Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/XA_IaO6e1wa4uisLMRDby5A3S6Q.roa
File: XA_IaO6e1wa4uisLMRDby5A3S6Q.roa (raw, json)
Hash identifier: DPn59+1jIyX7jIiA6156JZDdPhWTUk0JJQh9YLns1ak=
Subject key identifier: 5C:0F:C8:68:EE:9E:D7:06:B8:BA:2B:0B:31:10:DB:CB:90:37:4B:A4
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018CA552D4E6322C5DCD457BD0BA7509B577
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/XA_IaO6e1wa4uisLMRDby5A3S6Q.roa
Signing time: Tue 26 Dec 2023 08:51:58 +0000
ROA not before: Tue 26 Dec 2023 08:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47122
IP address blocks: 91.214.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a5:52:d4:e6:32:2c:5d:cd:45:7b:d0:ba:75:09:b5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Dec 26 08:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c0fc868ee9ed706b8ba2b0b3110dbcb90374ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:1f:d1:fe:a1:32:f2:20:cf:ff:4a:2c:22:
65:42:81:e9:73:6c:fa:07:74:27:67:f0:3f:d2:92:
bb:e3:05:5d:6b:4d:75:b8:1b:4c:2a:8a:42:fe:9b:
dc:ef:fa:b0:a4:df:a5:93:08:16:9e:6b:01:53:99:
52:98:e4:40:13:a5:a1:dd:ee:3a:1f:21:e9:77:e3:
10:39:d7:0d:1a:39:93:f7:45:12:f8:39:46:4b:36:
79:a7:28:5f:41:65:a4:8c:93:c6:e7:fe:fc:ef:46:
64:08:03:3c:2e:bb:a0:9f:2d:7f:d5:1c:7c:b6:27:
f7:d5:d7:81:21:1c:1b:06:bc:31:29:3b:7d:36:a1:
c2:58:97:80:e5:11:6c:5d:08:5c:c4:22:2b:5b:1a:
f5:a4:2e:4b:98:c0:4b:20:34:66:70:e2:ff:43:1e:
20:8f:46:f1:06:94:a0:a6:cc:69:01:db:73:98:e4:
6e:bb:9a:5a:68:f1:24:79:a3:f8:a4:d1:72:ac:33:
38:07:1f:ed:55:e8:ad:1f:ab:fe:ad:01:56:88:9b:
59:1b:c5:a1:3f:8b:f8:4c:d9:06:86:d8:06:0c:57:
7e:82:5f:91:b0:bd:2e:fb:c0:a1:a9:3b:39:b8:c0:
e9:22:6d:a4:f8:7e:d9:ee:06:a0:8f:66:16:bb:5b:
b7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0F:C8:68:EE:9E:D7:06:B8:BA:2B:0B:31:10:DB:CB:90:37:4B:A4
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/XA_IaO6e1wa4uisLMRDby5A3S6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.119.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2c:67:29:3c:53:33:b8:ea:83:6c:80:0d:fa:1b:c1:30:dd:
54:b7:e8:3e:db:73:7b:7b:b0:1e:3b:84:00:4c:56:0d:2d:b8:
c7:df:fb:6c:66:33:04:c6:fa:dd:1f:43:f5:68:e9:33:71:a8:
21:8c:bc:32:9f:e6:4f:1d:ed:18:99:08:70:af:a8:95:41:0b:
c7:9d:1b:c6:03:fb:67:80:03:3d:f5:28:8c:21:82:ce:00:3e:
d6:52:8e:2e:96:88:00:e8:78:62:ad:82:fe:70:f2:9a:15:4d:
8f:f6:c4:52:34:c4:94:c6:d7:2c:45:04:a4:a5:9b:3a:90:76:
51:3b:17:c5:76:ef:c3:c8:b2:d2:be:0c:20:ab:b6:e8:8b:a4:
38:55:be:a9:45:54:b5:00:0f:68:a3:65:4d:5a:6d:fa:84:9a:
54:f7:36:65:e6:cd:c5:ac:1e:4d:b2:42:ae:00:dd:92:22:15:
54:95:73:81:7b:e2:1d:13:f4:90:3b:27:78:be:a1:c2:b9:76:
37:45:b3:b2:00:10:8f:4a:bb:39:02:ce:12:be:7c:ad:49:17:
21:bc:cc:7d:20:59:04:56:45:84:5c:3b:65:a4:67:41:f4:ae:
ca:d5:a8:0c:50:b3:ee:6a:56:e9:4f:a9:a7:2a:58:fe:4f:be:
4c:24:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org