Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/4sQLtqNHF3l2zEuJiYs_XUWPZsQ.roa
File: 4sQLtqNHF3l2zEuJiYs_XUWPZsQ.roa (raw, json)
Hash identifier: OrANUxgx8FxUZczhmDNSe8dHmS8XYNhpmIJSv05BEIw=
Subject key identifier: E2:C4:0B:B6:A3:47:17:79:76:CC:4B:89:89:8B:3F:5D:45:8F:66:C4
Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial: 01856C53C2D0B660761EE8AE9D2DBD6C503B
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/4sQLtqNHF3l2zEuJiYs_XUWPZsQ.roa
Signing time: Sun 01 Jan 2023 07:55:06 +0000
ROA not before: Sun 01 Jan 2023 07:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50643
IP address blocks: 195.191.200.0/23 maxlen: 23
91.221.191.0/24 maxlen: 24
91.221.190.0/24 maxlen: 24
91.221.190.0/23 maxlen: 23
2001:678:b4c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Apr 2023 12:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:c2:d0:b6:60:76:1e:e8:ae:9d:2d:bd:6c:50:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Validity
Not Before: Jan 1 07:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2c40bb6a347177976cc4b89898b3f5d458f66c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:eb:ad:f4:4c:ce:d5:43:c4:00:96:65:57:
ae:14:ef:29:c4:65:0f:37:28:73:e9:33:3e:dc:50:
4a:50:0d:53:e8:62:cf:48:b5:07:5e:73:fc:33:9d:
0f:54:10:e5:ee:db:dd:ea:b2:78:6c:14:ea:ff:02:
05:d0:11:a5:69:e7:13:9c:9e:1d:85:4b:a4:40:cf:
cf:63:55:d1:94:7d:93:aa:5e:bb:c7:d8:b9:8c:da:
a2:26:14:0e:a1:b9:c3:3a:db:35:7a:cc:f9:15:97:
08:76:4f:18:70:cb:0e:64:ee:09:52:a8:6e:75:40:
48:1c:f8:10:57:bd:45:01:11:e1:cf:b5:96:62:c9:
aa:07:1d:23:cb:2a:c0:6a:eb:b5:1f:38:1e:da:1c:
70:bf:0a:dd:25:7c:c5:c6:87:10:31:31:1d:09:c6:
2e:c7:bb:31:e0:2d:47:a2:3c:25:1c:0d:78:a2:d9:
27:5e:59:cb:0c:fa:53:84:12:6d:7d:28:65:85:e6:
ad:22:e8:f3:e9:ff:b7:83:8f:c6:ea:e8:c7:2c:63:
28:cf:6f:35:01:4d:24:29:31:92:0d:49:46:17:91:
68:b5:21:e8:8d:a6:e3:08:f4:60:0b:bb:5b:7f:23:
e2:ec:20:bc:d1:18:97:f6:62:df:d0:05:7e:0d:ab:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C4:0B:B6:A3:47:17:79:76:CC:4B:89:89:8B:3F:5D:45:8F:66:C4
X509v3 Authority Key Identifier:
keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/4sQLtqNHF3l2zEuJiYs_XUWPZsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.190.0/23
195.191.200.0/23
IPv6:
2001:678:b4c::/48
Signature Algorithm: sha256WithRSAEncryption
2c:2c:b1:95:2a:78:2c:be:ab:21:e8:15:90:f1:a0:43:a4:fc:
f9:86:12:fe:1a:4e:25:e1:5b:91:f9:52:c5:7d:d1:f3:e0:df:
17:2a:dd:0b:c8:ad:4a:fb:e5:d9:64:93:a8:a4:a4:da:4a:51:
b9:6a:80:b2:46:a3:5f:7f:8c:a1:72:fa:00:39:c4:68:9f:9f:
3f:91:73:21:b6:22:28:31:2a:03:92:89:ed:a1:ec:c9:ee:e2:
2a:69:55:70:2e:10:86:99:c0:f4:80:e7:6c:97:be:04:01:ab:
8c:0f:2f:0b:c1:45:9a:24:98:ba:f1:d6:c9:e9:0e:69:31:dc:
cb:0c:d3:7c:bd:fc:78:cd:b5:7d:2f:32:ae:50:6c:50:7d:85:
2f:a0:55:ed:81:27:aa:7c:a0:f6:38:a8:81:d5:a6:3a:9e:1b:
cb:af:0b:71:a2:82:59:6c:54:53:b6:82:14:a9:7f:52:e8:21:
f9:6f:4c:7d:64:18:ef:55:41:70:12:ed:6c:3f:53:c0:0c:7d:
fe:66:f5:8b:45:f1:e8:8b:89:27:62:b6:af:dd:39:67:56:aa:
2e:82:bb:43:f8:38:ca:58:ac:ce:35:bd:ea:f8:ac:7c:08:9b:
c7:77:92:42:b7:dd:d3:b4:f2:80:14:77:fd:2e:46:b5:b1:c7:
6a:10:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:08 2024 by rpki-client on console-fra.rpki-client.org