Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pTgLi45uwS_b6gPcwe2ugqMRSKk.roa
File: pTgLi45uwS_b6gPcwe2ugqMRSKk.roa (raw, json)
Hash identifier: tfd9X8Ij8J1EX+NMwp+jDEeG3gqjiDjR5ifyr76dJaE=
Subject key identifier: A5:38:0B:8B:8E:6E:C1:2F:DB:EA:03:DC:C1:ED:AE:82:A3:11:48:A9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018E3128DC643A24D47083A9BF804326634C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pTgLi45uwS_b6gPcwe2ugqMRSKk.roa
Signing time: Tue 12 Mar 2024 05:35:45 +0000
ROA not before: Tue 12 Mar 2024 05:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62281
IP address blocks: 91.242.86.0/23 maxlen: 24
91.242.88.0/21 maxlen: 24
91.242.88.0/22 maxlen: 24
91.242.92.0/23 maxlen: 24
91.242.96.0/24 maxlen: 24
91.242.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 16:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:28:dc:64:3a:24:d4:70:83:a9:bf:80:43:26:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Mar 12 05:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5380b8b8e6ec12fdbea03dcc1edae82a31148a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:9f:20:c2:22:c9:e1:68:9f:be:ca:86:b9:
75:16:41:b4:b6:44:f9:7e:bf:10:97:20:c8:e1:04:
90:9e:d3:97:ec:64:57:3d:f2:e2:9e:44:64:33:61:
bf:4f:06:54:51:ed:91:d9:8a:49:c1:ff:1f:2a:7e:
d2:cd:23:63:6d:a2:d7:d6:85:4c:1c:57:f8:05:7a:
84:0f:7d:b9:4e:39:8f:1f:c2:2c:e6:d1:7d:90:50:
fe:21:34:f6:73:37:f0:4d:66:1a:87:74:06:45:54:
95:08:b3:99:7a:52:b8:ba:0d:3f:47:a4:c0:bc:d2:
a9:25:68:43:d4:16:0e:65:79:75:86:f0:76:22:16:
6b:ff:d9:94:c4:3a:98:78:e4:84:73:65:9a:45:76:
69:67:58:3e:15:44:68:0e:81:13:f4:05:93:7e:90:
bd:ba:ec:70:0b:c2:c1:62:12:37:af:d3:62:d2:cf:
a0:70:66:45:20:a4:e8:2d:4e:36:35:13:30:9a:46:
c6:41:b7:cd:26:13:e9:56:f2:28:81:c7:fa:ce:d8:
ed:1c:ea:a5:e6:30:df:9f:11:14:d7:49:40:d8:a0:
ab:17:33:93:64:6f:17:f2:2f:49:fa:d4:0d:f6:5b:
23:63:e6:f6:dd:6d:2b:2a:53:93:07:ad:d6:b8:f6:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:0B:8B:8E:6E:C1:2F:DB:EA:03:DC:C1:ED:AE:82:A3:11:48:A9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/pTgLi45uwS_b6gPcwe2ugqMRSKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.86.0-91.242.96.255
91.242.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:69:d5:60:10:87:51:d1:99:3e:6b:cc:f5:61:2d:15:fb:85:
79:61:73:d8:c4:3a:f6:fb:76:0b:49:59:19:a9:ec:fc:09:1e:
44:eb:2e:26:83:7d:8a:90:49:2c:fb:df:3f:f9:82:69:16:6e:
af:54:96:6b:5d:30:2f:ad:72:18:c6:ba:b7:06:0f:44:8a:de:
90:6f:23:3a:6b:72:cc:96:43:0e:4d:0c:c5:e8:5c:9c:29:e1:
9e:50:1a:8d:e8:75:56:e4:cb:27:bd:d3:fb:1f:be:15:9f:b7:
6f:e9:75:83:b2:27:54:7e:ad:96:da:86:b6:a9:a2:c2:f8:19:
cb:08:9f:51:2b:74:a6:0d:98:09:c1:84:42:f4:67:99:20:de:
0a:28:c8:d6:99:4a:85:dc:f9:d8:07:fc:37:45:68:9a:d0:ae:
d0:a8:25:b3:7d:d6:7e:89:fb:13:41:7c:56:5d:d0:1b:a3:68:
a6:fa:1c:86:5a:9e:2f:16:25:6b:47:25:ab:b4:0e:c3:20:9c:
b6:83:97:ad:fd:bf:5a:08:7e:81:67:5d:5d:bd:a0:f0:af:16:
85:70:06:71:de:39:e8:2c:ed:b3:44:0f:ac:57:d7:63:10:8b:
41:88:78:2e:70:1d:11:4c:b7:3a:8f:5c:e2:bc:fe:f2:66:4b:
65:9e:6f:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 13 19:59:48 2024 by rpki-client on console-ams.rpki-client.org