Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/exjGm2HldZfRqPEAWu-yZRo6HHI.roa
File: exjGm2HldZfRqPEAWu-yZRo6HHI.roa (raw, json)
Hash identifier: jxqJbbQ0KPc/3+fjHvuy04vXkq6wlXXZHcgEHS3PACc=
Subject key identifier: 7B:18:C6:9B:61:E5:75:97:D1:A8:F1:00:5A:EF:B2:65:1A:3A:1C:72
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD084C6DDC1DCBF819996EF81CD56F873
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/exjGm2HldZfRqPEAWu-yZRo6HHI.roa
Signing time: Tue 26 Sep 2023 08:04:37 +0000
ROA not before: Tue 26 Sep 2023 08:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139853
IP address blocks: 91.222.134.0/24 maxlen: 24
149.20.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 08:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:84:c6:dd:c1:dc:bf:81:99:96:ef:81:cd:56:f8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 26 08:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b18c69b61e57597d1a8f1005aefb2651a3a1c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:0f:d5:6b:6e:08:ed:a1:d6:bc:eb:e5:b6:
ca:1c:a8:5c:2d:87:a8:b0:d1:36:d4:14:a9:3d:54:
52:38:ba:d6:e6:f7:5c:21:10:3c:8a:8f:78:de:58:
58:44:84:51:e9:51:d0:72:3b:34:95:f4:08:c8:ed:
c3:34:7a:31:b7:ef:5f:8a:70:d7:08:0b:ed:9d:d3:
02:ec:ff:e7:5a:41:90:0c:bc:55:42:31:39:67:88:
47:b1:c8:38:69:3b:eb:6b:c9:65:ec:88:f4:5e:6f:
c6:2b:7b:aa:05:5c:46:59:2a:81:37:6c:9d:82:e6:
4b:b6:58:60:d4:62:11:61:af:35:af:5b:28:66:41:
30:55:82:12:74:9b:cd:d6:bd:3b:fd:6d:b6:64:be:
28:48:b5:54:ad:b6:82:ba:65:be:30:d0:01:d4:1b:
2f:c5:32:36:12:e3:d9:5b:de:1f:f2:1f:79:b0:39:
86:0a:d0:09:09:f8:be:11:ef:8f:06:88:49:20:16:
88:30:5e:04:e6:33:9c:54:48:6e:a2:3a:93:f1:01:
6b:8a:0f:8e:66:13:46:55:f4:e0:2a:f9:c0:ca:dd:
72:83:04:19:c9:f7:bc:a3:ac:49:77:03:b6:b8:f3:
ac:2c:62:f3:be:b4:fd:f0:65:39:dc:0d:2e:64:82:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:C6:9B:61:E5:75:97:D1:A8:F1:00:5A:EF:B2:65:1A:3A:1C:72
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/exjGm2HldZfRqPEAWu-yZRo6HHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.134.0/24
149.20.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:75:e5:0f:fa:2c:75:c8:f8:f1:30:de:e1:f1:42:ab:e9:f8:
1c:4e:35:7d:8b:6d:53:d2:fb:d3:76:ee:93:f6:3d:d6:71:51:
74:ff:57:87:dc:b1:fd:a3:f3:e1:d6:57:9f:c4:cd:e7:21:7c:
2e:ea:7a:fa:fd:0a:59:34:be:6c:93:a9:58:e3:28:c7:5c:83:
a4:46:56:f0:2c:78:14:7e:79:8a:a1:5c:53:27:e7:2a:f9:da:
44:ee:6f:86:d9:81:28:ca:5b:a8:5a:11:1e:2a:82:8e:a5:7c:
9e:20:89:46:60:61:c8:22:a4:55:ec:52:6a:fa:1a:c3:af:e1:
0b:9c:f1:aa:b6:52:1f:88:88:77:f6:07:fb:b8:d9:47:96:60:
03:a0:cd:13:81:af:7c:8f:bf:f9:af:88:b6:36:9d:dd:54:1d:
01:ab:0b:dd:eb:19:a7:c6:ea:dd:6c:12:e7:b4:ce:fd:6f:ba:
db:42:f5:e0:47:6c:e8:c3:cc:5f:2f:b8:55:af:91:7a:1d:05:
ee:bf:aa:fe:85:a6:30:0c:67:3a:f3:0a:2d:74:62:3f:28:d1:
0a:9d:7b:85:e3:b6:5d:6e:09:b3:84:e4:47:78:b8:93:eb:f7:
ba:60:84:7b:aa:11:63:9a:fe:5b:db:ce:85:af:6b:2c:37:08:
f6:c5:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:56 2024 by rpki-client on console-fra.rpki-client.org