Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2pgrHDMdeAbJCDq3dTPEHqU3oxk.roa
File: 2pgrHDMdeAbJCDq3dTPEHqU3oxk.roa (raw, json)
Hash identifier: xpSDmCBUMYDVn3d22PIIl90ksZlOqqvzrOhK7iUYyBA=
Subject key identifier: DA:98:2B:1C:33:1D:78:06:C9:08:3A:B7:75:33:C4:1E:A5:37:A3:19
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0187E6EF90CC21A23B5C50B9E2B5433933CB
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2pgrHDMdeAbJCDq3dTPEHqU3oxk.roa
Signing time: Thu 04 May 2023 13:24:32 +0000
ROA not before: Thu 04 May 2023 13:24:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 91.229.18.0/24 maxlen: 24
91.229.19.0/24 maxlen: 24
93.120.24.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 13:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:ef:90:cc:21:a2:3b:5c:50:b9:e2:b5:43:39:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 4 13:24:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da982b1c331d7806c9083ab77533c41ea537a319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:40:b6:1b:0f:e9:b0:3b:fd:98:28:19:24:
89:43:3b:22:79:54:87:e9:93:f0:29:2f:d1:e2:65:
58:6e:ee:f1:f1:fb:8c:46:c3:d7:f5:9a:5f:bb:9f:
ac:cb:f2:92:c3:13:88:ed:6f:bb:c3:7c:a9:07:44:
3b:79:f9:78:d0:8f:9f:f4:84:29:9c:2e:d9:d0:8e:
b4:4d:ea:9a:21:ea:b1:8c:9a:fd:d8:f5:2d:1f:fa:
d4:60:f4:1d:bf:fb:bd:76:d7:b5:e8:32:f7:ca:4d:
74:7c:2f:3d:75:ff:ff:bc:bf:eb:dd:37:2a:0b:93:
8a:69:48:35:5d:50:9d:0b:23:e8:3e:49:31:df:79:
d2:e8:10:50:01:f3:22:af:15:3c:94:ca:68:f9:ba:
cd:66:7b:69:f7:6c:db:fd:b6:35:8a:05:34:cc:af:
fd:99:cf:1e:61:9c:82:01:73:c1:65:37:f9:f4:30:
dd:4d:6d:90:8a:12:51:12:45:03:7c:94:68:cb:14:
c3:4a:46:9f:33:9e:80:74:c1:f8:1f:8e:0d:64:6e:
94:37:96:7e:29:9b:aa:c0:e3:5a:15:01:5d:a6:3d:
47:13:d5:3b:22:ab:68:a7:3d:69:db:82:f8:8b:14:
f4:e9:90:9b:47:91:49:e3:a6:c1:16:47:cc:e1:c8:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:98:2B:1C:33:1D:78:06:C9:08:3A:B7:75:33:C4:1E:A5:37:A3:19
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/2pgrHDMdeAbJCDq3dTPEHqU3oxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.18.0/23
93.120.24.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:73:77:9d:25:cd:88:8b:2f:d3:ad:0e:75:b9:93:af:d1:6a:
24:03:93:fb:50:6f:b9:18:a8:58:61:3d:bd:da:bf:60:8c:d3:
27:bd:35:a8:06:f8:ce:72:0b:a5:1f:e4:21:80:b4:79:20:10:
e3:b3:55:ee:f3:3a:87:10:7e:1e:12:0b:e8:29:47:0c:16:fe:
0b:ca:9a:91:67:ae:ae:ce:54:d9:1b:54:30:05:79:9c:f8:87:
d3:d6:05:6d:44:01:7f:30:d1:fb:c1:2a:4f:70:95:99:59:d5:
7c:36:05:2b:da:07:e1:bc:17:eb:4c:24:ae:da:00:34:42:d2:
eb:0b:cd:5e:15:9d:06:01:f6:ed:81:9c:fc:98:b5:38:22:c8:
51:9c:db:59:8e:93:0c:f2:fe:90:f9:18:20:bb:b5:ff:27:7c:
d8:f6:db:85:d9:41:aa:bb:94:34:1f:9d:c1:09:95:a7:1d:34:
0c:b4:47:3e:8d:48:53:2e:af:06:21:2c:06:be:14:98:57:90:
0a:64:92:ac:43:cb:2f:fa:d1:f4:0d:ff:0b:f0:75:d1:f4:41:
73:57:54:f8:8e:f6:dc:b6:fb:63:29:82:a3:4a:fe:d3:94:ed:
e1:f0:3b:45:e9:0d:05:c9:e7:50:d0:94:eb:69:89:48:8b:44:
06:b9:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org