Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/Ku5Z9BbOxHB9DZ1V45ujcX-8kkM.roa
File: Ku5Z9BbOxHB9DZ1V45ujcX-8kkM.roa (raw, json)
Hash identifier: 7HQv3SoXFuJ3gVGYCQu7FTcjxNL5Mly1ncTUrkz7Sj0=
Subject key identifier: 2A:EE:59:F4:16:CE:C4:70:7D:0D:9D:55:E3:9B:A3:71:7F:BC:92:43
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0185719E6B4AEF03A4E667B91673CBE5A5A5
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/Ku5Z9BbOxHB9DZ1V45ujcX-8kkM.roa
Signing time: Mon 02 Jan 2023 08:34:45 +0000
ROA not before: Mon 02 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46844
IP address blocks: 91.236.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:6b:4a:ef:03:a4:e6:67:b9:16:73:cb:e5:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 2 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aee59f416cec4707d0d9d55e39ba3717fbc9243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:11:18:ea:57:6e:94:c8:a9:66:fb:1e:3b:
91:34:66:d7:9a:64:1d:e7:ab:69:0c:8c:42:01:d3:
31:06:70:37:33:cb:1e:ba:be:a1:28:79:cf:43:b9:
7d:a6:90:39:ce:f5:9e:a9:94:d3:91:1b:d0:58:0d:
02:f5:7c:cd:8c:d1:d6:91:d7:f7:23:79:d7:b2:80:
33:15:4e:8a:c7:2c:3d:18:88:0d:7f:8f:01:7f:f8:
2b:fc:8b:86:86:d1:be:88:37:0b:09:8d:bf:fc:6e:
60:d4:1e:a9:de:ff:23:dc:12:f0:90:65:12:f1:93:
f3:ca:2e:11:a1:b0:fe:ec:fe:db:fc:2f:23:19:71:
8d:45:06:6a:bb:c1:cf:72:94:83:31:52:a9:23:2a:
13:6d:9f:29:4a:21:93:b1:73:d8:9b:23:38:3b:53:
80:af:5a:7c:46:b9:07:82:25:30:dc:ac:73:31:9f:
50:6a:db:5f:58:f8:69:10:94:84:72:17:ad:f8:26:
dd:38:93:a0:ec:94:6e:15:34:91:df:d9:cf:65:23:
66:44:7e:5c:9f:1a:99:72:9f:d1:f7:fa:60:7d:80:
30:e0:36:de:8d:c7:05:e3:1e:20:ef:a4:8e:c0:c8:
53:46:3c:12:19:e1:93:7f:dc:d3:cd:cc:e6:3a:45:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:59:F4:16:CE:C4:70:7D:0D:9D:55:E3:9B:A3:71:7F:BC:92:43
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/Ku5Z9BbOxHB9DZ1V45ujcX-8kkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.182.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e9:5f:68:bd:4c:7d:48:ec:ad:6c:9b:98:52:85:c0:55:71:
ab:26:22:23:f9:76:f0:dd:f1:17:62:3e:08:25:5c:9c:34:90:
38:2a:a7:f8:13:c6:ef:ab:51:31:ce:39:d3:6c:ad:3e:7c:48:
a3:cd:e1:e6:41:cb:98:83:04:98:32:a7:c3:14:ef:4e:d1:2a:
a6:2e:ba:ad:86:58:8a:86:6a:fb:13:98:66:62:81:05:8d:35:
24:02:a3:7a:4b:92:f2:6a:af:cd:af:1f:b3:8b:f4:5a:a1:74:
c9:05:62:78:53:b1:84:20:fc:74:fa:55:71:19:ff:9d:3f:30:
23:b6:d6:d8:c0:2e:ce:b4:4f:37:e1:24:17:47:38:e3:6c:21:
02:3e:04:88:85:23:69:5d:bd:82:d8:22:14:1a:12:9d:e9:74:
14:f1:03:0e:24:63:df:0e:31:53:55:aa:d1:0b:8d:71:39:5f:
7d:b4:c3:dd:f0:c7:8b:c9:74:16:64:76:3f:6b:8e:e7:fb:82:
6a:5a:fd:1b:35:f3:d2:09:f2:91:9d:18:d2:8d:9f:e5:20:f0:
11:d1:1a:02:99:26:03:a4:a2:fa:22:12:36:41:4e:8e:6b:96:
fd:f4:86:5d:8b:94:70:a5:66:dc:20:45:6f:13:76:b4:d7:a3:
d2:ae:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:19 2024 by rpki-client on console-ams.rpki-client.org