Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/kWnySw6y8YvQi_GeSM6-aEyT2SE.roa
File: kWnySw6y8YvQi_GeSM6-aEyT2SE.roa (raw, json)
Hash identifier: iDFmCkYKFGjcjpXtU3HcZoolQPmIe0Ij2gC5VTuosX4=
Subject key identifier: 91:69:F2:4B:0E:B2:F1:8B:D0:8B:F1:9E:48:CE:BE:68:4C:93:D9:21
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 018CC49357F5E8241CFEFDBC8AABAA3098FB
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/kWnySw6y8YvQi_GeSM6-aEyT2SE.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134963
IP address blocks: 91.192.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 10:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:57:f5:e8:24:1c:fe:fd:bc:8a:ab:aa:30:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9169f24b0eb2f18bd08bf19e48cebe684c93d921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:89:6d:f9:09:d9:c9:a3:de:6f:f7:51:c5:
10:74:67:85:75:ad:4b:55:5d:e1:98:e9:b9:cd:6c:
9f:ee:25:dc:31:bd:e1:4f:76:12:30:9a:a3:9a:d1:
75:90:6c:6d:2c:ba:69:2e:0f:68:2c:2e:35:28:a6:
e0:37:ab:10:70:c2:fb:e8:32:de:be:40:80:55:67:
b1:e1:67:02:48:88:6a:02:7f:84:bf:eb:88:8d:8b:
58:d7:44:87:d0:cd:3f:09:40:bf:cf:a4:3e:5e:35:
d1:cb:d7:b8:e4:42:c4:d7:48:1d:d4:0b:44:89:cb:
3d:95:09:20:90:66:ce:0b:d5:2d:55:a6:c5:66:fd:
f3:f3:6a:3f:8b:02:94:bc:3a:b0:61:a8:10:36:05:
5e:c3:94:6f:5a:71:ab:35:99:ff:8f:4b:5c:ab:44:
e5:da:0f:fc:89:ec:3c:2e:6f:88:53:70:35:39:43:
19:47:7d:63:fd:3d:6c:2f:c3:5b:11:d2:25:b6:3a:
32:14:5f:c3:b1:e4:a7:d8:26:ae:65:e8:28:a1:b9:
67:60:9f:2c:43:f9:8d:90:3d:63:ee:dc:eb:4e:fb:
ff:4b:aa:d9:cd:63:6f:70:5d:31:82:b4:1c:20:d4:
bb:67:a5:ff:47:bb:75:d1:74:12:56:bc:a4:f1:f3:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:69:F2:4B:0E:B2:F1:8B:D0:8B:F1:9E:48:CE:BE:68:4C:93:D9:21
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/kWnySw6y8YvQi_GeSM6-aEyT2SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:46:1c:5f:47:21:ab:9d:6e:db:7a:61:53:a0:75:31:e5:14:
a8:83:ca:d4:d9:e8:2c:40:11:46:10:8a:c1:a6:0b:90:08:b3:
b8:b3:66:99:e8:4c:b4:67:5d:dc:70:0a:84:46:ed:57:57:3d:
a0:52:fe:a6:a6:32:4a:9c:06:40:75:92:1e:f7:4f:4f:9f:b3:
f6:22:46:52:24:c9:fc:25:97:e7:85:69:66:e3:4e:0e:75:58:
2d:21:37:43:ce:52:96:5c:b9:72:dd:dd:00:41:25:8e:fb:ce:
77:39:2a:4f:61:ed:f3:13:b6:a7:f5:a6:17:89:f0:ef:60:ce:
9f:ea:49:19:50:7b:f7:23:96:4d:8e:9c:ef:d6:49:45:2a:1b:
c4:33:5b:23:52:68:c6:5f:90:da:27:53:cd:e7:dd:41:82:d1:
b1:4a:4c:e8:d4:fa:f7:58:44:02:db:a6:74:eb:e4:4b:94:6b:
17:e7:21:86:18:fd:3c:e7:71:3f:83:f7:4c:79:67:03:9d:8a:
fa:6d:ca:97:c0:bb:58:74:d7:e6:84:b7:a0:69:a4:96:d9:d2:
31:14:fc:b3:8c:e0:ac:64:08:01:b8:4e:53:53:db:45:6c:25:
89:db:a8:af:e3:fa:f2:0b:1b:d7:a2:ac:41:ed:34:2f:f5:c1:
a0:00:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:28:27 2024 by rpki-client on console-ams.rpki-client.org