Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2oXlixRRYmdwo5YrtAsvVbGuqHA.roa
File: 2oXlixRRYmdwo5YrtAsvVbGuqHA.roa (raw, json)
Hash identifier: g9NOuqHZVgnGkHAHuMxHAZOqzfeYRSPEBe5XQdgNDEQ=
Subject key identifier: DA:85:E5:8B:14:51:62:67:70:A3:96:2B:B4:0B:2F:55:B1:AE:A8:70
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DC2804444357EBE06B90D25193471CF1A
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2oXlixRRYmdwo5YrtAsvVbGuqHA.roa
Signing time: Mon 19 Feb 2024 17:53:22 +0000
ROA not before: Mon 19 Feb 2024 17:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 91.220.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:80:44:44:35:7e:be:06:b9:0d:25:19:34:71:cf:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 19 17:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da85e58b1451626770a3962bb40b2f55b1aea870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a4:ed:92:25:bb:db:3f:6d:90:17:a7:ed:bb:
75:e9:2e:da:f6:6d:76:0d:f8:0a:1d:2a:99:ff:2c:
de:97:93:0b:e8:c0:28:cd:92:de:c4:66:1a:83:8f:
2a:55:36:6f:a5:50:77:c7:e5:89:a9:f2:34:04:20:
d9:c1:00:bb:4f:a3:96:26:58:1b:f6:41:8b:e4:e2:
58:29:4f:b2:aa:43:a9:73:7d:1a:6b:26:19:e6:cd:
97:e1:ab:4f:43:54:f9:82:d5:de:ea:f3:6b:3f:27:
e7:66:bf:37:51:55:4e:b1:90:b8:6d:e2:9b:25:4f:
a1:00:1e:ab:a0:6e:31:c2:0f:bf:9b:66:64:19:5d:
19:3e:56:32:ee:c0:7c:62:6b:b4:c7:29:b4:44:f5:
f9:eb:55:b1:9b:36:da:66:a0:71:20:f9:db:1a:69:
60:5d:d0:02:a6:b2:54:df:ec:53:43:a2:26:95:79:
ea:58:0a:e7:0f:c8:da:2a:9b:af:8c:69:4a:4c:e1:
fd:2b:09:5c:bd:f5:29:5a:55:c0:ae:c5:1a:b2:24:
4a:51:07:ac:f4:d0:54:16:2f:21:17:10:43:b3:7d:
9d:d7:67:4d:bb:b6:1e:1c:c8:26:e4:dd:f4:f4:dd:
6b:d7:59:a2:42:29:36:9f:f2:45:55:ca:17:5d:14:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:E5:8B:14:51:62:67:70:A3:96:2B:B4:0B:2F:55:B1:AE:A8:70
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/2oXlixRRYmdwo5YrtAsvVbGuqHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:11:b4:32:41:da:09:28:cb:70:15:c4:6a:3b:68:2a:09:d2:
08:c1:f8:98:b1:95:ca:b0:23:5b:23:f0:b6:35:5a:53:b9:74:
7a:86:9b:fc:42:3d:7c:85:78:84:53:c4:f1:95:ed:55:f9:78:
86:7a:f3:ef:6e:55:82:ab:8b:ff:e5:cb:4e:7f:bf:82:b4:3c:
30:bf:3c:8a:39:2c:e4:5f:53:5c:cf:42:f1:a7:a0:d4:0f:d1:
cf:7b:4f:d5:51:00:35:36:99:a4:b4:f5:93:eb:e3:bb:05:44:
2e:7e:19:16:5a:09:46:1e:c2:b1:70:03:0c:6a:3b:64:e7:5b:
1a:2c:df:e8:10:44:0b:21:55:db:ed:8b:a3:8f:ed:6c:82:c0:
12:cb:22:d3:58:3e:cb:b0:ce:da:57:53:c0:be:d2:fd:36:85:
03:66:84:7e:90:36:6e:2d:a6:e2:13:e9:7f:23:23:19:ed:d3:
34:6f:1b:76:3a:1b:4d:05:4b:fc:6b:0c:bf:8f:62:8d:dc:69:
9d:f7:8f:fb:54:b9:42:dd:f5:78:57:92:21:4b:69:ea:b7:fe:
89:fd:f1:04:40:02:2b:87:6f:0f:30:2b:e1:7c:a6:41:a0:6c:
48:19:00:15:99:e5:9c:51:be:19:75:ce:91:74:13:d9:27:ed:
c3:15:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:22 2024 by rpki-client on console-fra.rpki-client.org