Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/lVMQPUz8RdxRz-LddkvGtd2-dc4.roa
File: lVMQPUz8RdxRz-LddkvGtd2-dc4.roa (raw, json)
Hash identifier: okguOGmX0nP3G7k5z1NgOLLnfljs+0SoWYGKtHiDnUE=
Subject key identifier: 95:53:10:3D:4C:FC:45:DC:51:CF:E2:DD:76:4B:C6:B5:DD:BE:75:CE
Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Certificate serial: 018D1880B7B86093632F7F5CCB0174117E00
Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/lVMQPUz8RdxRz-LddkvGtd2-dc4.roa
Signing time: Wed 17 Jan 2024 17:38:25 +0000
ROA not before: Wed 17 Jan 2024 17:38:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.208.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 13:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:80:b7:b8:60:93:63:2f:7f:5c:cb:01:74:11:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4
Validity
Not Before: Jan 17 17:38:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9553103d4cfc45dc51cfe2dd764bc6b5ddbe75ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:79:9e:db:59:79:95:51:dd:fc:b7:c3:63:
54:06:ee:09:58:20:9b:c1:32:1e:63:17:52:c9:ba:
5a:4c:dc:cd:c7:dc:40:9b:3e:2e:79:da:a2:5d:fb:
62:9e:73:3d:cd:3e:68:a3:45:a5:43:18:48:1f:07:
30:cf:dd:27:87:fb:07:09:fc:bf:14:d5:9e:69:77:
c0:cd:b2:89:5d:b2:02:fe:96:99:32:96:df:2c:9d:
07:2c:91:3f:8f:52:25:e5:96:08:66:02:5f:af:18:
0e:3c:07:82:ba:ec:5e:48:60:d3:3a:d6:0b:84:3f:
c9:0b:b3:1e:9b:94:55:e5:2b:90:86:39:c4:49:b2:
63:2d:02:fb:aa:19:fb:cf:8d:e0:68:87:6c:10:b4:
8f:e4:99:cb:43:46:3c:66:da:0e:ec:08:a7:7c:7c:
cd:0d:83:46:83:59:9f:39:a4:72:25:7e:46:24:e6:
1c:b7:d8:53:1f:b5:96:88:10:69:30:b0:9b:c8:e1:
93:e5:6f:b5:c3:51:ba:26:91:8a:1a:0d:c5:18:33:
b7:41:7c:93:ef:30:03:21:90:62:26:97:4f:e1:65:
38:e3:dd:9f:55:3a:4f:67:32:5d:22:82:e8:70:93:
f7:9a:cc:15:47:0c:d1:25:e5:90:93:5b:14:2d:a3:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:53:10:3D:4C:FC:45:DC:51:CF:E2:DD:76:4B:C6:B5:DD:BE:75:CE
X509v3 Authority Key Identifier:
keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/lVMQPUz8RdxRz-LddkvGtd2-dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:44:a9:18:81:8e:83:fd:f0:ea:f9:15:00:06:d5:cd:05:ea:
f3:84:ed:a5:d5:29:c8:b1:14:39:dc:2a:a9:3e:4b:67:87:30:
ad:cf:e1:75:07:92:5d:4c:58:28:1e:3b:05:58:ee:ca:35:6f:
a1:e6:88:0f:ae:20:c5:2a:1a:20:c6:15:b4:c7:f8:52:18:d1:
8d:ef:eb:0a:50:94:2e:0b:99:b4:cd:55:5c:4c:04:a3:d5:15:
92:4e:8d:5a:44:a9:eb:14:c5:e9:6d:e4:2c:ab:2c:04:18:77:
0b:27:be:c7:26:25:ea:71:d0:74:48:f2:df:3a:02:88:6a:8b:
f2:44:70:03:61:82:40:a7:1d:83:fb:ca:74:0b:c6:24:e6:61:
cd:9e:a0:38:61:d1:b4:1c:c5:fd:25:80:be:81:eb:ba:6c:c6:
ad:25:12:cf:8b:4e:ba:b9:6d:43:a5:36:d2:5e:64:72:21:aa:
b5:f3:78:3e:c3:90:b4:f4:cb:9f:1e:45:6f:e7:48:ba:69:54:
f9:b2:73:c0:cc:3c:4e:de:96:6a:dd:1a:e6:01:b6:6e:57:2d:
79:7b:eb:9e:69:55:80:56:13:7c:2e:8b:33:3c:93:2b:62:77:
4f:c9:d8:10:53:7e:74:93:61:8e:e1:ab:b5:d1:7d:8b:2e:db:
ea:a3:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:24 2024 by rpki-client on console-fra.rpki-client.org