Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w89nQMlWgeQe_2yrbNLDZ6vfpSs.roa
File: w89nQMlWgeQe_2yrbNLDZ6vfpSs.roa (raw, json)
Hash identifier: 6Z51IJT/t5wQAUBE9WYG1QWWK9uA3bYRs2Gx3snObLQ=
Subject key identifier: C3:CF:67:40:C9:56:81:E4:1E:FF:6C:AB:6C:D2:C3:67:AB:DF:A5:2B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019137E7D12FAAFB79D67C9F528E418D84FD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w89nQMlWgeQe_2yrbNLDZ6vfpSs.roa
Signing time: Fri 09 Aug 2024 16:10:24 +0000
ROA not before: Fri 09 Aug 2024 16:10:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 91.132.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 18:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:e7:d1:2f:aa:fb:79:d6:7c:9f:52:8e:41:8d:84:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 9 16:10:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3cf6740c95681e41eff6cab6cd2c367abdfa52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:06:09:9b:01:bd:a4:ee:56:fe:f9:c7:9e:
33:4b:0e:68:2e:f5:fd:e6:cc:00:93:34:bb:6f:87:
46:5c:16:9f:fb:31:31:69:6f:98:8e:39:2a:bf:20:
36:40:b4:42:47:a1:58:2d:26:e2:5b:c8:90:a4:ec:
b5:e0:75:87:85:98:5d:5a:21:87:55:51:c3:0a:05:
65:2d:7e:15:b3:bf:2f:7d:a5:f3:8e:bc:df:1e:69:
62:b9:e7:4c:f4:07:da:db:6c:52:2c:9b:72:3a:ae:
61:7b:c1:e1:ab:99:7e:0e:82:85:da:5c:4d:90:c4:
b7:ff:85:63:8c:62:9a:09:b1:35:f2:35:8f:70:99:
ae:dd:11:ee:f5:84:c3:d4:51:c7:a2:f4:22:dc:ae:
43:d9:9b:b7:cd:55:5d:7c:95:1f:9e:0f:38:ad:67:
86:34:ca:6f:d4:34:cd:1f:09:c8:79:e6:d5:f0:85:
4a:74:90:93:2d:31:2b:9d:8d:7a:6b:4c:06:15:35:
b0:19:0c:6e:f7:08:50:0f:fd:fd:3c:61:f9:d0:79:
c1:11:87:70:29:a1:30:ef:a3:75:ab:38:0d:fc:08:
63:99:17:69:8d:c2:7a:e7:3f:be:2c:a0:a7:61:29:
41:1c:40:5b:61:d0:8b:b2:67:7b:7c:b5:74:48:9d:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:67:40:C9:56:81:E4:1E:FF:6C:AB:6C:D2:C3:67:AB:DF:A5:2B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w89nQMlWgeQe_2yrbNLDZ6vfpSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.51.0/24
Signature Algorithm: sha256WithRSAEncryption
31:dd:41:0b:6e:0b:d5:12:33:33:88:2a:fd:b7:78:a9:02:d5:
57:f5:23:9b:90:77:6c:df:dd:84:c6:ac:4c:cb:4b:e8:5e:af:
d8:d5:58:79:17:f9:f4:40:c0:b4:6a:c8:92:6e:08:57:c1:fe:
ce:6c:de:0c:43:3a:1d:75:29:78:9c:d1:01:c7:4d:b0:51:94:
8e:0a:c8:22:86:9e:99:e9:32:28:93:b8:12:e4:02:d3:88:4e:
31:ae:ad:10:8e:57:9b:74:99:d6:86:ac:76:0b:6b:a3:00:21:
e7:50:ae:56:97:13:8b:c6:92:5d:ec:ce:e8:b5:ab:b6:8a:55:
1e:62:18:83:83:30:64:60:75:cd:0a:02:ad:de:41:06:fd:2c:
cb:a0:73:77:18:a3:d6:0d:c3:ab:81:ef:ec:8e:19:f6:e8:89:
71:ab:1d:1e:2f:f3:eb:3b:26:68:5d:12:e2:3c:78:e1:e8:11:
04:0b:8b:d3:31:18:00:bf:96:51:a9:7d:a3:de:c7:00:95:a4:
a1:92:b2:ab:04:b2:f8:4b:c9:bd:2a:7d:3e:73:47:8e:00:2e:
77:6d:74:ba:93:28:c2:17:85:d1:d9:67:16:45:d5:a6:d0:fc:
06:23:b3:72:a8:09:50:6a:09:42:21:bf:fe:5e:d4:3b:42:7d:
5b:e6:f6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 20:55:08 2024 by rpki-client on console-ams.rpki-client.org