Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DkEyfIndWDggo3GKJDCK6ZSiD5E.roa
File: DkEyfIndWDggo3GKJDCK6ZSiD5E.roa (raw, json)
Hash identifier: ETJiqJIpbsML5sVEExrxn3+oIQzUzX9QJTt8WG2oxNY=
Subject key identifier: 0E:41:32:7C:89:DD:58:38:20:A3:71:8A:24:30:8A:E9:94:A2:0F:91
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188AF2484AF8531A41813FF88CE742FCD10
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DkEyfIndWDggo3GKJDCK6ZSiD5E.roa
Signing time: Mon 12 Jun 2023 10:26:26 +0000
ROA not before: Mon 12 Jun 2023 10:26:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.132.49.0/24 maxlen: 24
91.132.48.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 04:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:24:84:af:85:31:a4:18:13:ff:88:ce:74:2f:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 10:26:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e41327c89dd583820a3718a24308ae994a20f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:21:3a:f4:29:7b:bf:0e:fb:ca:b8:85:1a:
f8:cd:c7:a5:a5:c5:3f:34:41:9a:c2:57:75:97:1c:
73:3f:5f:da:e1:6d:66:3f:47:ac:73:f9:29:b2:66:
58:52:14:a9:f7:72:ca:16:b3:22:24:1b:be:6d:b2:
18:6a:91:69:48:ac:69:36:56:07:c5:22:0b:20:73:
db:4b:fa:c0:bf:f1:7b:5f:d0:02:22:fc:81:27:52:
f1:8a:dc:b4:ee:79:f9:50:77:63:e9:32:38:fb:f1:
36:18:4f:42:df:95:3e:e9:e5:0f:c6:9b:b7:23:4b:
c4:58:32:da:22:7d:38:f6:e0:dd:f8:40:06:8b:11:
6a:24:a5:06:a9:64:5c:5f:ec:84:4c:3a:85:34:a7:
8f:e9:d0:7d:59:71:d3:ed:76:da:43:62:88:85:72:
fb:2a:87:18:b7:59:36:0d:74:9d:fa:24:34:ce:26:
0d:47:8e:0d:a5:3c:8a:58:e8:cf:d4:a9:90:4e:83:
0f:f2:4e:75:86:bd:ab:6e:0d:d3:26:18:90:f5:6b:
22:00:a8:f8:b3:06:6e:07:1b:f5:b6:2f:31:67:5c:
f2:8a:4c:d9:0e:c0:26:3f:5e:cc:6a:ca:55:c4:61:
a9:9d:35:06:c2:ee:63:a1:fb:0b:fe:66:65:47:59:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:32:7C:89:DD:58:38:20:A3:71:8A:24:30:8A:E9:94:A2:0F:91
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DkEyfIndWDggo3GKJDCK6ZSiD5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.48.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:6b:63:6c:55:bb:c2:55:f9:c3:c0:8e:e1:25:35:39:b1:80:
4a:ac:30:8d:e6:d7:40:6a:0a:a7:ed:d3:0f:31:22:f5:ea:27:
e9:72:5d:3a:3f:61:24:9c:8b:21:ae:55:0e:5f:6d:14:ad:ff:
6a:c5:9c:36:04:64:20:cf:4d:32:ca:8b:7e:d5:61:39:74:89:
6c:69:e5:51:f0:74:df:0c:9d:85:ba:d7:d2:39:8a:76:01:f5:
8c:4a:07:64:40:54:75:8b:d5:9c:a4:6f:f0:03:02:0e:de:32:
6f:24:c0:98:ec:3b:ac:6d:8a:7f:bd:fb:5b:10:41:4a:a6:da:
60:62:8f:f8:8a:eb:40:47:5b:67:50:c1:28:d1:66:4e:66:c3:
8b:5e:83:c7:c1:35:71:42:26:c1:a0:6d:df:34:7a:be:db:6d:
e9:04:13:ff:fb:42:50:7a:4e:8a:e8:da:18:65:51:2e:36:77:
ce:71:85:d2:21:26:e5:96:13:02:31:e1:8e:54:5b:b8:21:87:
2e:2a:35:29:cc:8f:1b:89:d6:47:69:88:3a:37:ba:64:e7:f3:
fe:76:d2:38:16:08:3a:2f:4a:61:03:a0:d7:33:91:de:6a:bc:
b9:c8:7d:15:6d:26:13:46:6b:0f:d5:00:44:be:83:0c:22:16:
95:b5:de:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org