Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/5u_9hxXTqgtwAT0sBN88S9MIIAw.roa
File: 5u_9hxXTqgtwAT0sBN88S9MIIAw.roa (raw, json)
Hash identifier: HTlEbNi9Gcn34g5RPAw0GD1PiRf2ETBz1tam8hm98zw=
Subject key identifier: E6:EF:FD:87:15:D3:AA:0B:70:01:3D:2C:04:DF:3C:4B:D3:08:20:0C
Certificate issuer: /CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Certificate serial: 0188D97617DE13B99AC0D7EC95E9F023B2A6
Authority key identifier: 40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/5u_9hxXTqgtwAT0sBN88S9MIIAw.roa
Signing time: Tue 20 Jun 2023 15:39:35 +0000
ROA not before: Tue 20 Jun 2023 15:39:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50133
IP address blocks: 91.239.7.0/24 maxlen: 24
91.239.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:76:17:de:13:b9:9a:c0:d7:ec:95:e9:f0:23:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Validity
Not Before: Jun 20 15:39:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6effd8715d3aa0b70013d2c04df3c4bd308200c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:df:45:04:22:a9:b8:e6:55:bf:9c:fe:d7:6d:
41:24:72:29:fd:6f:ae:83:6c:90:22:22:e3:0d:76:
18:04:7b:d5:04:0d:85:45:12:24:e0:29:9b:41:2d:
7f:75:8b:be:ad:b5:b2:9c:20:54:b6:85:c0:b3:d5:
45:b6:b1:43:76:2c:a7:2e:77:18:e5:99:59:f7:b8:
ea:28:2d:fc:92:03:97:85:77:88:c8:4d:48:8f:90:
e3:65:02:28:2f:8b:cb:53:a1:86:54:96:c4:85:2a:
e3:2f:8b:19:0b:c3:2f:a9:ad:38:b0:1f:0f:8f:40:
9a:a5:97:ca:72:d0:5b:ee:c7:a8:b4:67:cd:89:59:
16:e7:59:3b:59:7b:31:29:77:62:74:03:b9:71:5b:
3f:0f:99:22:e5:25:b2:8b:4d:5a:46:12:74:4c:a1:
41:57:64:9f:11:71:7c:56:1c:e9:40:e4:d7:35:d6:
c9:2a:a7:1a:38:39:f9:1b:08:5e:5b:52:bb:5c:fd:
24:a3:28:4e:be:6e:37:ea:b6:af:92:fd:8b:4b:a2:
8f:90:92:49:b0:f6:31:9b:c4:a8:fe:21:75:ae:37:
37:39:3a:51:08:71:80:21:70:68:a2:d0:6c:07:d8:
2b:fc:25:ba:92:a4:b6:0e:db:d5:68:07:ac:6a:13:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EF:FD:87:15:D3:AA:0B:70:01:3D:2C:04:DF:3C:4B:D3:08:20:0C
X509v3 Authority Key Identifier:
keyid:40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/5u_9hxXTqgtwAT0sBN88S9MIIAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.6.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a7:be:d6:92:64:61:c4:be:5a:96:00:b9:51:67:5c:08:3f:
3f:4f:46:dc:65:43:26:61:e6:3b:8b:a3:ad:e9:27:69:d4:01:
b8:e5:17:39:48:c1:4b:0a:46:58:e9:a0:e4:64:a9:f3:53:b3:
04:b5:2b:af:db:5e:4f:ed:3e:1b:0f:5a:92:5a:83:a0:b5:e5:
a1:71:28:21:b5:74:49:68:42:b2:f2:97:34:16:17:83:0c:12:
ea:25:bb:f8:a4:c4:78:d5:09:9b:6b:5b:5f:c0:93:f3:4b:3c:
48:67:28:17:f5:d9:96:6c:80:99:02:81:9b:2b:c3:96:20:12:
c7:e7:9e:1b:ed:af:4a:fb:cd:2d:e0:82:09:ce:fa:6a:46:0d:
f4:fb:0a:af:29:53:62:e2:19:1f:23:57:72:60:eb:50:56:eb:
b1:c2:57:6b:e8:04:b4:7d:23:c0:9e:6e:b8:c8:95:d7:78:d2:
c0:24:67:08:76:5f:8a:a5:9d:2f:e6:7f:d3:af:44:9f:ec:e7:
aa:cf:28:23:d2:6e:33:57:a7:a0:f8:eb:f6:15:93:00:f8:9b:
df:43:43:1b:58:2e:a9:5e:08:79:e6:61:21:bf:40:21:3d:d3:
e6:c1:03:ce:23:03:54:d4:b5:41:c9:39:67:c9:25:2f:d0:2a:
9f:6c:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:07 2024 by rpki-client on console-ams.rpki-client.org