Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/QUUtPdWGBfZeYHjKzvj7Ne1U58I.roa
File: QUUtPdWGBfZeYHjKzvj7Ne1U58I.roa (raw, json)
Hash identifier: M7XggGFbaEugUf8O8o2BdvMvGFo4gCQokMuWnrS4K9Q=
Subject key identifier: 41:45:2D:3D:D5:86:05:F6:5E:60:78:CA:CE:F8:FB:35:ED:54:E7:C2
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 0188BE8442DEE26B57E4DA4AEF868AF4B194
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/QUUtPdWGBfZeYHjKzvj7Ne1U58I.roa
Signing time: Thu 15 Jun 2023 10:05:18 +0000
ROA not before: Thu 15 Jun 2023 10:05:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 91.198.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jul 2023 10:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:84:42:de:e2:6b:57:e4:da:4a:ef:86:8a:f4:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Jun 15 10:05:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41452d3dd58605f65e6078cacef8fb35ed54e7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:f6:84:d3:3d:94:39:98:50:a6:8f:b9:8b:
ea:42:0a:ab:13:46:b5:7b:1f:3a:57:91:11:15:31:
76:37:cc:a4:52:eb:e0:f2:e5:22:71:b2:fd:44:fe:
c1:28:a6:73:9e:99:0d:74:6f:b1:d9:76:bc:f2:24:
71:22:c5:f1:75:2f:24:5b:83:2f:17:0c:41:15:69:
f6:02:9e:48:1c:46:3a:62:d1:5f:64:b9:82:90:f7:
d5:12:7e:b6:b0:d4:a2:65:93:f4:bf:89:ba:71:99:
d2:8c:6f:3b:53:a4:3c:05:88:49:2c:99:4f:c4:d3:
b4:3d:00:ac:e8:49:f5:d2:68:36:a7:0a:a0:78:e5:
f2:47:dc:93:ed:f7:8f:20:9c:bd:a6:69:91:f6:b9:
54:48:06:35:9f:49:52:d9:a0:0e:b7:1b:ad:d5:91:
a1:bb:77:cc:54:aa:3e:38:3b:07:4f:8c:ae:b3:dd:
b8:17:00:86:11:53:02:24:8b:dd:95:81:1c:11:be:
bf:39:7c:6d:89:f2:72:e1:fb:b5:4f:b7:7d:38:59:
ca:b8:7e:98:b4:b4:cd:6c:73:bc:1f:85:d0:eb:c8:
eb:1e:b1:6d:8f:0f:79:37:82:be:bd:96:cf:65:4e:
46:80:9b:27:e8:7f:9c:4f:9a:d7:c4:1c:80:f2:b8:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:2D:3D:D5:86:05:F6:5E:60:78:CA:CE:F8:FB:35:ED:54:E7:C2
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/QUUtPdWGBfZeYHjKzvj7Ne1U58I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.81.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fa:0e:75:26:bf:c3:b7:7c:77:7f:36:9e:a8:a5:15:6f:6b:
bc:8d:21:e5:c7:d9:de:9f:db:35:e2:4c:c1:5f:90:cc:47:0f:
41:fd:fd:b4:51:11:43:ba:6c:73:b7:bd:eb:b2:83:dc:0d:22:
df:2d:34:1b:46:07:78:ca:ec:80:7d:3e:c6:2f:49:fd:f9:88:
ea:9e:cc:c3:e2:5f:5f:d2:87:73:10:8f:55:26:ad:3f:9f:48:
cf:75:22:fe:16:35:0f:8a:4e:51:a7:7f:f9:ff:79:a2:63:2a:
0c:c1:ca:e9:c5:7d:04:f1:d0:a4:cc:02:4a:1c:dd:a6:88:e8:
fa:07:7a:25:5a:8e:b1:7d:cc:11:65:6d:1f:f3:15:31:30:c3:
8b:42:2f:87:ee:69:60:8b:6f:7b:28:0d:d0:6d:3f:0b:ba:9d:
db:0b:84:00:d8:6a:6a:89:48:b2:cb:15:45:68:a5:c5:e9:ee:
17:d0:26:07:50:d2:24:02:e9:4d:a0:fa:f9:2b:94:d9:51:3a:
95:95:7a:1a:05:ac:d3:29:7f:b7:63:8b:43:c0:3e:48:ec:94:
81:9f:ea:87:1c:a6:d0:80:c0:7b:43:d1:d2:6e:ae:df:89:57:
27:20:90:e2:63:7d:c4:c1:28:95:28:49:be:05:21:a1:58:b9:
57:8a:7e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:16 2024 by rpki-client on console-ams.rpki-client.org