Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/UWOLB82ERZHk2yMvpaNVWlZGqi4.roa
File: UWOLB82ERZHk2yMvpaNVWlZGqi4.roa (raw, json)
Hash identifier: 4Use0D7ZZs2fSMvlVGJ4y1PvVBhsvdB9LuA9N8jwVd8=
Subject key identifier: 51:63:8B:07:CD:84:45:91:E4:DB:23:2F:A5:A3:55:5A:56:46:AA:2E
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 018B2E1B7FEE0D96ED26E76CBBE131BA4A8E
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/UWOLB82ERZHk2yMvpaNVWlZGqi4.roa
Signing time: Sat 14 Oct 2023 12:13:55 +0000
ROA not before: Sat 14 Oct 2023 12:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 91.237.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 18:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:1b:7f:ee:0d:96:ed:26:e7:6c:bb:e1:31:ba:4a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Oct 14 12:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51638b07cd844591e4db232fa5a3555a5646aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:ee:4c:09:8e:89:96:dd:71:d0:d1:4c:2b:
1b:fe:3f:79:d2:5e:31:9b:be:a8:93:af:32:fa:1a:
1a:cf:8b:35:cb:af:82:08:1a:84:83:2e:c9:51:4e:
17:69:1b:8a:48:d5:89:8d:ed:d4:6f:98:fa:cb:dd:
aa:09:c3:44:31:e5:c4:61:7d:fd:47:d9:84:69:03:
3f:34:88:29:af:bb:02:a3:2f:09:1b:be:60:7f:50:
ae:69:bc:0a:72:82:52:f8:6c:0e:e0:f6:54:ae:15:
f9:ed:5a:c4:c3:6c:74:26:0a:65:9b:ef:c3:0c:d3:
27:6b:71:1e:b2:74:e0:83:d9:21:42:19:41:eb:ca:
96:63:5b:0d:43:36:be:e4:6a:f4:c5:f4:eb:00:c7:
7c:e4:a9:8a:45:84:6a:56:37:0e:1c:21:6d:71:e6:
90:a6:e7:13:f3:fc:3e:8f:3a:f3:62:4b:3e:8e:fd:
9e:5a:51:06:b5:60:01:f8:86:c9:94:52:83:15:8f:
6c:e6:2d:49:e0:5c:36:ba:38:c6:46:81:0c:66:df:
54:e6:71:11:29:00:2e:ec:2f:a2:9d:75:e4:ce:81:
bf:d3:69:92:f6:2f:db:c6:52:45:31:5b:0c:fa:4a:
ea:87:8d:83:5a:86:7d:3b:a1:7d:13:6c:07:50:f4:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:63:8B:07:CD:84:45:91:E4:DB:23:2F:A5:A3:55:5A:56:46:AA:2E
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/UWOLB82ERZHk2yMvpaNVWlZGqi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:32:00:a2:99:7f:4a:07:e9:9a:7f:a0:99:09:22:2c:9f:ed:
4d:c4:63:f3:2a:3a:81:0b:dc:2b:47:70:e8:43:d7:0b:42:12:
87:7b:cd:32:6d:a7:56:29:11:a4:78:86:a8:ef:5b:d0:a6:a4:
ea:75:05:83:c3:d4:5e:3b:96:31:28:db:d0:c1:30:5d:8d:57:
1b:62:c7:96:b6:4b:40:0a:26:98:11:c1:34:5a:e0:b0:37:da:
8e:9e:2e:57:ab:d9:1c:f1:37:87:bc:7a:88:e6:55:25:af:1b:
50:f8:62:8f:90:a4:da:0c:11:a4:36:1a:e2:d6:16:47:86:6e:
5b:ba:db:56:81:99:09:00:a7:9f:9d:3f:27:5d:f2:3c:e1:65:
14:9d:a9:d0:35:5f:c9:17:40:de:85:e7:87:af:93:4a:6c:e8:
75:f4:04:4e:8a:d7:ba:ed:f7:08:87:06:81:32:2b:5e:eb:5f:
69:06:b3:8c:af:dd:c9:cb:07:33:40:c4:3d:5d:da:09:e2:33:
e7:7a:61:a7:a6:11:51:4a:b8:82:e1:27:78:f2:45:53:ac:a4:
89:a2:1a:1f:7b:e6:5b:3b:5b:2a:c1:c6:16:bd:6f:32:d7:53:
b2:c7:05:a9:3b:3a:eb:a9:68:53:65:6f:8a:5a:6d:7d:be:2c:
71:20:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:46 2024 by rpki-client on console-ams.rpki-client.org