Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/kvdyfNI-sSo3eUEzY2G5CYWzAIw.roa
File: kvdyfNI-sSo3eUEzY2G5CYWzAIw.roa (raw, json)
Hash identifier: pWSJpi5s2XT+vNTv+Iol6fmuBQlCaVSLI7+O2Xr3YGA=
Subject key identifier: 92:F7:72:7C:D2:3E:B1:2A:37:79:41:33:63:61:B9:09:85:B3:00:8C
Certificate issuer: /CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Certificate serial: 01918E4A59418EB7D2778E44339E78579DBD
Authority key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/kvdyfNI-sSo3eUEzY2G5CYWzAIw.roa
Signing time: Mon 26 Aug 2024 10:45:22 +0000
ROA not before: Mon 26 Aug 2024 10:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196658
IP address blocks: 91.213.102.0/24 maxlen: 24
146.0.88.0/21 maxlen: 21
185.195.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 06 Sep 2024 13:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:4a:59:41:8e:b7:d2:77:8e:44:33:9e:78:57:9d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6951d4551d26a51c0f92b77c2d378fb34758b877
Validity
Not Before: Aug 26 10:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f7727cd23eb12a377941336361b90985b3008c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:24:84:71:8e:2f:4e:60:3d:dc:31:cc:9b:
ff:8c:d8:28:9d:43:5f:b1:e9:1e:f9:b2:4d:a7:c1:
f7:97:bd:a6:46:16:8d:0c:a0:e8:41:09:12:19:97:
d1:fa:3b:49:c1:d3:16:db:d0:f7:7b:bb:50:f1:1d:
f9:82:1f:21:83:ce:c4:2a:62:e7:17:0d:31:c6:31:
23:84:e0:f9:e7:f4:20:9e:d1:44:c9:fb:16:5e:9a:
50:ef:3f:76:c6:18:13:37:b9:eb:d2:b8:0f:67:38:
82:7b:22:12:0f:10:b8:f2:39:5b:ba:b0:cb:eb:0d:
d5:72:74:5e:64:50:f8:03:85:a1:3f:5d:b8:6e:6d:
d4:71:b2:fc:37:4b:5c:98:0a:ca:57:34:88:f1:c7:
fa:a9:08:ed:fd:f6:fc:81:81:8d:3e:5e:a2:bb:aa:
5d:6b:c1:44:b2:c3:a4:67:38:77:2f:d4:c4:6f:a3:
ed:c8:21:8e:10:df:9a:98:ed:d2:92:87:e0:b1:e6:
02:32:4d:4e:cf:cd:9b:25:47:99:b8:85:71:77:66:
11:c7:f3:e7:0b:a3:9b:d1:a2:20:d3:00:0e:66:5a:
21:3c:da:42:8e:e4:8d:ba:b3:2a:b5:c8:23:3a:5a:
a9:04:fc:ca:b4:a0:4a:5f:6d:d4:48:a9:3c:fc:e5:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F7:72:7C:D2:3E:B1:2A:37:79:41:33:63:61:B9:09:85:B3:00:8C
X509v3 Authority Key Identifier:
keyid:69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/kvdyfNI-sSo3eUEzY2G5CYWzAIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.102.0/24
146.0.88.0/21
185.195.88.0/22
Signature Algorithm: sha256WithRSAEncryption
05:a8:94:26:e1:6c:d2:94:13:e3:35:ef:53:1f:a3:44:2f:ec:
87:e8:5d:9f:0b:81:9a:d5:d3:78:0c:26:71:dc:80:04:6e:57:
dd:0f:3c:50:30:50:47:b6:01:10:fc:c8:d2:26:57:b7:88:77:
6b:ef:05:87:e9:60:76:63:e0:13:e4:07:0d:47:5d:30:79:d5:
9b:01:8b:c4:fc:bf:2a:4c:66:13:96:81:43:e4:42:7c:11:ec:
39:6e:46:26:00:d1:25:3b:fc:47:8a:f6:1d:71:47:7a:96:2c:
e6:1d:9a:cd:b4:6e:07:a0:c1:58:ad:3a:fb:35:e8:eb:21:9b:
6b:f9:4e:ae:0f:f4:af:aa:f1:b7:d7:2b:9c:cc:f9:44:f1:39:
9f:55:22:7a:f0:32:6a:84:db:48:0e:96:b2:28:54:e4:7c:bc:
71:c6:27:45:81:cd:df:3c:7a:e8:89:36:03:97:19:af:eb:b9:
93:38:b3:50:92:d7:67:f1:d5:b2:d0:f0:ea:64:cb:ae:cb:88:
3b:c4:57:ad:8e:af:f3:20:f5:83:67:08:1c:86:da:31:4e:5e:
83:16:fe:c2:c6:b7:fc:58:ce:4f:12:7d:d5:69:6f:38:11:16:
db:bd:7a:18:41:76:8a:7a:dd:3e:d7:9d:5f:4a:36:cb:bb:c0:
4f:14:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 14:56:08 2024 by rpki-client on console-fra.rpki-client.org