Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Xnzz5TrvdZOd5u35vnH9fhW62Q.roa
File: 1Xnzz5TrvdZOd5u35vnH9fhW62Q.roa (raw, json)
Hash identifier: xUGnbfS1zC4OCDJjNG3gvXFxM22iLeJcZAjp8hdg0ow=
Subject key identifier: D5:79:F3:CF:94:EB:BD:D6:4E:77:9B:B7:E6:F9:C7:F5:F8:56:EB:64
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018DC2C40375E755DADE3285D980738E3B0B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Xnzz5TrvdZOd5u35vnH9fhW62Q.roa
Signing time: Mon 19 Feb 2024 19:07:22 +0000
ROA not before: Mon 19 Feb 2024 19:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147287
IP address blocks: 91.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 13:13:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c2:c4:03:75:e7:55:da:de:32:85:d9:80:73:8e:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 19 19:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d579f3cf94ebbdd64e779bb7e6f9c7f5f856eb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:f6:30:ad:a3:3d:45:87:ba:a4:72:2c:af:
1c:96:95:80:5a:1e:4b:2e:7c:54:6e:38:f3:a9:f8:
c3:03:d7:7b:b9:76:12:b7:fd:2f:a9:71:13:f2:3e:
be:15:a2:6e:76:40:1e:fb:43:da:3b:48:a4:c3:71:
40:13:fd:0e:5a:66:0f:4c:7c:4f:82:5f:43:3c:b8:
7c:d6:00:a7:51:54:9d:1c:ff:42:3e:6f:71:1b:9e:
48:44:8b:b9:25:37:1a:c3:74:91:03:bc:30:ee:48:
92:99:ec:30:39:51:16:6d:36:17:5a:f4:eb:4c:bf:
74:a6:c7:d2:f4:22:1b:33:b2:e4:07:18:a6:04:0d:
3e:2f:1b:73:f1:62:93:61:74:d5:f0:9f:53:68:7e:
d2:fe:6d:08:70:60:77:a3:d6:28:f8:79:0a:d2:7e:
79:8f:7a:2f:31:b8:1e:82:44:5c:fc:3f:31:a1:9e:
11:86:99:aa:1d:8e:bb:c0:82:b6:d8:e6:0f:87:f9:
6b:43:52:3c:c6:bd:4f:97:49:a8:26:28:2e:96:3d:
58:82:04:37:ae:f8:2a:7d:84:73:07:66:c0:9a:ba:
be:d4:1f:89:ee:54:b2:c2:b9:a4:77:11:95:e3:39:
4e:56:75:1c:4c:2f:34:22:60:89:6b:6a:ae:0c:95:
d4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:F3:CF:94:EB:BD:D6:4E:77:9B:B7:E6:F9:C7:F5:F8:56:EB:64
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Xnzz5TrvdZOd5u35vnH9fhW62Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3a:44:7a:7d:fb:f5:3e:e6:c1:72:ac:c0:b4:50:92:b5:3f:
a8:d9:c6:03:d7:28:16:d4:10:f5:2b:92:9b:ce:87:22:13:c8:
87:b2:e4:73:39:67:c9:61:61:34:2e:58:a1:65:f9:9b:ac:1f:
31:24:9b:7a:7f:95:9e:0c:f5:8f:18:5c:00:a3:53:e0:de:ab:
b5:29:a0:da:4a:0a:22:54:bd:d8:94:dd:06:4d:fa:0b:f2:ad:
d8:f3:c9:34:30:80:a5:79:04:3f:f6:e8:17:9b:4b:af:30:6b:
34:3f:33:81:0e:fd:f5:6a:83:18:b2:6c:d7:90:5c:09:97:f2:
41:cc:b4:20:b8:a2:09:14:e1:4b:c3:1c:da:c4:e1:4c:77:36:
08:26:a6:86:b0:44:79:39:1c:18:92:b8:bb:98:2b:83:e2:53:
15:12:9f:ee:08:d0:6c:ff:e4:6c:0c:bc:11:94:d5:d4:24:2c:
3c:a8:fd:a5:2c:fd:ed:a8:39:de:10:36:1e:27:92:a8:a0:04:
83:75:23:23:a3:dd:55:31:7d:bc:2a:b8:45:a2:cf:53:37:c1:
46:a3:3f:8e:8d:73:17:b7:3b:22:5a:dc:9f:7b:f6:49:e9:7d:
07:d6:3f:cf:fb:61:e0:f8:3c:cc:cf:38:2f:50:1a:c6:2b:f0:
e6:4c:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org