Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/e3vcOTpflq3psvYMosY3o5pmdwo.roa
File: e3vcOTpflq3psvYMosY3o5pmdwo.roa (raw, json)
Hash identifier: pEZw+veTzhgsy7J2Fq+g9nmqrstNtQukoh5XU2A6CHc=
Subject key identifier: 7B:7B:DC:39:3A:5F:96:AD:E9:B2:F6:0C:A2:C6:37:A3:9A:66:77:0A
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0185E929914FF115E517417ACBC7CADE3980
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/e3vcOTpflq3psvYMosY3o5pmdwo.roa
Signing time: Wed 25 Jan 2023 13:41:33 +0000
ROA not before: Wed 25 Jan 2023 13:41:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 91.243.191.0/24 maxlen: 24
94.158.22.0/24 maxlen: 24
94.158.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 10:45:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:29:91:4f:f1:15:e5:17:41:7a:cb:c7:ca:de:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 25 13:41:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b7bdc393a5f96ade9b2f60ca2c637a39a66770a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:c0:1b:d9:57:58:51:9e:90:a0:ef:5b:cd:
39:67:fc:d5:ec:75:08:bd:a6:08:32:71:79:2d:30:
fa:9c:a2:e9:2b:f4:d3:05:86:bd:94:15:dd:b3:6c:
e6:ff:d9:6b:dc:b0:4c:3c:91:a7:4a:38:3a:cd:16:
c5:92:f2:6d:93:26:58:45:9e:47:4e:ee:94:31:6c:
14:aa:72:37:d3:c3:c3:c9:db:1c:25:31:c0:32:31:
ec:43:85:39:91:f4:32:be:9a:00:81:59:c5:57:7d:
99:d9:95:c2:ca:cb:b7:79:99:f1:80:99:8d:58:38:
a9:7b:1c:37:1e:34:82:23:fd:d9:3d:d8:72:f0:4f:
28:f1:e6:41:4b:01:4d:45:9e:93:1e:b5:93:14:89:
dc:e7:0c:6d:da:71:0c:d4:1d:45:75:ff:8c:69:96:
35:ec:ab:a1:5a:9d:d0:00:ee:0c:07:65:ce:41:41:
7b:de:90:c8:2c:f9:ac:cd:c7:9d:a6:c5:7f:4a:44:
5c:eb:15:20:4d:02:bb:e7:65:7c:48:5b:35:08:3d:
93:f4:f4:0e:c5:cd:ac:ae:61:d8:65:91:5d:39:35:
da:20:18:53:34:fe:b0:f3:26:92:15:c4:3f:0c:75:
8b:bb:0d:af:ae:4f:c7:90:81:f6:87:fb:8e:ec:5c:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7B:DC:39:3A:5F:96:AD:E9:B2:F6:0C:A2:C6:37:A3:9A:66:77:0A
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/e3vcOTpflq3psvYMosY3o5pmdwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.191.0/24
94.158.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:00:57:8a:51:42:fd:22:77:64:38:54:1d:ff:d4:81:89:4b:
2d:09:5e:89:7d:d0:eb:51:ec:19:61:68:e9:31:7b:c0:67:98:
10:b6:73:bc:9a:ab:c1:ea:b6:d9:6b:6b:f9:b4:e1:61:e6:00:
40:d2:15:67:22:5f:a0:6d:81:72:71:5e:bd:44:ae:09:c7:c3:
03:fe:f3:b2:f7:85:71:d7:ff:73:eb:df:3a:0c:f2:6b:1a:30:
aa:b9:48:a5:cf:64:54:cb:53:49:a8:d4:7c:9c:d1:de:25:58:
10:79:d3:32:e1:18:11:47:d7:80:68:2c:a0:66:e0:a7:f9:1a:
57:2e:d6:87:33:5f:43:27:d0:ee:1e:0c:f3:0a:a8:c9:8e:31:
b2:21:46:a9:cb:ec:18:74:d8:ca:15:42:50:ba:ea:a3:77:a5:
67:5a:b1:15:4e:2b:5e:4f:a1:1d:cb:09:53:ce:85:42:41:fd:
2c:69:d1:45:78:71:a6:86:8b:f8:fd:1b:17:95:79:9b:49:ac:
a1:75:1e:e8:ce:20:70:10:69:49:9c:e1:e8:81:a7:be:f6:3e:
9b:1e:d6:7e:4a:1b:fa:27:50:b5:ca:c6:22:af:8f:43:17:eb:
99:79:a9:34:9e:30:fa:53:72:1a:88:40:cf:2e:21:be:6c:77:
fa:b7:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:46 2024 by rpki-client on console-ams.rpki-client.org