Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/1-LPlrQOuitOeEpHRR7CTtk-8Ssw.roa
File: 1-LPlrQOuitOeEpHRR7CTtk-8Ssw.roa (raw, json)
Hash identifier: IIvWrY4exesvg3DfHEtnKmke5u1F68zqdmQhtKQ7po4=
Subject key identifier: F8:B3:E5:AD:03:AE:8A:D3:9E:12:91:D1:47:B0:93:B6:4F:BC:4A:CC
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0190DEB23438C14DE82B31007D4156717FD9
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/1-LPlrQOuitOeEpHRR7CTtk-8Ssw.roa
Signing time: Tue 23 Jul 2024 08:25:38 +0000
ROA not before: Tue 23 Jul 2024 08:25:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 45.91.198.0/24 maxlen: 24
45.91.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 14:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:b2:34:38:c1:4d:e8:2b:31:00:7d:41:56:71:7f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jul 23 08:25:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8b3e5ad03ae8ad39e1291d147b093b64fbc4acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:1d:15:26:0c:6d:2a:a9:c5:97:9c:43:a4:
b7:e3:cf:49:51:3b:5d:50:38:de:e3:39:ed:38:e3:
41:7d:72:d9:b0:7e:e2:dc:24:5f:f3:80:ea:cd:48:
1c:01:0b:71:85:5d:03:48:18:fd:4d:64:9f:81:4e:
2c:2e:2a:b3:58:63:ef:30:cf:9a:0b:ff:3a:9e:43:
fd:d1:e2:eb:f3:f8:c5:41:a3:61:77:16:6a:2b:a2:
27:cc:00:3b:50:e2:ae:83:74:1f:f2:5e:89:d4:fc:
bf:0b:dd:c6:7e:eb:9a:72:d6:61:dd:63:19:5a:53:
fa:67:ee:cb:c0:92:53:3c:7d:7d:58:8f:82:ad:3e:
ea:20:cb:d7:e2:31:4d:b6:fc:55:b8:7e:07:84:d7:
c4:46:26:90:ad:05:25:40:d3:55:1b:dd:09:08:cd:
ed:6f:c9:be:ec:8d:c5:d6:0d:b9:3f:3a:f1:50:e0:
3f:47:9a:7f:18:30:22:e0:86:19:8c:38:12:56:d9:
dc:8b:44:0f:a2:1b:c6:21:6c:1d:cc:bd:8f:3b:3e:
60:63:56:50:73:e1:cb:3d:d9:22:fb:d9:12:7b:c0:
57:55:17:74:de:77:af:2e:fc:13:d7:2d:9b:8e:b0:
a5:e8:34:90:06:33:cf:4b:03:d8:e2:d9:38:82:68:
52:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:E5:AD:03:AE:8A:D3:9E:12:91:D1:47:B0:93:B6:4F:BC:4A:CC
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/1-LPlrQOuitOeEpHRR7CTtk-8Ssw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.198.0/23
Signature Algorithm: sha256WithRSAEncryption
86:20:c2:f9:38:42:69:30:13:f8:f2:3b:c7:68:9f:b0:05:83:
80:71:a9:b0:ce:1a:23:5b:41:85:c3:c5:d9:53:5e:bf:21:5a:
89:a5:91:f8:4d:5e:f4:36:c2:83:33:d1:5e:37:93:a7:8e:95:
ee:b0:72:1f:74:82:52:a2:7a:1c:2f:fa:c9:0c:39:f4:1b:a0:
c5:cb:6f:57:d3:d9:9e:ab:00:2d:84:05:8c:05:e0:45:50:bd:
29:63:f0:97:06:fd:97:4c:ad:40:e5:8d:b2:2b:bd:1d:55:7d:
d8:8e:e9:1a:1e:d0:47:ee:fd:f7:80:b0:91:5e:23:13:a5:73:
8b:e6:cf:5f:0b:a8:90:e0:70:72:ac:60:58:9e:f1:62:19:e6:
5e:df:b2:2a:44:53:bd:c5:e8:97:1d:64:6e:6b:4d:59:c8:a3:
8a:de:30:67:43:4a:87:42:40:e0:94:24:b0:5a:d0:0a:b5:77:
81:e5:70:b3:f6:b7:b7:19:ff:e1:a0:f8:00:a5:3a:d4:bf:f2:
e9:80:3a:c5:48:4d:1b:6d:57:62:cf:25:db:9f:0b:24:4e:2d:
0a:b7:68:59:80:97:ab:26:07:45:18:c1:64:98:fd:60:eb:3d:
ff:48:f1:a5:db:ea:a6:6c:9d:f3:c4:0b:69:99:bd:e3:ca:82:
0c:15:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 18:55:02 2024 by rpki-client on console-fra.rpki-client.org