Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/Lta6HID5lKH-yAR4Urr3oifZvOo.roa
File: Lta6HID5lKH-yAR4Urr3oifZvOo.roa (raw, json)
Hash identifier: WVWI184FvILsAMVqBbaS2sSwdabak8kBYMbfQLYHxf4=
Subject key identifier: 2E:D6:BA:1C:80:F9:94:A1:FE:C8:04:78:52:BA:F7:A2:27:D9:BC:EA
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 018A031E309A840CA7C6F4921778810FCE31
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/Lta6HID5lKH-yAR4Urr3oifZvOo.roa
Signing time: Thu 17 Aug 2023 10:50:24 +0000
ROA not before: Thu 17 Aug 2023 10:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 91.211.115.0/24 maxlen: 24
2a13:a500::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 25 Sep 2023 16:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:1e:30:9a:84:0c:a7:c6:f4:92:17:78:81:0f:ce:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Aug 17 10:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ed6ba1c80f994a1fec8047852baf7a227d9bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:af:20:c5:3b:7b:f4:ea:a5:90:49:b5:97:35:
66:fe:d6:a8:ff:47:66:3c:ba:32:e0:6e:86:94:64:
01:65:4e:1a:06:75:5a:d5:05:ce:29:d0:89:07:74:
92:e3:ed:28:46:e3:42:9a:2e:9c:76:45:05:57:89:
af:a9:39:03:4b:9f:17:f5:a5:3a:f7:fb:1f:fe:85:
a0:11:94:7a:ae:89:4b:59:ab:99:4b:03:6f:88:37:
c8:a9:6f:07:1f:41:a4:38:ef:79:ba:e1:cc:ee:b7:
80:ba:57:1f:16:09:79:13:2f:8c:2b:cd:27:80:62:
e0:a9:10:93:b8:a2:d8:c4:56:9d:91:96:95:08:63:
15:c8:50:fe:ae:f1:f1:9f:ab:23:35:b9:ce:ed:a0:
d0:fe:c2:08:4f:0b:47:02:b2:99:6e:2d:e5:a4:fd:
45:34:55:90:a7:77:5c:eb:9f:4c:3e:8e:89:27:94:
55:70:99:71:42:6d:ac:f3:50:6c:1a:e0:ea:d8:cd:
c3:ac:34:2d:42:a8:04:f9:9f:56:a8:9b:c3:c6:a1:
33:ce:a8:9b:4f:33:ae:40:8d:ab:43:52:f9:9a:4a:
48:d4:c7:5d:fd:7b:78:be:6a:c1:6d:e9:c9:9e:c8:
fe:ab:0b:bb:6d:50:51:d2:b6:c5:6a:60:57:ca:3d:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:BA:1C:80:F9:94:A1:FE:C8:04:78:52:BA:F7:A2:27:D9:BC:EA
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/Lta6HID5lKH-yAR4Urr3oifZvOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.115.0/24
IPv6:
2a13:a500::/32
Signature Algorithm: sha256WithRSAEncryption
08:10:52:ce:8e:2c:56:20:e1:65:4b:61:a1:af:fc:19:9b:fe:
79:7e:fd:89:33:da:d6:c3:56:56:ec:66:40:01:33:15:e1:ca:
d2:06:17:bf:5c:b0:95:16:90:dd:eb:1c:a1:0d:bb:39:e9:7b:
66:91:f8:2f:94:44:46:bd:7d:44:2e:0c:b0:e4:91:91:e1:3e:
15:d3:2f:db:b4:7f:17:63:48:87:72:46:84:65:be:ab:c8:ad:
2f:a0:c7:2d:54:8f:b3:ce:ce:6d:e4:6f:c3:4f:97:e4:32:89:
aa:64:3b:7d:83:f5:6f:ca:67:cd:56:37:54:5d:5a:73:35:30:
60:61:ea:f9:3d:99:d7:7d:df:f9:e5:53:0d:49:3d:2c:5b:e6:
62:9c:68:23:7f:23:f0:b5:94:0f:f1:35:5d:c6:5e:9c:d6:05:
cc:ce:0b:cf:eb:e8:32:ba:fe:fc:73:28:9f:57:fc:1e:4a:cc:
32:0e:8d:a2:29:af:82:ac:19:d9:fc:e7:f9:3b:c3:f2:8f:bf:
2a:3d:4c:5f:e3:70:7c:13:6f:bb:01:e9:9d:29:c1:95:5a:cb:
33:9f:be:d4:ed:eb:e6:b7:0d:18:fa:88:e2:d3:80:0a:e2:d5:
95:f7:43:f5:1b:b6:0d:63:11:ae:3a:18:91:9c:c7:c0:29:20:
6a:8b:ab:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:18 2024 by rpki-client on console-fra.rpki-client.org