Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/SELchzvKDjeOQOUNn0nsmO0maZk.roa
File: SELchzvKDjeOQOUNn0nsmO0maZk.roa (raw, json)
Hash identifier: jFPsRulLMmJ1ze08v0ub+6WU3KWYmvSUl/ffXlhWqdk=
Subject key identifier: 48:42:DC:87:3B:CA:0E:37:8E:40:E5:0D:9F:49:EC:98:ED:26:69:99
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0188F13DC1D8BAD0B93CA0C1C63952C5C11E
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/SELchzvKDjeOQOUNn0nsmO0maZk.roa
Signing time: Sun 25 Jun 2023 06:28:56 +0000
ROA not before: Sun 25 Jun 2023 06:28:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15439
IP address blocks: 91.195.152.0/24 maxlen: 24
91.195.152.0/23 maxlen: 23
91.195.153.0/24 maxlen: 24
195.66.159.0/24 maxlen: 24
195.66.158.0/23 maxlen: 23
91.200.20.0/22 maxlen: 22
91.200.20.0/23 maxlen: 23
195.66.158.0/24 maxlen: 24
91.200.22.0/23 maxlen: 23
193.58.71.0/24 maxlen: 24
193.58.70.0/23 maxlen: 23
193.58.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f1:3d:c1:d8:ba:d0:b9:3c:a0:c1:c6:39:52:c5:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jun 25 06:28:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4842dc873bca0e378e40e50d9f49ec98ed266999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:40:59:a0:60:dd:4f:0c:ac:3e:34:df:9f:3f:
14:a3:d6:97:ca:f5:6f:1f:4b:8b:32:7e:35:ff:16:
01:da:fa:80:95:82:09:1a:45:ea:ce:38:42:8b:85:
46:41:58:23:9b:ca:f1:dc:d6:26:44:9e:13:63:f6:
3b:df:0d:e4:09:17:44:5c:bb:d2:b8:47:0d:c8:0c:
af:a6:09:57:25:67:f3:fc:3b:32:8f:0a:cb:53:f3:
56:9b:49:dd:d3:d9:65:1b:ac:2f:d1:29:a9:9e:87:
fd:79:fd:d8:0a:1d:86:df:e6:5d:19:4f:6e:6a:54:
75:6c:3d:04:76:30:17:7f:e8:12:08:70:65:93:5e:
b4:45:1f:33:8a:1f:c9:00:a6:4f:d4:f6:02:9f:11:
37:97:db:c8:19:0e:69:fc:ef:fe:f7:a9:64:5d:21:
11:cb:10:62:e3:f3:92:54:f2:66:19:87:ab:ca:63:
ba:e6:5a:17:8d:7b:8b:2e:5e:ac:a5:a0:97:f7:5d:
6b:5c:d2:94:82:11:84:11:cf:c9:0a:b0:45:cf:5e:
3a:1b:f1:48:99:27:ad:49:d6:c8:4a:b8:9e:59:72:
f9:a1:b4:0b:99:97:cb:f4:b1:95:49:74:17:07:7a:
35:b2:93:84:2b:a8:12:98:ba:3b:23:1f:b4:9b:4d:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:DC:87:3B:CA:0E:37:8E:40:E5:0D:9F:49:EC:98:ED:26:69:99
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/SELchzvKDjeOQOUNn0nsmO0maZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.152.0/23
91.200.20.0/22
193.58.70.0/23
195.66.158.0/23
Signature Algorithm: sha256WithRSAEncryption
34:0b:d3:bd:a2:09:a4:1b:0e:33:90:21:97:85:41:e9:fe:04:
b8:c7:c0:59:a5:4a:87:b7:35:f7:40:8a:5b:73:28:e8:82:2a:
d4:17:1e:6f:7c:7c:dd:59:56:3d:72:1f:a4:b2:06:8a:ba:ba:
c6:d7:ac:f6:7c:07:b4:c8:db:9b:90:2c:92:bb:5b:68:4b:f1:
70:b7:db:69:6a:fd:3a:52:8f:8f:bc:32:72:54:97:76:ba:d5:
2c:fa:7e:9e:a4:03:41:33:3d:ed:55:67:89:29:3f:d5:63:f6:
e8:8c:1d:2c:d1:9e:51:09:6e:76:72:68:68:02:f4:17:04:e6:
5b:c4:07:6e:79:0d:f2:03:36:86:93:f4:19:04:eb:06:df:91:
2a:ec:23:c2:50:d7:b8:2b:40:4c:3d:d8:61:39:03:8f:0d:52:
ee:c4:43:30:9e:27:07:48:52:02:c0:51:87:1a:ad:ff:71:43:
da:f1:7f:ae:35:0b:37:96:ec:1b:e5:1d:d3:99:25:40:63:10:
26:9e:10:e4:07:1c:1b:4e:ec:52:f8:8b:33:64:89:14:48:9e:
ed:69:5a:b1:fc:2a:1d:c1:f8:d2:60:e7:fc:1b:4f:85:a3:50:
36:43:8f:d8:78:20:e5:36:7f:80:ab:79:68:73:86:0e:fe:62:
9e:f2:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:06 2024 by rpki-client on console-ams.rpki-client.org