Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/9G536wjivgL8zKoYnntLN8e8Gyk.roa
File: 9G536wjivgL8zKoYnntLN8e8Gyk.roa (raw, json)
Hash identifier: cazuA94p+skocHIMEhrKoI0zsz6+YUZHKIRwVrQlBXM=
Subject key identifier: F4:6E:77:EB:08:E2:BE:02:FC:CC:AA:18:9E:7B:4B:37:C7:BC:1B:29
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 018B5F199D6084C7B7E92E7B47C5EDA0B4B3
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/9G536wjivgL8zKoYnntLN8e8Gyk.roa
Signing time: Tue 24 Oct 2023 00:33:16 +0000
ROA not before: Tue 24 Oct 2023 00:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16246
IP address blocks: 91.222.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5f:19:9d:60:84:c7:b7:e9:2e:7b:47:c5:ed:a0:b4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Oct 24 00:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f46e77eb08e2be02fcccaa189e7b4b37c7bc1b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0c:b7:f7:07:29:bf:7a:5f:cd:11:c5:8b:1a:
ac:35:29:ef:73:04:13:fb:4c:d1:24:33:cc:4a:1e:
9c:99:f3:ad:b2:ed:7f:84:bb:f7:26:e5:41:ca:93:
18:55:95:03:5c:67:b8:02:de:5d:46:37:f0:d4:33:
6f:60:98:f7:2a:9e:29:13:eb:68:9f:cd:20:c3:f0:
94:90:7d:00:7f:5f:45:38:f3:a9:c1:31:66:2b:9b:
47:25:62:e9:8c:1f:0b:27:23:c5:27:ac:98:43:62:
6f:63:ab:45:01:36:3e:e0:53:95:cd:40:95:56:30:
5e:7e:4f:29:8b:e9:12:53:82:10:46:b2:67:69:69:
7d:05:b3:45:f8:fa:d9:76:84:8c:70:3a:dd:15:0a:
f6:93:66:79:7c:5b:fd:d2:21:91:63:55:4d:d2:49:
8b:e0:ce:96:74:dd:a0:af:a6:ee:b2:80:64:b8:75:
54:f1:f2:5c:57:02:17:86:0b:28:73:0c:97:b6:cf:
ed:59:d0:c8:fc:00:fe:56:70:41:af:b3:c7:2d:40:
0e:92:6c:ba:10:b6:89:f0:9e:ba:cd:82:05:92:c9:
0a:d9:7e:f6:d3:2e:19:52:dc:da:29:7d:34:fa:e0:
38:0c:e9:cb:07:a9:59:d2:55:fe:8b:e7:4d:a9:a5:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:77:EB:08:E2:BE:02:FC:CC:AA:18:9E:7B:4B:37:C7:BC:1B:29
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/9G536wjivgL8zKoYnntLN8e8Gyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.52.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:67:31:67:2e:aa:96:85:23:e8:36:c4:9d:e9:17:2f:3c:b1:
09:1a:93:c5:d6:d1:4e:54:70:99:5d:6f:c0:d8:d6:13:02:7d:
c0:9c:2f:f2:b8:8b:89:77:e8:cb:32:dc:18:86:1c:1d:eb:73:
b1:af:f6:80:dc:0d:66:31:60:9c:e1:f0:b8:52:a7:32:18:6a:
6e:b8:57:44:8c:a4:6b:26:17:b0:33:c7:98:fb:fa:56:ef:02:
b1:56:c8:66:9a:2e:f3:23:78:be:61:9f:86:c9:17:6b:f1:2c:
3f:2d:e4:42:d6:ca:4b:67:35:7b:87:34:c8:40:21:71:e9:e5:
ee:3d:0f:3c:01:c3:94:2f:11:ea:bb:84:ba:13:01:7c:c1:8d:
2e:9c:9b:88:56:d1:cb:48:72:6f:bd:20:d7:ce:17:60:b7:99:
c5:1b:fd:91:59:c3:46:6f:91:e9:b1:e3:86:8a:dd:97:86:7e:
8f:5e:f4:c6:39:80:b9:de:63:81:b1:34:2c:4f:8d:75:c7:c3:
7a:97:f6:6f:fd:09:a4:9c:9c:ba:6d:c8:f0:f6:d3:9a:7b:db:
dc:a8:4a:9b:ae:ba:e6:64:bf:ab:33:fc:8c:c1:84:d1:36:5d:
4f:54:c6:25:a9:2c:98:50:35:cb:99:6f:2d:13:6c:19:83:9b:
2b:0c:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:45 2024 by rpki-client on console-fra.rpki-client.org