Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/D8pLZnRh6dhiVSb2Ld3XctSNmUU.roa
File: D8pLZnRh6dhiVSb2Ld3XctSNmUU.roa (raw, json)
Hash identifier: QLwrlJF4kGPMcwTVQekpojR4HtqfK6mDmQj0Uwigpxk=
Subject key identifier: 0F:CA:4B:66:74:61:E9:D8:62:55:26:F6:2D:DD:D7:72:D4:8D:99:45
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 0189BBA4F86016C7C712C264CCF3028C0A05
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/D8pLZnRh6dhiVSb2Ld3XctSNmUU.roa
Signing time: Thu 03 Aug 2023 13:44:58 +0000
ROA not before: Thu 03 Aug 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58030
IP address blocks: 91.238.0.0/24 maxlen: 24
2001:67c:1158::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 14 Oct 2023 12:13:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:a4:f8:60:16:c7:c7:12:c2:64:cc:f3:02:8c:0a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Aug 3 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fca4b667461e9d8625526f62dddd772d48d9945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c1:7b:40:23:32:8b:87:d4:fe:20:1f:a7:de:
94:3a:a1:21:07:8c:5e:ab:51:03:d9:2c:6c:b7:46:
23:95:1c:49:05:27:18:72:36:f5:b5:17:3e:2b:57:
8e:2c:f4:da:10:ec:e1:8b:44:e1:0a:b6:31:9b:87:
84:33:47:a1:dc:ab:bc:db:cb:2f:71:38:25:d6:a0:
b1:cc:e4:8d:a7:91:90:75:c9:f8:f0:62:e8:d7:58:
e5:dc:7f:f0:28:fa:cf:c1:30:af:5c:12:d2:bf:69:
2d:d5:5f:d0:be:07:1c:d2:27:2e:de:ef:45:55:4a:
8d:c2:38:96:09:e3:0e:f5:29:c7:48:bd:90:f9:7e:
fe:7d:34:43:42:3b:dc:b4:f2:aa:7f:54:94:f9:89:
0e:6f:8a:29:1d:4e:d6:54:e1:c8:ef:71:15:db:97:
f4:f0:c9:c7:50:0f:cd:4a:cb:67:9b:1e:70:01:61:
4b:ae:d7:4e:8b:2d:c8:aa:ff:60:61:d2:4f:c2:38:
4c:9f:ff:71:1d:4d:5c:33:32:4b:10:1d:14:22:41:
da:a5:a8:49:0f:a9:16:09:ac:55:87:60:0b:cb:d0:
a4:fa:f8:fc:47:c5:ea:3d:cc:6f:09:ed:30:cf:8d:
9e:aa:77:a6:a2:2c:36:dc:3c:24:73:20:a4:09:61:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:4B:66:74:61:E9:D8:62:55:26:F6:2D:DD:D7:72:D4:8D:99:45
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/D8pLZnRh6dhiVSb2Ld3XctSNmUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.0.0/24
IPv6:
2001:67c:1158::/48
Signature Algorithm: sha256WithRSAEncryption
21:b0:1f:25:d6:13:ef:0a:67:f0:7a:a9:ed:ac:51:10:04:4f:
70:a6:2f:f5:22:d8:9b:56:70:3b:4f:c4:24:37:0c:b5:56:4e:
bc:76:c0:79:3e:2c:28:c9:4f:58:be:e1:b3:00:2d:ea:9a:44:
c3:8b:f1:12:ea:7b:33:90:06:53:0d:3c:a4:a9:b7:51:ab:1c:
09:0b:14:41:23:1c:ed:77:0e:b8:85:12:3c:19:91:72:e8:36:
a1:02:02:86:76:c2:6f:0a:1c:81:2d:84:6a:5c:f8:d2:17:31:
7c:c4:87:ce:e4:f4:2e:e1:34:1d:67:82:b9:e7:85:19:7c:c2:
f6:3f:f3:2d:fc:79:9b:4b:64:90:21:5f:6c:75:69:0e:be:b0:
f7:12:0b:5c:de:6c:cc:85:2d:13:09:6d:c9:40:ab:df:33:12:
9d:66:13:b7:1f:5f:15:49:96:33:bd:65:9c:dc:7e:17:8b:83:
11:01:91:d4:ad:01:22:72:88:11:23:3f:31:88:2e:24:66:00:
b1:fa:c5:b2:13:fa:bb:65:2c:8e:f2:8e:7d:48:41:9c:f1:7d:
36:19:fd:1c:0b:e2:6d:41:ba:df:0a:0e:b1:94:86:b4:fc:69:
3d:19:ad:67:86:68:64:c4:bf:31:94:21:c4:b7:74:f5:94:b0:
89:7f:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:23 2024 by rpki-client on console-fra.rpki-client.org