46:a6:88:4a:2a:1c:
bd:d0:16:49:f2:3f:28:29:54:57:9f:b2:7b:be:c7:9f:2a:49:
84:ab:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:59 2024 by rpki-client on console-fra.rpki-client.org