Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/XBq308eieXeFe7v7gdL3LZrohj4.roa
File: XBq308eieXeFe7v7gdL3LZrohj4.roa (raw, json)
Hash identifier: xSlshgkVM4idAl3uP4UuqOmUJsGEvTmF0k7eSkLEpbQ=
Subject key identifier: 5C:1A:B7:D3:C7:A2:79:77:85:7B:BB:FB:81:D2:F7:2D:9A:E8:86:3E
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 018EFBC0ED9523BE0FCA2A73566ADF2361F4
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/XBq308eieXeFe7v7gdL3LZrohj4.roa
Signing time: Sat 20 Apr 2024 13:45:08 +0000
ROA not before: Sat 20 Apr 2024 13:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59895
IP address blocks: 91.227.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 04:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fb:c0:ed:95:23:be:0f:ca:2a:73:56:6a:df:23:61:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Apr 20 13:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c1ab7d3c7a27977857bbbfb81d2f72d9ae8863e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:fc:50:1f:2b:e9:ea:69:8d:e4:0b:70:b7:
4f:6e:d0:53:d0:38:2c:88:a5:3f:b0:0d:a8:19:26:
8c:8c:79:2e:f1:2d:8c:ba:a1:72:9f:c5:95:7e:33:
37:7e:47:cd:2b:b8:cb:1c:63:4b:70:e2:8b:ab:9b:
88:41:c3:6b:2a:e4:bd:21:0b:22:fa:14:fe:1e:96:
e8:4b:03:fa:81:46:da:b0:1f:17:ca:58:4e:19:e3:
56:32:94:f5:20:fd:5c:00:fb:eb:b8:ba:3e:07:a6:
89:ed:c8:56:14:f6:39:c4:17:46:38:17:0c:84:55:
14:dc:4c:30:e5:d9:fc:dc:4c:e8:53:01:b6:1d:45:
6e:aa:38:b4:cc:e2:6b:56:57:06:6b:31:55:cc:20:
a3:e0:65:5e:58:a8:68:12:c6:8a:48:66:11:a8:de:
bb:f6:3e:25:36:e7:ca:d1:c1:ba:62:71:7a:4f:4f:
ba:67:9b:d8:6b:bb:d9:d0:49:3d:e7:27:91:49:4c:
45:34:98:a0:58:6d:49:bc:19:8b:aa:ef:0d:d0:bf:
dd:77:65:51:12:54:9e:53:ed:31:52:9f:cf:cb:81:
36:52:1d:3d:ea:77:b1:74:3b:ac:ce:38:0e:78:0d:
ed:6a:90:f8:53:0e:0d:b6:2f:77:f1:be:54:d2:4c:
d9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:B7:D3:C7:A2:79:77:85:7B:BB:FB:81:D2:F7:2D:9A:E8:86:3E
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/XBq308eieXeFe7v7gdL3LZrohj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.62.0/24
Signature Algorithm: sha256WithRSAEncryption
40:3b:ec:ae:1a:46:73:4e:50:b3:e5:28:e4:98:69:e3:1a:7e:
99:82:66:de:4f:db:bd:88:10:1b:00:03:0f:2d:85:ae:93:50:
48:47:f2:0b:6d:e3:1d:33:33:6c:e1:01:b1:4e:c7:a3:be:45:
1e:ff:41:91:de:58:2d:5c:85:34:b2:5c:08:f5:bc:b1:35:64:
f1:6e:46:b4:6f:c4:ee:d7:90:97:f5:07:85:7f:ab:09:e6:da:
db:dd:1c:f5:8c:8c:40:ac:66:2d:e1:f7:a5:cd:9f:46:a0:30:
49:22:fd:81:b3:c9:f9:99:ee:95:66:ff:96:29:fd:88:dd:c5:
12:99:8d:d6:9a:25:02:c6:4c:77:ef:d1:8c:30:ea:c5:ae:bf:
e0:84:0b:7a:c3:99:39:42:ee:3d:27:c6:b3:39:4a:90:0a:13:
1b:c4:1c:c9:d7:f4:50:cd:98:1b:cb:9f:be:ed:56:d3:4d:29:
18:a6:fb:4b:3e:6e:d3:00:99:59:d0:bc:ca:0b:63:ce:22:c7:
9f:68:6f:60:cc:3d:d7:a9:42:92:71:9c:6a:37:a4:6c:0d:f5:
e9:a0:95:1f:c5:8b:a5:6b:7c:28:f2:35:75:cb:a1:83:27:0b:
61:bd:ac:d8:8d:c9:a3:01:39:54:b0:b9:9c:cf:07:f1:30:4a:
2b:d5:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:55:20 2024 by rpki-client on console-ams.rpki-client.org