Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/dQWreWxnmO5ESJ7qs-Q5mhw4FfE.roa
File: dQWreWxnmO5ESJ7qs-Q5mhw4FfE.roa (raw, json)
Hash identifier: KWm9qBiU+RXW2dAxx1zV5PTDhrIYhm2iKKAfy6jY4rA=
Subject key identifier: 75:05:AB:79:6C:67:98:EE:44:48:9E:EA:B3:E4:39:9A:1C:38:15:F1
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 018779B9A9801D247B58B0F6BCEFA452B5AC
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/dQWreWxnmO5ESJ7qs-Q5mhw4FfE.roa
Signing time: Thu 13 Apr 2023 08:27:03 +0000
ROA not before: Thu 13 Apr 2023 08:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 91.206.52.0/23 maxlen: 23
2001:7f8:24::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:b9:a9:80:1d:24:7b:58:b0:f6:bc:ef:a4:52:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Apr 13 08:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7505ab796c6798ee44489eeab3e4399a1c3815f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:ac:c1:8e:2b:c9:1e:27:cd:5c:6e:f4:da:
8b:91:88:21:e1:34:17:40:c9:02:87:97:1b:ee:bc:
de:31:5e:20:32:fe:31:ea:7e:a1:40:8a:a0:50:57:
e8:2f:c6:16:0a:5c:b9:8f:a8:75:d6:98:3d:7b:3d:
c3:5e:17:51:af:85:c9:e5:55:9d:e3:a3:ac:d8:b5:
c4:01:e4:41:16:ce:08:8a:20:c1:2a:f4:9d:6a:f3:
8d:e3:ca:8e:e7:37:81:5e:6b:b8:cc:bb:a5:39:9c:
21:04:60:0c:9c:76:1c:4b:3b:68:ac:5b:43:5f:b4:
c6:87:be:c7:bc:e3:cc:95:23:7c:e6:40:36:22:40:
c8:ae:b1:d2:90:b4:aa:d3:26:0d:01:a4:55:55:9f:
b9:ef:20:e0:f5:83:68:44:d0:8f:df:d4:1a:5d:2c:
d6:3d:7f:9f:bc:3d:23:00:fb:8c:a8:05:97:d1:4a:
b0:0b:d6:79:58:fb:9d:7e:f8:7d:78:c9:e9:2a:f8:
73:22:03:2e:f3:05:38:ca:f9:22:77:75:9e:62:5d:
eb:19:62:b6:f2:a4:0f:de:59:48:c6:5b:fc:4b:f2:
e4:40:fd:98:73:cf:e9:a8:9a:d5:ac:31:42:4b:73:
18:b3:91:81:60:b7:ac:35:9a:40:21:03:99:c0:5e:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:AB:79:6C:67:98:EE:44:48:9E:EA:B3:E4:39:9A:1C:38:15:F1
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/dQWreWxnmO5ESJ7qs-Q5mhw4FfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.52.0/23
IPv6:
2001:7f8:24::/48
Signature Algorithm: sha256WithRSAEncryption
2d:2a:c0:55:f8:f8:43:10:ab:e1:e4:8e:24:df:1d:3d:e0:16:
65:13:45:4b:a4:cb:a8:48:c3:c9:7d:f3:d6:94:a3:e4:87:e8:
e6:82:56:bf:6c:5d:96:54:aa:b0:91:66:79:ad:40:d0:92:6e:
b4:37:64:5b:9a:cf:19:95:87:bc:87:26:28:e5:12:0b:d0:99:
d5:2a:51:20:24:6d:36:66:de:00:4e:f1:ed:a5:79:42:92:7b:
85:7c:be:ca:26:e4:bb:ca:6d:dc:80:fa:2b:4f:4b:18:be:ae:
cb:d3:22:05:36:04:8e:62:f7:43:b6:ff:b3:52:df:dd:a7:ff:
1b:07:c5:d9:9b:9b:a7:43:ef:8c:3a:b7:f2:b9:b2:2f:44:ae:
0c:14:53:c2:10:21:5a:40:37:1e:f6:f8:11:a0:22:fb:80:45:
dd:9d:da:5f:88:f4:bb:ae:db:3f:a4:9e:48:7d:15:13:88:e5:
b6:f6:42:6e:f7:a7:26:aa:fe:bf:7c:99:15:3b:cd:69:40:22:
0d:37:25:56:15:98:9a:bd:6f:b5:41:d1:d1:ea:20:9c:d7:f9:
5f:90:a6:02:fc:98:5f:87:17:5f:3a:fc:b7:9d:f3:a5:0f:3b:
22:64:1a:04:34:c5:50:28:9c:74:32:bb:f0:bc:1c:9a:cc:84:
e0:fb:2a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:06 2024 by rpki-client on console-fra.rpki-client.org