Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rqNtPJNVHxK-M22YvHU1op0EBgM.roa
File: rqNtPJNVHxK-M22YvHU1op0EBgM.roa (raw, json)
Hash identifier: lDGqmVoi5opxxvu8t1RRP+/GXX5V8SoZ+J1G20z3VpQ=
Subject key identifier: AE:A3:6D:3C:93:55:1F:12:BE:33:6D:98:BC:75:35:A2:9D:04:06:03
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01894368D8651F5F57C49FA1603A354D6F32
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rqNtPJNVHxK-M22YvHU1op0EBgM.roa
Signing time: Tue 11 Jul 2023 05:24:51 +0000
ROA not before: Tue 11 Jul 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 91.132.50.0/24 maxlen: 24
91.132.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 05:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:68:d8:65:1f:5f:57:c4:9f:a1:60:3a:35:4d:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 11 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aea36d3c93551f12be336d98bc7535a29d040603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:ab:4b:c5:10:ff:4c:76:41:a6:5a:7b:bc:
6a:2f:22:aa:5a:38:18:4e:a0:b7:ae:14:26:9c:47:
42:ff:24:bb:10:80:4e:0f:03:b8:2a:7c:d5:a3:54:
92:1c:19:f8:96:6b:71:3a:c9:ce:de:3f:c3:98:08:
13:7e:1c:ac:15:15:49:53:6c:37:8b:8f:06:93:1e:
1d:39:d1:53:97:79:fa:a3:55:c3:e1:3d:3f:6a:23:
3c:c9:46:4d:99:a0:17:a1:9a:ec:37:e7:db:fc:ff:
75:cc:bb:7f:42:ed:2e:2e:68:3b:d3:21:3c:cf:36:
64:bb:45:0e:c3:96:35:e1:89:8c:4c:ec:2e:5c:6d:
57:dd:ec:ab:13:6f:77:05:ad:26:e3:11:18:21:71:
01:44:25:06:12:64:10:d6:99:07:fd:8b:78:cb:08:
57:64:de:c6:bb:50:5d:44:24:d7:6c:38:63:1f:91:
c6:a5:d4:ff:7a:67:74:5c:c6:a4:26:db:b6:c7:22:
89:aa:2a:75:d7:2e:41:25:56:bf:d5:af:50:6f:5b:
76:3a:30:35:52:32:71:d2:30:c5:40:6f:5f:ca:63:
18:ff:af:45:01:e1:17:71:8f:39:b1:b7:d1:fb:5a:
1a:47:37:d1:ba:ce:6f:fb:ca:24:c2:69:34:99:df:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A3:6D:3C:93:55:1F:12:BE:33:6D:98:BC:75:35:A2:9D:04:06:03
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rqNtPJNVHxK-M22YvHU1op0EBgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.49.0-91.132.50.255
Signature Algorithm: sha256WithRSAEncryption
6a:3f:e7:39:59:4a:52:57:9a:08:fb:e7:fe:21:25:8e:53:01:
ab:25:cb:90:de:9a:d9:04:3d:5b:93:44:c3:e4:e2:4d:76:0d:
a6:34:c9:98:19:95:e6:78:d5:48:02:63:9d:18:5f:58:e5:a4:
b1:fa:4f:3b:fa:66:98:66:8f:11:e0:fe:e5:28:93:38:0a:26:
6c:20:b4:a9:04:fc:0e:00:f0:c8:2e:fe:7e:54:26:06:ca:09:
83:1c:ec:84:4a:1d:ae:a2:93:33:61:03:63:4b:44:fc:fa:84:
29:34:0c:76:25:f2:a2:f3:da:b5:49:89:38:0c:eb:b7:4b:cf:
3e:94:35:6b:5d:a5:55:10:8a:a9:2e:94:f8:88:89:73:15:90:
ce:4d:bd:38:d1:c9:f8:8e:d1:c3:10:f5:9f:03:77:39:28:9b:
21:e1:81:8f:e3:44:bc:ad:f0:c6:07:51:69:14:e0:87:72:7b:
74:01:3f:58:44:ca:28:89:d9:1a:c0:73:f3:61:03:d4:b7:ff:
85:84:de:8a:5e:66:ed:12:ab:df:03:9f:f8:30:24:0f:c7:a3:
75:e1:f0:cb:08:b1:a6:9b:07:53:15:9d:ed:8f:81:17:dc:8f:
e4:31:7c:6a:8d:33:47:08:d8:9c:c1:4e:e7:d7:d0:54:8c:eb:
68:21:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org