Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/tUbOkXEFWlsjwE17KkimaeVCUb8.roa
File: tUbOkXEFWlsjwE17KkimaeVCUb8.roa (raw, json)
Hash identifier: CKVirxr3tfacno5pMQcfwQ6Ddx0x1fWDQLgsp0bEDFw=
Subject key identifier: B5:46:CE:91:71:05:5A:5B:23:C0:4D:7B:2A:48:A6:69:E5:42:51:BF
Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial: 018E3C3D29617E809B5E6F5DB6272EFAFFB6
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/tUbOkXEFWlsjwE17KkimaeVCUb8.roa
Signing time: Thu 14 Mar 2024 09:13:44 +0000
ROA not before: Thu 14 Mar 2024 09:13:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58322
IP address blocks: 91.106.32.0/22 maxlen: 22
91.106.32.0/23 maxlen: 23
91.106.32.0/24 maxlen: 24
91.106.33.0/24 maxlen: 24
91.106.34.0/23 maxlen: 23
91.106.34.0/24 maxlen: 24
91.106.35.0/24 maxlen: 24
91.106.40.0/21 maxlen: 21
91.106.40.0/22 maxlen: 22
91.106.40.0/23 maxlen: 23
91.106.40.0/24 maxlen: 24
91.106.41.0/24 maxlen: 24
91.106.42.0/23 maxlen: 23
91.106.42.0/24 maxlen: 24
91.106.43.0/24 maxlen: 24
91.106.44.0/22 maxlen: 22
91.106.44.0/23 maxlen: 23
91.106.44.0/24 maxlen: 24
91.106.45.0/24 maxlen: 24
91.106.46.0/23 maxlen: 23
91.106.46.0/24 maxlen: 24
91.106.47.0/24 maxlen: 24
91.106.48.0/24 maxlen: 24
91.106.50.0/24 maxlen: 24
91.106.51.0/24 maxlen: 24
109.61.4.0/22 maxlen: 22
109.61.4.0/23 maxlen: 23
109.61.4.0/24 maxlen: 24
109.61.5.0/24 maxlen: 24
109.61.6.0/23 maxlen: 23
109.61.6.0/24 maxlen: 24
109.61.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 06:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:3d:29:61:7e:80:9b:5e:6f:5d:b6:27:2e:fa:ff:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Validity
Not Before: Mar 14 09:13:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b546ce9171055a5b23c04d7b2a48a669e54251bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3d:89:62:6d:36:29:ab:fd:bc:10:97:31:92:
5e:73:1a:86:81:6b:b3:ec:90:d2:f6:81:16:75:5a:
f1:76:a3:3e:4f:35:34:bd:99:9d:d2:80:49:74:83:
7a:9c:9b:34:b1:b3:9d:69:8c:c1:6a:1e:e9:0d:95:
8f:65:1d:ea:68:ac:f4:67:87:a4:90:17:a7:b6:c1:
d7:4f:8c:68:ca:0f:c9:bd:66:5e:5e:87:e4:3e:e3:
e9:97:7d:01:fc:f1:5d:7c:e6:67:e3:4b:d9:fb:05:
2b:05:7e:5d:a9:32:1b:03:bd:cd:34:3f:e9:f2:21:
c5:75:20:82:7f:52:21:a3:66:ec:5e:4d:dc:cb:74:
e3:e4:65:25:6e:66:2d:59:43:47:18:ac:17:1f:ec:
a5:55:40:18:d3:df:46:b0:1b:22:cc:51:72:ae:cc:
2f:bf:bf:f9:13:d7:9a:4b:77:43:b2:ac:fc:46:1a:
a6:2f:52:a5:b3:71:1b:9a:60:09:91:8d:a1:df:b8:
64:50:66:93:9a:93:64:0a:69:ce:b4:57:d3:a8:4f:
e2:6e:f5:15:da:33:54:b0:3d:34:21:f6:67:83:e8:
d4:ae:19:60:b7:6f:f6:9b:f2:35:ea:4f:ba:e4:79:
23:7d:c8:76:fa:c0:ad:5c:b4:02:64:3c:27:b7:f3:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:CE:91:71:05:5A:5B:23:C0:4D:7B:2A:48:A6:69:E5:42:51:BF
X509v3 Authority Key Identifier:
keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/tUbOkXEFWlsjwE17KkimaeVCUb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.32.0/22
91.106.40.0-91.106.48.255
91.106.50.0/23
109.61.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:68:f0:4c:2a:a8:dd:e1:62:53:dd:76:6f:75:fa:be:f2:4b:
39:41:ac:70:89:62:11:a1:a1:69:77:b8:3c:b3:bb:87:02:56:
a2:3c:4d:6d:87:cf:fc:a0:6e:4c:48:1a:f1:32:21:dc:5d:50:
d1:f6:6a:5a:a8:f9:b5:a7:83:cf:7c:6a:fc:c6:f5:75:50:89:
8c:ab:f0:6a:0c:59:c1:65:1b:81:8a:ef:bb:9c:90:c5:63:d4:
2e:63:a2:7f:d5:a4:61:3c:4b:2b:c5:8f:ff:68:0d:0e:61:ce:
5b:cd:bf:1f:fa:a0:09:b4:2a:0a:02:90:56:0b:61:71:5a:3a:
95:f3:11:20:df:88:31:ae:42:db:04:de:f7:16:0f:3a:6d:a5:
90:21:8b:21:4a:d9:7f:a9:4c:4f:ad:0b:04:85:05:d5:4b:f6:
a9:b2:a5:3c:46:44:ee:a7:10:c8:31:3b:42:49:93:09:b3:4f:
ce:00:82:72:c8:c1:e3:ad:eb:ab:61:3a:fc:b4:6b:69:8d:45:
29:f6:6e:d8:16:6a:32:ab:f2:05:1c:4a:f8:4a:3f:dd:ce:28:
34:14:4d:08:af:4b:dd:0d:b8:5f:7f:38:b0:6d:61:15:e9:bc:
1c:61:78:03:04:42:78:9a:07:4b:71:e0:21:cf:46:35:bb:af:
95:f8:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:06 2024 by rpki-client on console-ams.rpki-client.org