Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/c_e2hg0M2PwwPsyxDJZ-KWBr5lg.roa
File: c_e2hg0M2PwwPsyxDJZ-KWBr5lg.roa (raw, json)
Hash identifier: Y3S7wdK4P8b7wwVrjZSHd6ta4wnZBVl0EJFKjPNl3Hg=
Subject key identifier: 73:F7:B6:86:0D:0C:D8:FC:30:3E:CC:B1:0C:96:7E:29:60:6B:E6:58
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 01910FA0D6BFF0834827BE8A98AF7FA7730D
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/c_e2hg0M2PwwPsyxDJZ-KWBr5lg.roa
Signing time: Thu 01 Aug 2024 20:28:04 +0000
ROA not before: Thu 01 Aug 2024 20:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36680
IP address blocks: 91.227.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:a0:d6:bf:f0:83:48:27:be:8a:98:af:7f:a7:73:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Aug 1 20:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73f7b6860d0cd8fc303eccb10c967e29606be658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:f1:78:bc:36:a9:8d:99:44:86:f5:40:63:
64:5d:eb:7e:3d:25:4c:a9:aa:0d:5d:a9:2f:3f:0a:
e6:1c:06:60:65:ca:c0:01:8a:03:dc:ac:d6:44:f7:
70:5c:ac:b7:e2:a6:88:67:b1:c3:53:a0:49:ec:c4:
70:8c:8b:02:7d:ed:c2:71:72:5e:2f:b2:03:c3:c6:
65:ef:75:a4:63:13:19:35:a2:76:1b:1d:cc:73:37:
ec:a2:36:3e:0f:e0:71:97:9e:f1:f4:c8:38:f6:04:
87:0c:74:8e:d8:f7:44:0d:4a:37:b4:10:85:8b:49:
60:93:d1:06:2f:bf:57:cb:b8:7e:29:ca:fe:20:98:
d1:8b:61:6e:df:ef:67:52:09:81:e3:ec:28:5c:dd:
32:5b:95:60:e0:0f:3e:96:59:76:21:75:43:9b:44:
50:50:bb:1f:98:14:89:92:cb:0f:69:a3:b1:a6:db:
24:73:cf:63:08:6c:a1:37:d1:da:4c:bc:ea:21:c2:
54:66:ce:e6:64:ff:47:aa:20:f4:be:df:9f:0a:31:
ac:28:90:cc:68:9a:4b:1f:14:8a:17:e8:12:2a:24:
54:9e:16:49:6e:22:46:94:e8:3a:d8:13:ed:f3:97:
b0:29:0a:37:2d:f2:79:81:92:b1:08:ee:df:99:a8:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:B6:86:0D:0C:D8:FC:30:3E:CC:B1:0C:96:7E:29:60:6B:E6:58
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/c_e2hg0M2PwwPsyxDJZ-KWBr5lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.62.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e4:ed:92:29:47:68:ae:9b:7a:29:cc:7a:e1:7b:f0:52:59:
7e:b1:85:38:7a:7b:a2:63:5d:d8:16:c1:24:37:c4:61:fe:a5:
c6:d4:91:83:a5:6d:bd:71:85:b1:58:e2:4f:ae:bd:93:4f:a4:
31:a3:6b:bd:f1:78:7a:eb:19:b1:cf:cf:59:13:32:26:18:84:
83:27:2f:78:3c:51:e7:12:db:49:eb:72:b7:0a:a8:45:00:c9:
a7:17:15:a8:78:7d:84:c2:ca:8f:09:2a:6e:16:49:d7:42:03:
cb:9a:11:6e:81:26:44:2e:be:dc:ef:5d:6f:38:c0:c6:20:76:
99:b5:71:c9:c0:d1:bc:b0:79:14:4d:5a:ac:b3:0c:5b:39:05:
0c:d2:ca:b1:59:4a:34:a2:64:af:17:45:0e:6e:ec:cf:d0:b0:
60:e2:6f:0d:b3:79:f8:1e:93:62:6a:45:3b:8f:2e:e8:c3:fc:
48:02:8b:b3:75:aa:fa:ac:53:9c:6a:fe:0e:35:ff:f8:8a:42:
df:f7:16:12:2f:57:fa:30:c4:10:1b:1d:22:d3:7a:c4:ef:db:
63:1c:da:06:b2:d3:59:8a:c2:d7:e7:6c:f5:e0:be:2e:4c:97:
86:e4:83:07:01:fe:62:0a:45:6a:94:aa:2b:9c:91:b6:3d:c4:
e1:f7:c7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 23:19:43 2024 by rpki-client on console-fra.rpki-client.org