Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/3KzRAn_ZzA9wX9zPL-0aciNEKuY.roa
File: 3KzRAn_ZzA9wX9zPL-0aciNEKuY.roa (raw, json)
Hash identifier: b8dmF3RLPIL0huyRhx5EyGHHZ5PYn/9aC9U64sRG2WU=
Subject key identifier: DC:AC:D1:02:7F:D9:CC:0F:70:5F:DC:CF:2F:ED:1A:72:23:44:2A:E6
Certificate issuer: /CN=25dd9b849c0dafae386f470123b09261ae355517
Certificate serial: 01856C6EFD783B0908FD109E8BCEB94058F9
Authority key identifier: 25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/3KzRAn_ZzA9wX9zPL-0aciNEKuY.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51323
IP address blocks: 91.203.104.0/24 maxlen: 24
185.31.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fd:78:3b:09:08:fd:10:9e:8b:ce:b9:40:58:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd9b849c0dafae386f470123b09261ae355517
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcacd1027fd9cc0f705fdccf2fed1a7223442ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:c9:0d:bb:00:db:8a:4f:68:c4:52:a8:06:
03:b4:01:f5:94:93:03:66:c3:d3:f6:92:6b:3b:1e:
49:ab:d1:02:1f:10:b1:fb:bb:91:85:95:1f:b6:89:
b8:33:de:55:e9:6d:39:1f:55:3e:81:6e:1a:ed:f7:
e9:bb:20:06:69:36:7b:3f:2f:4d:d8:8b:3d:e1:2e:
f2:c1:98:a8:b6:64:60:04:08:c7:e9:69:66:44:35:
67:98:f3:cb:f7:bc:22:87:41:bd:b8:3d:01:46:17:
11:3a:e4:28:59:37:3e:1b:3c:3b:9f:c6:61:cf:1d:
e8:24:6d:d7:ce:db:a2:a0:d4:ea:b4:3e:1c:36:c2:
45:4d:13:8f:79:dc:21:8d:03:56:85:24:f9:4e:6d:
88:b3:23:ed:40:27:7c:c0:f7:78:b9:0a:76:ac:15:
24:cc:1f:5e:ac:c3:f3:fb:3c:6e:7a:56:bd:f2:2d:
ee:ec:77:b3:99:52:21:d1:3d:2f:04:58:d1:a5:74:
ca:b3:e3:66:7e:e8:5a:3b:42:40:87:ae:68:8c:46:
de:55:ea:9c:a3:4b:30:95:b7:c6:6c:83:0a:b8:bb:
0d:de:11:8e:9f:dd:f8:1f:49:46:41:16:ce:52:6e:
36:b5:2a:80:da:09:8c:92:f1:4d:79:af:b8:49:93:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:D1:02:7F:D9:CC:0F:70:5F:DC:CF:2F:ED:1A:72:23:44:2A:E6
X509v3 Authority Key Identifier:
keyid:25:DD:9B:84:9C:0D:AF:AE:38:6F:47:01:23:B0:92:61:AE:35:55:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd2bhJwNr644b0cBI7CSYa41VRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/3KzRAn_ZzA9wX9zPL-0aciNEKuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d4e434-6356-46fd-8b35-7ffd5c550385/1/Jd2bhJwNr644b0cBI7CSYa41VRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.104.0/24
185.31.88.0/22
Signature Algorithm: sha256WithRSAEncryption
69:68:88:74:c5:af:a0:cb:11:b7:8b:36:07:78:44:df:2c:f6:
bc:75:59:32:00:3c:2c:bb:89:c8:d0:3f:f8:13:2b:36:fb:fe:
dd:32:2a:f0:22:d1:29:dd:af:4c:ff:33:7e:9b:c5:09:f7:c6:
6e:7b:25:f4:3c:b4:7c:a2:82:04:dd:ac:2e:a7:1a:81:be:98:
92:f3:b4:f3:20:01:54:2f:09:96:22:c4:37:f0:dc:87:cc:a3:
9c:63:93:b9:cf:b1:c9:73:8e:e9:b0:eb:11:3b:bb:08:93:cf:
fe:dc:60:49:8d:d1:0a:e6:ea:cc:44:ff:f3:56:d7:b3:ed:02:
6d:cd:d1:59:eb:ae:27:7e:0d:07:34:36:9f:d7:bc:1c:fe:f1:
dc:9d:34:26:e9:84:25:12:71:a0:c1:ce:e7:49:bf:3d:61:1c:
bc:e5:20:35:e8:04:88:d1:9b:67:a3:39:dc:5f:48:59:4e:4e:
f4:39:c7:ec:39:ac:04:b8:eb:17:22:54:c0:06:85:a0:68:46:
62:f5:92:fc:31:71:07:61:79:76:c0:63:ab:85:5a:20:16:35:
91:71:34:54:06:47:d6:03:78:ba:34:59:cf:54:18:95:51:7c:
f1:15:f0:32:a9:c1:95:05:87:a0:a2:c4:a1:10:af:10:c4:55:
4a:a3:ef:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:50 2024 by rpki-client on console-ams.rpki-client.org