Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/E6t8FwR1MVf5D37EFTh7JdGKGlM.roa
File: E6t8FwR1MVf5D37EFTh7JdGKGlM.roa (raw, json)
Hash identifier: qgybn3Qpg7fWk18vGuhBMEVrbbOdL2xOfq6Aew8h4qg=
Subject key identifier: 13:AB:7C:17:04:75:31:57:F9:0F:7E:C4:15:38:7B:25:D1:8A:1A:53
Certificate issuer: /CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Certificate serial: 0190F4EBE337E75F8DCD057B54AFAB534391
Authority key identifier: DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/E6t8FwR1MVf5D37EFTh7JdGKGlM.roa
Signing time: Sat 27 Jul 2024 16:00:18 +0000
ROA not before: Sat 27 Jul 2024 16:00:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50057
IP address blocks: 91.223.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:eb:e3:37:e7:5f:8d:cd:05:7b:54:af:ab:53:43:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcded3ea3ba673a808cf5e6adcb51ea7f33f4203
Validity
Not Before: Jul 27 16:00:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13ab7c1704753157f90f7ec415387b25d18a1a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:db:6e:80:5c:f4:cc:a2:28:62:1a:e6:b6:
9f:44:04:bb:c6:4e:15:9b:5b:92:6d:ed:32:13:07:
8f:64:34:c2:f7:10:ee:9e:31:2c:d7:43:d5:fb:d9:
c9:92:c9:00:a9:2f:de:17:0b:9e:08:84:0c:69:e5:
03:8c:3c:68:85:74:f7:26:40:71:a5:87:a3:9f:1c:
77:f3:b3:b0:0b:8a:b3:70:e6:b7:92:b0:ad:b4:bc:
8a:67:4e:00:db:94:3e:53:86:d3:46:8b:72:0d:7d:
0d:6e:5a:86:46:b7:01:0a:ab:bf:be:17:d9:11:5a:
8e:bc:06:0e:71:ba:c2:95:45:bd:ef:85:9b:34:03:
43:39:30:1d:c5:9a:b5:86:d7:5a:71:b6:ef:85:3a:
b1:d4:d4:48:14:50:53:96:b4:4a:0b:23:cc:18:c4:
33:ac:98:4f:97:08:83:f3:a4:85:58:16:fd:40:b4:
ce:80:a6:50:e2:d9:46:31:aa:e5:08:67:6b:20:a6:
3c:bf:27:4e:bf:e5:a2:d7:70:a6:d6:3d:fd:c9:a0:
ad:5f:15:db:0c:a2:aa:e8:3e:b2:5a:73:77:ee:b7:
91:05:0c:fd:bd:79:f2:68:66:9e:87:02:da:72:e5:
80:14:40:bd:27:c6:eb:54:82:7b:0a:54:56:ab:bb:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:7C:17:04:75:31:57:F9:0F:7E:C4:15:38:7B:25:D1:8A:1A:53
X509v3 Authority Key Identifier:
keyid:DC:DE:D3:EA:3B:A6:73:A8:08:CF:5E:6A:DC:B5:1E:A7:F3:3F:42:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3N7T6jumc6gIz15q3LUep_M_QgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/E6t8FwR1MVf5D37EFTh7JdGKGlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa39bc-5fa7-4fc1-81ec-15730e246ba6/1/3N7T6jumc6gIz15q3LUep_M_QgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:02:c1:a4:03:91:87:bf:25:24:dd:5e:64:11:d9:83:bf:0b:
58:1c:5e:9d:22:14:58:7c:80:b7:7b:70:f0:dd:77:fc:2a:17:
41:d8:75:97:db:2b:14:85:fa:c8:0b:32:b3:9a:f8:8e:ed:ea:
50:23:dc:cc:cd:4f:81:06:43:01:20:49:6b:65:66:25:6f:e5:
74:c1:a1:ae:19:fe:2c:60:42:72:39:be:bd:10:97:4e:c4:dd:
54:24:2f:93:57:76:a7:c0:fd:a4:ec:44:aa:d6:cb:4c:d8:7b:
5b:5d:d7:96:9a:74:64:3b:cf:c4:64:5b:5c:35:61:3d:b3:d6:
04:10:6b:2e:a7:0e:8a:72:8b:9a:4d:ed:a7:27:f4:43:f8:67:
4f:81:52:ea:78:04:4d:e1:40:b7:77:41:74:38:ef:f6:a6:9b:
f6:54:ee:13:16:2e:a1:8b:f6:97:6e:4d:48:be:73:fb:00:6a:
fa:f2:33:b7:0c:5f:b0:37:23:f6:7e:f6:67:23:6c:26:19:e0:
40:ca:5e:d0:b5:6e:53:01:74:90:f7:33:c8:7d:9d:ac:bb:e8:
29:0b:c7:d6:2f:89:6a:05:2f:25:7f:6e:38:85:e3:e1:64:9a:
18:8b:d5:ac:b0:ce:d7:2c:f3:69:ff:89:e2:f1:8f:90:77:fa:
a8:c5:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 09:31:53 2024 by rpki-client on console-ams.rpki-client.org