Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/xih895GR4FiR7_-1pVP0I7NeovQ.roa
File: xih895GR4FiR7_-1pVP0I7NeovQ.roa (raw, json)
Hash identifier: UG9IgbjqimuPTJXu/YYNQeOCNUAupFXz68P7zTmcA7E=
Subject key identifier: C6:28:7C:F7:91:91:E0:58:91:EF:FF:B5:A5:53:F4:23:B3:5E:A2:F4
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 018F4F8B8D6E376059A7AB53E98DD7FD86D8
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/xih895GR4FiR7_-1pVP0I7NeovQ.roa
Signing time: Mon 06 May 2024 20:14:56 +0000
ROA not before: Mon 06 May 2024 20:14:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 45.91.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 21:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4f:8b:8d:6e:37:60:59:a7:ab:53:e9:8d:d7:fd:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: May 6 20:14:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6287cf79191e05891efffb5a553f423b35ea2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:c3:8e:eb:01:30:24:0d:e3:e7:16:35:7f:
d4:40:48:c3:73:b6:75:2f:83:42:22:8b:4b:32:30:
fa:5d:af:ea:68:a7:4c:6b:f6:12:93:b4:8a:37:23:
2a:8a:84:83:79:72:d6:1d:36:f3:7a:a1:f0:76:46:
08:a6:57:14:f9:ae:2f:82:eb:24:93:e9:c1:e6:cd:
aa:86:42:3d:d8:38:67:0d:ac:df:97:d6:f4:19:7e:
28:c1:a9:83:0d:9d:a2:83:61:46:34:e7:14:20:63:
d6:d4:5c:a5:3a:d0:fa:46:fb:a8:a8:2f:6e:88:a6:
7a:1e:f0:bb:2e:da:ad:39:36:93:39:a9:58:7c:c7:
03:5b:d4:e9:06:4e:69:55:ba:53:27:c0:82:b2:7e:
b1:9b:97:2c:c0:84:66:2f:7a:8c:4a:d8:c9:88:b1:
94:1a:d4:a0:63:97:6f:c3:d2:de:25:94:6d:c0:e1:
ce:d0:1b:38:d4:83:54:a7:40:c3:95:2a:3e:ff:a2:
65:1e:09:ad:16:79:bf:68:bc:0f:7d:90:1b:ce:6c:
12:d7:91:d8:f8:f8:54:0f:e2:cf:20:5e:61:af:11:
96:19:5b:45:3d:43:63:46:59:50:3e:d0:1e:82:55:
0c:7c:95:62:c6:f2:d2:94:f3:3d:ba:b3:db:42:07:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:7C:F7:91:91:E0:58:91:EF:FF:B5:A5:53:F4:23:B3:5E:A2:F4
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/xih895GR4FiR7_-1pVP0I7NeovQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:dd:b5:ac:f8:06:8a:dc:1e:d0:9e:3b:91:90:bc:8c:c7:d4:
4e:66:86:0d:75:18:49:e0:ca:b8:d1:e4:8a:85:50:ac:c4:9f:
61:b4:12:d3:42:c9:cf:48:b9:d0:69:68:07:a6:06:36:5c:03:
09:1c:3b:97:d3:20:da:b8:75:5f:1f:38:d5:81:82:22:47:ee:
0b:46:10:78:1f:fd:02:cb:b3:1e:b5:de:9e:a7:60:a3:9d:7d:
1a:49:47:cf:42:77:d7:b2:06:e8:1b:07:39:e5:93:51:3c:ef:
fe:39:4f:db:52:31:e0:71:a0:08:f5:47:4a:50:32:69:1a:dc:
73:23:08:7a:a6:bd:bc:29:c9:8d:23:93:c9:16:d4:39:6a:f4:
da:2a:ee:a8:a0:d5:ae:08:09:d4:76:7f:93:83:a8:69:28:bf:
df:cb:fb:cb:c4:b7:93:b6:87:ac:2b:af:88:e1:6d:31:4a:4b:
b0:a5:17:78:43:0a:07:da:a2:4d:64:c8:8c:a5:1e:ad:fe:7f:
19:2b:41:6c:ec:fe:e2:8b:4b:f0:59:db:b1:14:74:60:12:7d:
66:83:c2:98:13:92:e1:7c:e6:ed:43:08:bd:ce:50:14:6e:b5:
ca:b7:ad:ad:72:84:84:3a:32:dd:d2:6f:79:55:75:cb:47:3c:
dd:0f:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org