Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0g6jXbwXEuL6PyPyGLYpLKYJsUc.roa
File: 0g6jXbwXEuL6PyPyGLYpLKYJsUc.roa (raw, json)
Hash identifier: W/VKYE3Jrc0C31f/7wcqTpsuo/+89KZpMWS2XJmnd2w=
Subject key identifier: D2:0E:A3:5D:BC:17:12:E2:FA:3F:23:F2:18:B6:29:2C:A6:09:B1:47
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018924535F4F276175590335DF8D5E1CB0CA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0g6jXbwXEuL6PyPyGLYpLKYJsUc.roa
Signing time: Wed 05 Jul 2023 04:33:10 +0000
ROA not before: Wed 05 Jul 2023 04:33:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.132.49.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 06:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:24:53:5f:4f:27:61:75:59:03:35:df:8d:5e:1c:b0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 5 04:33:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d20ea35dbc1712e2fa3f23f218b6292ca609b147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:51:6c:d4:e6:25:ec:b2:0a:68:7d:9f:53:
b0:d4:08:94:c5:b0:92:df:ea:70:ea:d9:21:eb:07:
91:24:ca:6c:ea:4c:ac:af:fc:3e:63:14:b2:0d:56:
aa:77:eb:91:e5:42:22:81:11:57:de:87:1c:fa:88:
71:f3:92:55:3c:35:d0:c5:05:86:02:b1:c1:97:f8:
85:84:49:55:dc:12:31:7b:fa:1b:2e:b0:38:f2:23:
fa:44:07:cd:69:61:f6:76:3f:b1:29:f0:4c:37:31:
4b:58:ef:ce:a1:ca:90:cf:29:53:05:f1:d6:b3:d8:
75:ed:05:84:57:cb:fd:08:a6:6a:2e:50:42:46:b0:
69:2d:3c:a4:db:3a:de:8d:2f:dd:33:f6:17:43:ce:
1c:11:70:89:e4:2a:96:42:01:de:4d:fc:9a:1f:96:
90:e3:cc:de:55:55:f1:23:79:cd:fe:93:e5:e0:3a:
ad:ac:a0:f1:50:61:05:48:49:cb:5a:da:8a:5c:a0:
01:27:09:65:6b:82:f1:f0:c4:18:7a:e6:aa:84:4c:
32:f9:9a:06:81:1b:0f:7c:7c:25:02:12:60:09:64:
dc:bd:e2:d1:79:23:a4:14:22:b9:76:35:21:dd:e5:
71:17:61:43:8f:f0:73:04:67:41:52:6e:3d:7f:07:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:A3:5D:BC:17:12:E2:FA:3F:23:F2:18:B6:29:2C:A6:09:B1:47
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/0g6jXbwXEuL6PyPyGLYpLKYJsUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.49.0-91.132.51.255
Signature Algorithm: sha256WithRSAEncryption
6c:b6:60:4d:f4:28:b4:e1:15:59:d6:82:db:1f:9c:84:6d:0d:
f4:19:45:75:db:fb:78:1b:13:e8:f4:7a:b1:5c:40:d7:f7:1d:
6a:5f:ed:c1:1f:23:e1:06:68:a3:73:77:bd:cc:19:c3:1d:75:
2a:20:29:7d:6c:4f:be:7f:e4:b8:4b:ec:96:74:47:ff:10:06:
8e:86:60:c7:36:5f:27:ba:74:7d:a9:9c:89:5d:5e:83:00:c0:
41:e5:9b:fa:70:8b:81:60:db:5e:4e:d2:c9:4a:ae:b2:02:d0:
3c:21:01:cf:ab:3d:15:05:81:37:f2:45:a6:f3:22:a5:02:c4:
2e:ed:15:46:7e:e8:8e:91:ae:30:9d:5c:78:55:e5:27:67:bb:
e2:79:59:de:25:a1:bc:94:84:47:db:f2:59:84:28:8c:6a:45:
36:5f:c6:6a:5b:be:e7:a9:bc:49:91:98:68:83:be:78:e1:5b:
63:62:bf:30:8c:5a:7c:75:6f:73:39:03:19:c3:bf:33:3d:49:
94:c7:97:78:85:32:bd:10:21:6d:f5:a0:51:e2:36:1e:a2:53:
9b:9e:2e:1c:58:eb:8d:fc:0f:d3:6f:a3:39:ec:07:88:bc:07:
27:17:96:65:3a:fe:05:e4:e3:d5:d5:35:76:6d:d6:e1:de:5e:
fc:b6:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org