Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/NaE3efobTTGnVesne5HVfqEFlJY.roa
File: NaE3efobTTGnVesne5HVfqEFlJY.roa (raw, json)
Hash identifier: AGvXUvc848ypiaY6D4DHRI6zByzR6PkXWpKB6QPdyVI=
Subject key identifier: 35:A1:37:79:FA:1B:4D:31:A7:55:EB:27:7B:91:D5:7E:A1:05:94:96
Certificate issuer: /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial: 018A4ACBCB4E397449E83ECBAFB592A85509
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/NaE3efobTTGnVesne5HVfqEFlJY.roa
Signing time: Thu 31 Aug 2023 08:53:04 +0000
ROA not before: Thu 31 Aug 2023 08:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57808
IP address blocks: 91.235.147.0/24 maxlen: 24
91.235.146.0/23 maxlen: 23
91.235.145.0/24 maxlen: 24
91.235.144.0/22 maxlen: 22
91.235.144.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:cb:cb:4e:39:74:49:e8:3e:cb:af:b5:92:a8:55:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Validity
Not Before: Aug 31 08:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35a13779fa1b4d31a755eb277b91d57ea1059496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:b1:c6:16:65:46:70:91:78:9f:a8:cd:a8:
bd:cd:20:59:c2:6b:f1:44:aa:b0:74:70:57:33:5a:
46:c1:e2:55:67:6f:9d:79:3f:a9:92:3f:97:a0:b1:
92:4d:b1:61:69:c8:12:e2:72:51:bc:67:c8:a6:20:
55:5a:e7:2d:3b:15:6f:7a:0b:56:0b:aa:24:58:4d:
7f:2e:66:cc:a0:91:41:9f:3b:99:a6:a3:4e:b0:7f:
1e:bc:64:8f:ce:60:79:d3:cd:49:72:d4:de:a7:39:
39:6d:91:b3:6a:55:78:18:b6:cb:c9:1b:79:3e:35:
09:3b:30:ff:8f:4f:91:94:67:00:b5:fd:d7:da:5e:
12:c3:16:f0:08:65:35:e9:dd:73:eb:63:5d:08:f3:
f7:4f:f1:54:b8:a1:54:d8:6f:4a:4b:59:d0:04:85:
d2:4c:be:76:06:51:3d:ba:1d:cb:8a:81:5c:c6:8b:
4b:05:e9:4c:b3:0d:e9:5c:e2:20:68:a2:40:04:29:
26:41:8a:eb:87:37:55:b0:a6:c6:f1:0e:28:df:5e:
ee:dd:34:23:2b:5c:ac:a6:1b:ea:b9:2c:7d:b1:76:
9b:40:98:2e:e4:d7:66:93:68:16:2c:74:23:f1:7b:
35:ca:a1:b6:94:ff:df:fa:72:56:b2:e8:c2:cd:b0:
cc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:37:79:FA:1B:4D:31:A7:55:EB:27:7B:91:D5:7E:A1:05:94:96
X509v3 Authority Key Identifier:
keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/NaE3efobTTGnVesne5HVfqEFlJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.144.0/22
Signature Algorithm: sha256WithRSAEncryption
37:66:b7:af:ab:67:bc:26:d9:75:55:eb:46:2e:d9:7e:d0:04:
b4:c3:1c:b2:f3:98:f8:76:85:c9:41:ba:80:69:1e:c9:d2:e9:
26:95:bb:0d:2b:64:69:bb:74:7b:36:ab:d4:da:51:00:3e:4a:
cc:04:a7:6b:9e:b5:fb:14:16:20:91:f5:94:39:1b:ab:6e:cb:
08:38:cf:f1:0b:06:e3:80:8e:f9:31:b5:c8:3c:f8:f3:fa:a0:
ee:4a:88:f0:b1:df:b1:f5:66:5e:00:49:0c:ce:db:85:6e:74:
20:bf:4a:9e:b5:d9:d2:54:89:56:3e:fc:72:2a:7b:4c:4c:e9:
64:72:39:df:1d:8f:5f:e0:0e:40:2c:c8:27:5c:b4:df:7d:88:
78:7d:f6:15:46:62:da:84:42:7b:8a:94:ef:91:0e:15:8e:b5:
ac:6e:93:e4:49:b0:9f:a6:00:78:20:42:43:e0:da:a7:23:14:
29:29:84:ba:b4:ab:b0:75:c2:12:07:5b:ec:4b:a5:6f:26:78:
fc:f9:2c:b4:f6:0b:42:e0:db:c1:24:b9:6b:99:58:ee:ce:50:
e2:82:92:6b:7c:c6:e1:73:bb:a7:16:7a:09:5a:8f:e1:d8:fd:
33:ac:2b:c6:8d:70:c7:08:40:de:28:ea:64:9a:e6:96:4c:0f:
70:a3:40:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:05 2024 by rpki-client on console-ams.rpki-client.org