Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/aX-e5UGupf0jdXpXg6d9kOSh8BU.roa
File: aX-e5UGupf0jdXpXg6d9kOSh8BU.roa (raw, json)
Hash identifier: n+yMYSiYYTrxQazYed412UPOYMEF8hOEBqy3PSMSGXU=
Subject key identifier: 69:7F:9E:E5:41:AE:A5:FD:23:75:7A:57:83:A7:7D:90:E4:A1:F0:15
Certificate issuer: /CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Certificate serial: 01856FA7257582CF19D6F651D715578C7742
Authority key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/aX-e5UGupf0jdXpXg6d9kOSh8BU.roa
Signing time: Sun 01 Jan 2023 23:25:02 +0000
ROA not before: Sun 01 Jan 2023 23:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206012
IP address blocks: 91.198.46.0/24 maxlen: 24
185.90.224.0/22 maxlen: 22
91.192.96.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:25:75:82:cf:19:d6:f6:51:d7:15:57:8c:77:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Validity
Not Before: Jan 1 23:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=697f9ee541aea5fd23757a5783a77d90e4a1f015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:88:4f:9d:8c:05:85:34:90:78:16:07:dd:
39:29:e5:53:5f:a0:28:b4:29:f3:f4:d1:37:73:e9:
08:e3:9e:07:4d:be:4e:71:ee:ba:04:69:cc:59:1b:
09:48:9c:dc:31:9e:b3:4c:c8:3e:05:ea:de:9a:19:
d5:6c:34:7b:98:b9:fb:4e:39:bd:8a:a9:36:00:f0:
f3:54:4a:0b:a5:c8:58:3c:55:6c:e8:65:9c:17:0f:
6b:07:ba:45:76:34:91:91:06:4d:33:87:f4:f4:9c:
ba:fd:59:58:10:56:7a:42:44:25:f3:bb:f7:ff:df:
7d:42:a7:18:0b:ab:a7:1c:50:df:86:fb:86:37:1e:
7b:fc:1c:3f:ca:e8:2b:ab:94:05:53:b1:b9:74:a4:
6e:75:03:ea:f3:7f:a9:ea:12:d4:7b:a3:da:7c:6a:
4a:c2:82:75:f2:91:9a:3f:5f:c6:b2:25:b1:b2:9f:
b7:a3:af:e1:c0:ad:a3:74:05:bb:bc:90:fc:0a:d6:
47:55:46:4f:20:33:ef:ae:97:e5:80:d7:f1:8d:ba:
2e:c4:d2:34:f2:3c:63:f9:37:a9:49:01:58:00:c3:
54:7b:8f:b8:21:ad:14:ba:7a:95:87:d3:3a:3f:c2:
e5:ae:74:58:14:06:34:da:c9:3b:6d:c3:1b:b4:8f:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:9E:E5:41:AE:A5:FD:23:75:7A:57:83:A7:7D:90:E4:A1:F0:15
X509v3 Authority Key Identifier:
keyid:46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/aX-e5UGupf0jdXpXg6d9kOSh8BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.96.0/22
91.198.46.0/24
185.90.224.0/22
Signature Algorithm: sha256WithRSAEncryption
47:51:c5:8b:0c:dd:aa:a5:ff:a7:a7:f1:64:c9:77:17:1b:f6:
3d:a8:2e:7b:c6:2a:a1:af:0c:c8:e4:d7:27:fa:8a:95:d9:97:
c7:88:8d:81:47:cd:6f:ff:d8:cb:70:f7:59:61:e9:a2:45:8d:
af:4a:80:99:44:9a:9d:bd:91:3e:61:8b:2d:df:81:64:af:dc:
83:44:c3:49:7a:cf:c2:e9:5a:51:7f:80:d7:75:0a:18:0e:9f:
6a:e1:8d:b2:c8:31:4e:44:c3:dd:da:46:e3:27:3f:50:e7:41:
12:24:59:d8:5e:94:db:36:73:cf:13:2d:52:4c:c6:ba:10:f7:
41:f7:47:c2:bf:15:56:a2:5a:7c:a0:19:5d:12:30:36:20:b1:
74:d2:69:7d:09:b0:37:d4:72:cd:25:47:2a:16:e2:0f:b6:2c:
cc:d9:d8:57:18:65:df:13:99:8c:dd:60:46:45:fe:12:e9:01:
d9:db:34:d2:72:23:96:9c:6e:ef:47:7d:f6:46:ab:ff:f4:60:
d7:cd:cc:75:ec:1a:f0:8e:4e:35:e2:d8:31:b9:57:b7:ff:b1:
8f:38:7b:67:7c:fb:4d:4b:7b:1c:14:c8:c7:c6:5d:c2:b9:a3:
2b:90:b4:fc:c2:45:dc:c8:16:0c:28:ee:6d:a0:b2:81:c1:bf:
9d:bf:f9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:52 2024 by rpki-client on console-fra.rpki-client.org