Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/e9XxSmjuVHimGQvCoXK9WjXsm3U.roa
File: e9XxSmjuVHimGQvCoXK9WjXsm3U.roa (raw, json)
Hash identifier: KQ+S60M2mzOpryI8P01QoxWu7QSYSUrLw9CFR6WJvcY=
Subject key identifier: 7B:D5:F1:4A:68:EE:54:78:A6:19:0B:C2:A1:72:BD:5A:35:EC:9B:75
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 01856E2FAB926DC18D24DD1EC014EA251F44
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/e9XxSmjuVHimGQvCoXK9WjXsm3U.roa
Signing time: Sun 01 Jan 2023 16:34:55 +0000
ROA not before: Sun 01 Jan 2023 16:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48419
IP address blocks: 91.209.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:ab:92:6d:c1:8d:24:dd:1e:c0:14:ea:25:1f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Jan 1 16:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd5f14a68ee5478a6190bc2a172bd5a35ec9b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:29:28:1d:2e:7b:d3:7b:22:29:9e:a4:55:
4f:82:a6:8a:6b:e6:b4:77:9f:39:0c:10:0b:12:59:
3f:d7:10:68:95:5e:4a:da:78:d2:72:db:63:08:76:
70:98:3f:ea:60:07:f2:f7:63:fe:de:92:18:7c:98:
2a:77:f0:8e:0f:66:06:ac:8c:93:4b:cf:56:d7:1a:
1f:c6:5f:4e:ff:8c:0b:e7:15:13:be:e6:fe:e6:ce:
1a:81:1b:b3:8e:91:ab:f0:c4:44:a6:15:2f:24:00:
24:ec:2b:71:a7:a0:b5:10:48:15:86:50:60:24:77:
27:3e:14:24:d0:a6:4b:40:68:19:6b:9c:16:ba:f1:
d0:6f:82:a9:72:41:68:24:dc:06:f7:96:47:72:6a:
a2:b8:8e:30:c2:7e:50:0b:cc:f6:5f:4e:7b:4e:fa:
cf:0c:03:1b:7e:97:1b:2d:02:25:33:69:3b:00:a5:
0f:ba:fb:bd:00:bf:c7:6c:74:71:07:99:fe:71:a5:
e1:28:46:6d:68:af:c5:75:c5:19:d3:fa:80:73:2f:
21:19:9c:3a:d7:33:41:3f:9b:57:51:23:e4:05:24:
76:d0:1e:56:5d:66:6e:72:e6:33:4e:21:ef:78:d0:
ea:e7:4b:b3:45:23:a7:0d:d0:fc:77:8a:3c:a9:bd:
98:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D5:F1:4A:68:EE:54:78:A6:19:0B:C2:A1:72:BD:5A:35:EC:9B:75
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/e9XxSmjuVHimGQvCoXK9WjXsm3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:06:48:42:1f:54:9a:ec:dc:d6:4a:4b:30:39:f2:c3:c5:f1:
8f:58:57:d7:c9:9f:f6:be:cc:2a:0e:96:5a:3c:79:b1:a3:37:
a1:02:bc:68:05:e6:13:d4:cb:4d:84:9c:c0:13:6e:7e:43:57:
35:d7:3d:68:f5:f1:08:84:25:94:4c:6a:e8:9f:3d:5e:97:38:
f8:48:82:9a:72:03:24:1c:71:cf:63:16:9a:8f:1d:7f:44:b8:
55:1c:d1:62:2d:a9:25:41:1b:52:e1:f7:b2:f8:1a:01:24:e8:
51:59:84:60:d0:7d:8f:b4:4d:2a:c3:d7:1e:fd:08:a3:2d:6d:
49:45:6c:2d:f0:14:30:d2:50:00:24:6f:41:44:7e:d0:65:80:
02:43:f1:08:27:1d:9d:3f:77:fb:90:ea:e4:54:73:4b:0f:99:
09:0a:d9:6b:95:f8:0d:50:d3:a7:07:33:85:4d:2c:2e:2a:57:
b7:f1:aa:be:87:a5:df:bc:83:b1:53:62:1c:c9:62:21:f0:e4:
cf:36:d8:42:82:75:1b:e6:74:c6:86:36:70:af:7b:7b:d4:e7:
5e:27:4e:97:9b:ce:44:aa:c7:d4:d1:66:ff:47:b8:9d:4a:3d:
05:ce:a1:66:70:ec:b6:2a:4b:6b:f4:5c:e1:99:d5:32:60:0d:
aa:1c:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:54 2024 by rpki-client on console-ams.rpki-client.org