Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hFEigkKUiCtGOp18JVhjC-FjY5g.roa
File: hFEigkKUiCtGOp18JVhjC-FjY5g.roa (raw, json)
Hash identifier: 5NW/4ZPtxtc8HyeQMN2ru+FauDA1XfP/MEiVd3TUeOw=
Subject key identifier: 84:51:22:82:42:94:88:2B:46:3A:9D:7C:25:58:63:0B:E1:63:63:98
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC413744B8A26C9C96A856FC3015C130E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hFEigkKUiCtGOp18JVhjC-FjY5g.roa
Signing time: Mon 01 Jan 2024 08:10:58 +0000
ROA not before: Mon 01 Jan 2024 08:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 91.132.49.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:13:74:4b:8a:26:c9:c9:6a:85:6f:c3:01:5c:13:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 08:10:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=845122824294882b463a9d7c2558630be1636398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:bb:9b:3d:44:3f:53:42:4b:db:7a:e7:a9:
08:c2:b5:b5:e0:cf:20:be:ea:85:47:7d:ff:d0:33:
22:8d:8c:cd:ae:1a:e9:15:b9:6b:06:9a:90:1b:09:
c1:50:68:d7:b7:6c:cf:7e:5d:e4:65:c4:f5:2b:0e:
c8:82:d9:15:cd:39:c2:1a:89:47:43:64:62:30:ac:
a3:20:ae:51:05:fb:b0:80:ca:78:fb:73:2f:53:57:
f9:ba:8f:96:fe:3f:f0:1a:f9:a9:58:d1:7a:e6:07:
f2:1d:cb:30:9b:88:0a:71:d0:e6:fe:90:4d:fd:7c:
b3:1f:1b:6c:db:71:b9:1b:38:93:84:bc:fb:25:98:
c5:a6:c6:58:05:a3:c4:2a:75:1e:45:23:28:a2:98:
00:a1:5a:8b:d9:ae:32:ca:b6:4c:08:d9:82:5e:3e:
bc:23:a4:d4:fc:41:d6:e1:77:fe:38:f8:03:92:07:
82:6e:48:88:cc:89:de:76:a2:f0:56:29:ca:c0:47:
6e:2c:81:40:ac:64:90:8c:d4:b3:56:7c:db:3c:e2:
3a:bd:30:ab:f8:2b:03:21:cb:a6:0f:00:d1:b8:63:
c8:77:06:6f:4e:68:a1:6c:ce:e5:0b:c2:2a:20:8b:
d7:3a:8e:b9:87:ce:ce:0c:3e:0b:51:0e:35:db:08:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:22:82:42:94:88:2B:46:3A:9D:7C:25:58:63:0B:E1:63:63:98
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hFEigkKUiCtGOp18JVhjC-FjY5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
91.132.49.0-91.132.50.255
Signature Algorithm: sha256WithRSAEncryption
7f:ad:2d:a5:58:fc:c6:54:13:2b:9f:dd:b2:22:e0:88:1e:5a:
70:8f:74:5e:03:d2:cc:79:0d:c3:dd:26:01:9f:ff:8a:f0:20:
13:87:de:e5:40:b3:38:b4:a6:ce:a0:a7:dd:f8:9b:70:d6:a8:
85:3f:8c:1e:7d:15:06:7c:87:7a:6d:1a:3b:d5:56:ee:36:ac:
23:e9:02:4e:ca:ab:9f:dc:f1:1f:46:52:27:0d:fb:e8:1f:07:
98:f7:5b:f4:b5:b5:21:ff:e0:af:f8:e3:f7:33:76:52:62:98:
3e:c5:8d:60:6f:19:e1:f4:36:0a:26:20:39:db:5a:13:ce:16:
bc:fa:c2:4d:29:d2:cb:04:34:fd:3f:ef:72:b3:34:e7:3c:96:
87:62:f2:ff:9d:f6:a4:59:cf:00:cc:50:7d:8d:ed:d3:62:f3:
41:35:d1:96:49:9b:2c:3a:ba:de:b6:98:66:b5:9b:94:50:c3:
86:a5:06:78:46:c1:5e:5e:0a:60:51:d2:74:4f:7b:f1:e8:44:
b7:af:fd:e7:17:33:4b:73:ce:9d:71:ed:9b:65:a1:1b:b4:28:
c2:72:f9:42:53:d1:57:45:dc:97:f4:0f:a1:bc:3d:c3:92:80:
7c:47:99:d0:fa:fe:34:dc:19:00:b3:47:3e:da:8c:59:35:ff:
1b:61:13:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org