Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X9RbmnEtGAyhjpXDTrgzf4j6hAY.roa
File: X9RbmnEtGAyhjpXDTrgzf4j6hAY.roa (raw, json)
Hash identifier: zx9By8vLrvZJKvJtXHA1B60vz0NBjk1iYDIyHasAs98=
Subject key identifier: 5F:D4:5B:9A:71:2D:18:0C:A1:8E:95:C3:4E:B8:33:7F:88:FA:84:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189E32C4ECBEFC4C51238FED60BAD14DE29
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X9RbmnEtGAyhjpXDTrgzf4j6hAY.roa
Signing time: Fri 11 Aug 2023 05:57:59 +0000
ROA not before: Fri 11 Aug 2023 05:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 91.132.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 05:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:2c:4e:cb:ef:c4:c5:12:38:fe:d6:0b:ad:14:de:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 11 05:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd45b9a712d180ca18e95c34eb8337f88fa8406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:85:fb:10:b8:a5:38:10:35:ab:47:ca:1e:37:
62:dd:36:24:fb:ee:6c:ae:9b:2b:97:65:99:5b:cd:
34:1b:2f:73:2c:33:28:21:35:50:ed:df:8d:b1:95:
64:9c:cc:f1:1c:d8:00:f4:51:f6:82:e8:dc:36:b7:
ee:c2:d7:ef:1e:48:0d:84:72:44:a6:2d:00:7d:dc:
e7:a9:c9:60:f5:c4:73:f7:cf:06:00:8a:9c:89:e8:
95:ac:78:ac:58:8d:cf:88:66:11:92:e8:13:14:e5:
1b:2c:d1:a7:20:35:aa:3e:e3:d8:7f:19:68:8e:c3:
2a:e1:a1:59:13:77:c0:2b:3e:d6:dd:9e:ab:25:43:
9d:50:84:1e:d4:55:a4:26:3b:94:f6:85:c2:0a:b8:
38:88:91:da:77:df:3d:59:28:e9:dd:51:f9:0b:7c:
fa:ef:26:f5:0c:ab:25:34:e1:47:a2:16:f8:bd:a3:
29:0d:c9:10:aa:bc:c8:ed:8d:a1:36:31:79:f4:ff:
80:c2:54:f4:03:d6:b9:46:fa:bc:35:3f:2b:d5:f0:
df:a9:4f:ae:33:ba:31:36:39:a1:c3:77:41:ef:46:
04:3c:27:65:26:d2:06:0e:55:8f:34:dd:8d:15:d8:
09:10:04:f6:43:32:89:23:7c:00:9d:66:9f:98:e4:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D4:5B:9A:71:2D:18:0C:A1:8E:95:C3:4E:B8:33:7F:88:FA:84:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/X9RbmnEtGAyhjpXDTrgzf4j6hAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8d:98:02:ec:2b:39:fc:00:34:e3:ad:4e:5f:e9:2f:87:43:
28:0f:3c:a6:94:e8:6a:13:29:ec:a8:b5:c7:64:d0:66:85:f5:
bc:c9:95:4b:14:d3:d9:bc:97:1e:1f:f4:e0:ad:8c:0a:f5:b3:
cc:da:12:16:f2:4f:f1:bc:56:d7:0c:83:c3:9b:75:30:61:50:
26:e0:bb:86:ba:90:14:23:b4:5b:3d:da:46:2f:b0:1f:be:f4:
f1:d9:34:e2:e3:e3:78:ae:18:70:16:b7:5d:c2:ec:52:05:f7:
94:93:89:1d:77:a2:9d:cb:9c:7f:e5:6a:9c:52:8a:3e:e7:ef:
ca:cb:87:6a:e9:a0:95:8c:f9:1d:4e:84:d6:a0:ff:91:8e:44:
19:a8:28:ca:cd:fb:4a:98:75:2a:b5:81:a2:84:7a:e7:62:3b:
3a:97:a7:db:19:27:97:f0:55:d9:89:32:72:3d:fb:14:d7:13:
49:40:81:a4:43:e2:c9:a7:4a:b9:c6:c2:65:b4:fa:dc:74:49:
5f:bd:14:7f:90:e5:7f:85:66:6f:6a:4c:81:77:6e:7a:ba:9c:
2d:72:02:4b:fc:fd:90:ce:ff:cb:3b:40:3a:09:47:e3:3f:f5:
d3:bd:19:23:74:f3:03:db:a3:b7:13:3f:23:d1:42:aa:4e:13:
dd:ff:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org