Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/m_296Th24D7LQ3bWW9pcLndDHRw.roa
File: m_296Th24D7LQ3bWW9pcLndDHRw.roa (raw, json)
Hash identifier: eddo9xWc7KE+yv0MIhl6ZNCtOyiGGJD68lquPTuyEIc=
Subject key identifier: 9B:FD:BD:E9:38:76:E0:3E:CB:43:76:D6:5B:DA:5C:2E:77:43:1D:1C
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 01856BDC8FCFF77CAAF1FCD3B1189F613DA3
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/m_296Th24D7LQ3bWW9pcLndDHRw.roa
Signing time: Sun 01 Jan 2023 05:44:54 +0000
ROA not before: Sun 01 Jan 2023 05:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56818
IP address blocks: 91.227.254.0/24 maxlen: 24
192.162.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:8f:cf:f7:7c:aa:f1:fc:d3:b1:18:9f:61:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Jan 1 05:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bfdbde93876e03ecb4376d65bda5c2e77431d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:27:02:c1:59:cf:6c:ed:7a:7f:3c:f4:d4:
b2:f3:9f:32:92:28:a0:ee:f6:73:0e:0f:fe:b3:c4:
41:29:28:b5:a5:f4:fb:81:ed:b5:67:54:df:cd:75:
4a:e6:a4:1c:c1:96:05:f9:e1:3b:bf:5c:7c:4a:6b:
88:a7:45:18:21:07:08:88:b5:33:64:e4:ed:1b:8d:
35:a6:ac:91:a8:c7:3f:a8:06:72:08:93:95:ff:ef:
c2:39:69:79:39:f3:26:ff:a1:2a:14:3e:ad:25:77:
62:10:d3:b1:5d:7a:06:08:b7:6f:17:29:d4:99:02:
54:71:19:04:87:b9:e2:88:8f:8a:ee:93:5b:ce:3e:
c7:c4:f8:78:5d:69:c5:ce:3a:b1:1d:31:9d:ea:75:
52:9f:cf:9c:74:d6:70:23:a3:9a:95:7b:bc:6a:c2:
5a:e7:de:8b:46:7c:5f:04:81:2c:49:e8:a0:c3:31:
a2:75:06:57:cb:5c:4a:d5:ee:04:26:20:45:55:3d:
86:00:6e:6b:24:54:7d:dc:62:15:9c:77:c5:1e:0b:
b7:15:95:e5:d6:0c:36:da:32:ea:91:41:46:2b:9a:
23:74:4e:67:74:98:69:5d:23:59:f7:bb:6d:bc:31:
3f:3b:a4:a1:b3:5e:5d:48:28:5a:5a:43:6c:17:5a:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FD:BD:E9:38:76:E0:3E:CB:43:76:D6:5B:DA:5C:2E:77:43:1D:1C
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/m_296Th24D7LQ3bWW9pcLndDHRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.254.0/24
192.162.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:47:df:1f:af:9b:a8:91:50:a1:80:5e:9c:e8:97:bb:53:2a:
cc:42:67:35:37:83:b3:b9:a8:b5:14:91:29:4d:bd:8e:a0:4e:
5e:d7:1f:45:a5:7e:41:a2:ab:8c:6d:d1:b1:b1:51:74:90:0c:
f0:ac:b0:7c:14:44:95:3b:c2:b3:cb:12:0f:e3:75:f6:c7:fe:
9c:b6:77:e5:3e:7b:a0:72:52:a9:82:2e:c1:05:12:fc:3d:3d:
70:8d:eb:c9:86:57:b1:fb:45:94:8e:8a:e5:6b:18:16:89:65:
82:af:78:95:e6:2c:3b:fb:03:4f:6d:fb:9c:11:15:0f:5f:37:
3c:38:7b:08:90:95:46:58:6c:9e:6b:6a:57:bd:80:0d:f1:4c:
42:e3:d3:cd:68:6c:93:fb:21:24:c7:dd:ac:67:d1:c2:fc:9d:
05:70:f6:42:8a:15:22:0e:90:3a:7c:9e:12:3e:49:df:a1:86:
5c:34:7f:8e:e9:51:61:fd:12:2b:b5:a5:01:1c:f9:5f:d2:4e:
2f:71:9e:da:d4:88:17:9b:d7:f3:0a:78:09:b6:d2:ac:7b:4f:
c6:0e:14:6e:65:4f:56:8d:fc:2d:3b:b2:ff:39:87:92:d4:82:
2c:af:b1:fe:d5:58:b7:44:83:3f:3e:4d:61:d2:c9:a1:5e:0b:
55:ed:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org