Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/kGJdq_Wdqr8jaEal3-Z700c15r0.roa
File: kGJdq_Wdqr8jaEal3-Z700c15r0.roa (raw, json)
Hash identifier: HKkZmufzA9lzu4eXkIPLCk3MXF7b5Q+PuSavz5O1/1A=
Subject key identifier: 90:62:5D:AB:F5:9D:AA:BF:23:68:46:A5:DF:E6:7B:D3:47:35:E6:BD
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 01856F54757E10532ADEB5C58C8E505AD66E
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/kGJdq_Wdqr8jaEal3-Z700c15r0.roa
Signing time: Sun 01 Jan 2023 21:54:44 +0000
ROA not before: Sun 01 Jan 2023 21:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56623
IP address blocks: 91.231.55.0/24 maxlen: 24
91.231.54.0/24 maxlen: 24
193.111.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:75:7e:10:53:2a:de:b5:c5:8c:8e:50:5a:d6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Jan 1 21:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90625dabf59daabf236846a5dfe67bd34735e6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:47:91:d9:dd:b7:3b:ae:7d:14:8d:e6:8b:
f3:1b:21:46:82:a2:30:14:fd:3f:02:65:4a:8f:ab:
87:40:a5:ba:5d:2f:9f:00:64:05:64:19:0f:15:69:
9d:29:3b:a3:ae:4f:10:70:9c:5b:a6:b7:14:9c:81:
9b:e9:12:bd:b3:8d:77:5c:ab:ab:3c:b0:57:f6:f6:
60:d6:29:c0:56:33:fb:52:74:18:1d:ee:a4:7f:99:
8d:e7:7b:97:40:04:75:d8:e7:d6:3d:aa:82:1c:59:
c0:e9:4d:de:2c:d4:8c:ad:27:94:da:e9:8f:95:25:
d4:d6:bb:41:53:ee:1a:8c:98:c4:90:ff:30:44:93:
38:d2:20:f5:fa:94:9f:3d:d3:d8:05:65:17:9d:94:
10:9a:15:35:c4:ff:3d:72:68:e3:a8:2f:e1:d6:9b:
fd:43:61:0a:21:a0:47:cc:04:bb:6f:58:68:74:12:
0c:5c:11:6b:28:63:b0:9b:6d:e9:da:e5:9e:6e:3b:
e6:68:52:e8:b3:31:60:26:79:d3:c5:21:d2:38:19:
01:a7:18:3d:b4:e3:6c:56:2b:93:f4:8a:e8:e8:a3:
bd:de:6e:5b:b4:b8:eb:49:84:ef:57:e9:3e:01:34:
cd:ba:10:bb:04:51:89:3b:77:ca:79:60:72:69:1e:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:5D:AB:F5:9D:AA:BF:23:68:46:A5:DF:E6:7B:D3:47:35:E6:BD
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/kGJdq_Wdqr8jaEal3-Z700c15r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.54.0/23
193.111.83.0/24
Signature Algorithm: sha256WithRSAEncryption
47:6a:de:68:61:94:f5:17:f5:b0:58:ae:21:6b:10:84:d7:e2:
a4:7b:3a:54:98:72:87:02:de:91:aa:2c:9b:9c:ad:cc:0c:a3:
13:d6:74:04:41:40:14:39:96:da:d2:1b:90:5c:89:73:05:f0:
2f:09:9b:51:8e:ff:ad:e7:86:67:37:b4:99:9c:33:c3:6b:1c:
fa:c5:61:4e:c3:60:dc:c4:e0:93:15:5f:27:39:0a:ec:15:83:
3d:1c:a5:d0:f1:1a:59:e3:f9:2a:ca:89:a9:a3:91:da:1e:65:
3b:ef:32:f7:5a:99:e8:a5:30:40:fc:cf:73:f9:50:79:46:aa:
47:70:96:d6:81:6c:c3:80:9f:d2:47:3d:d6:32:e5:8d:fa:0f:
73:23:2e:bb:28:c6:31:61:be:d2:49:f0:ca:b9:6b:c9:bc:14:
bd:51:57:14:4c:eb:f4:77:a4:3d:63:11:0b:47:b8:8e:ff:67:
28:7f:2d:6b:08:b2:5a:23:de:b8:ec:85:3c:2d:b1:30:6d:5a:
20:2d:fc:3b:1b:a4:c8:98:c2:13:ce:db:aa:22:5c:9b:bd:d5:
b9:87:a7:76:26:74:15:e5:99:63:dc:92:8a:bc:ed:a7:a7:51:
50:5a:7d:cd:3d:e9:0f:ec:9e:76:5b:f0:f5:2a:7c:30:39:79:
85:80:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:55 2024 by rpki-client on console-ams.rpki-client.org