Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PIfg0uwW96Wq6HrbItrE-AlQaOQ.roa
File: PIfg0uwW96Wq6HrbItrE-AlQaOQ.roa (raw, json)
Hash identifier: N+2FBqDXXmI43WcWfo0gl+urE3vqdDaleaqlvz9OVjA=
Subject key identifier: 3C:87:E0:D2:EC:16:F7:A5:AA:E8:7A:DB:22:DA:C4:F8:09:50:68:E4
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0187AC732C851D53933D26E4260807627BC0
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PIfg0uwW96Wq6HrbItrE-AlQaOQ.roa
Signing time: Sun 23 Apr 2023 04:50:41 +0000
ROA not before: Sun 23 Apr 2023 04:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 91.200.223.0/24 maxlen: 24
91.200.221.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
91.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 11:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:73:2c:85:1d:53:93:3d:26:e4:26:08:07:62:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Apr 23 04:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c87e0d2ec16f7a5aae87adb22dac4f8095068e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:c5:bd:a2:7c:12:63:31:a7:0b:4b:85:b5:
e8:54:34:68:ad:a0:2f:36:a5:69:20:ee:93:61:98:
86:79:e7:95:e5:25:33:be:cb:fc:b3:4c:90:fb:1b:
6e:97:3c:ec:e0:44:2c:7a:88:2f:c9:38:01:e2:71:
f9:7a:b8:52:b2:5d:2f:29:3e:1e:3e:56:9b:d7:06:
59:20:95:f2:5c:8a:52:47:5a:43:c7:96:35:74:d7:
73:c3:f0:97:ba:62:b8:27:40:98:42:14:03:a4:d2:
44:0e:0f:02:a6:9a:cf:95:1e:ca:19:b4:b0:1f:c7:
26:f1:2c:b9:58:7f:cb:f3:b8:8e:a2:26:99:cc:86:
90:a9:96:3f:04:6d:a7:0d:c1:07:63:3b:96:35:5b:
12:31:28:d6:e2:db:f2:67:ed:d0:6f:0c:d1:17:5c:
ce:d0:3f:1d:94:2e:de:e7:ff:ed:ff:05:b9:2c:6a:
cc:11:36:d6:c0:fd:c9:bb:3e:c6:7a:db:44:24:89:
1e:55:a5:a9:3c:eb:b6:c1:08:56:10:63:f9:d2:c7:
8d:70:e0:f9:c8:0d:43:ad:0a:5f:31:40:91:93:bf:
1d:24:da:49:4b:c2:23:b9:97:cc:2f:eb:41:56:8e:
03:00:5a:52:fd:82:b7:f2:88:52:e4:19:89:53:e2:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:E0:D2:EC:16:F7:A5:AA:E8:7A:DB:22:DA:C4:F8:09:50:68:E4
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/PIfg0uwW96Wq6HrbItrE-AlQaOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
91.200.223.0/24
91.226.57.0/24
91.226.59.0/24
109.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0e:cf:aa:b1:f2:d0:d4:c2:33:c6:05:d7:9b:d6:b0:c0:52:
88:eb:a3:16:4d:a3:1e:39:95:9c:70:7f:46:fc:da:7a:ff:09:
2f:5b:e4:d1:b5:2d:1d:aa:63:fb:22:e3:bf:81:2e:91:8d:cd:
13:90:10:3a:c4:6a:b8:45:43:b8:fc:06:86:45:98:9e:6c:26:
9c:3e:84:f2:ff:12:08:61:6d:ed:d5:3e:af:eb:e3:3c:a7:43:
0a:01:d7:bf:bd:c8:46:31:8e:dd:42:7c:8f:0e:07:69:d3:5d:
af:8c:c4:93:0f:01:a6:73:29:04:3d:a2:54:36:08:1b:f4:e9:
4e:6f:9d:73:6c:26:2b:27:aa:d9:0a:54:fa:0e:95:03:58:9d:
1a:29:1e:44:09:d2:8d:d7:a6:7f:69:82:90:f6:ef:3a:71:51:
f8:97:9f:e0:26:6f:11:6a:00:10:72:36:48:4d:93:fd:ea:02:
6d:6d:ef:35:a1:c1:72:a1:5d:43:d6:e0:0b:ce:28:78:11:f6:
ea:33:90:ef:8f:7f:d7:7f:de:0f:a0:32:1c:fd:bd:d9:4b:9e:
16:3d:1c:5a:59:2d:ee:5b:18:4d:a6:65:f1:3b:e8:25:80:a0:
e5:38:ed:23:6b:50:d3:c9:b1:74:5f:bf:62:7c:d9:13:c2:1e:
66:89:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org