Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zIGmhuI9bRRWDt9SfSEJr0-7o00.roa
File: zIGmhuI9bRRWDt9SfSEJr0-7o00.roa (raw, json)
Hash identifier: j2YpmRWIAEmVMv3vLQAbAVWhsf1twSXx98z1Cq6zj+s=
Subject key identifier: CC:81:A6:86:E2:3D:6D:14:56:0E:DF:52:7D:21:09:AF:4F:BB:A3:4D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC4933A53CF94735A0930147CA6A6981A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zIGmhuI9bRRWDt9SfSEJr0-7o00.roa
Signing time: Mon 01 Jan 2024 10:30:32 +0000
ROA not before: Mon 01 Jan 2024 10:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147287
IP address blocks: 91.132.49.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
77.81.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 11:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:3a:53:cf:94:73:5a:09:30:14:7c:a6:a6:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc81a686e23d6d14560edf527d2109af4fbba34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:27:0e:f6:23:57:a2:76:20:a2:5e:a2:60:
c8:b4:ed:b8:0f:44:e6:c6:9b:6c:77:33:67:42:1a:
82:cd:61:f4:d2:40:e8:5c:48:f1:30:12:82:ef:5f:
95:91:53:7c:94:d3:55:75:10:2a:de:37:d2:ac:62:
61:1e:68:cd:da:79:a1:d9:a7:1f:cd:5e:7f:b8:25:
3b:35:c4:f4:99:27:1f:5d:eb:0f:33:4a:82:71:2f:
a6:20:41:d8:de:0f:c6:e1:ab:39:cc:e6:04:3c:9a:
37:94:2e:cb:80:e3:7b:7b:24:f4:73:a4:6b:b9:5f:
61:c2:e4:69:81:af:cd:91:5a:69:e7:3d:7c:4a:54:
28:5d:bb:a5:8b:92:c3:6b:42:4e:74:23:c6:89:ec:
c6:9c:3e:d0:93:6a:dc:59:d5:f7:c0:c6:48:98:48:
d3:3a:a2:63:23:ad:3b:20:0a:22:b1:b2:0b:33:e6:
6f:c0:d3:ca:ff:99:6c:e3:d5:76:02:f7:ff:62:6f:
24:7d:8a:bd:4c:4d:aa:c2:22:00:81:da:54:e7:a5:
2d:4b:d3:7c:bd:4d:6a:5d:1d:24:f2:8d:05:d9:f4:
9a:4d:81:f1:d9:dd:d3:99:2a:55:db:67:2a:f3:ff:
cc:bc:b7:76:ed:d3:07:d9:6d:5f:1e:6d:29:79:3b:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:A6:86:E2:3D:6D:14:56:0E:DF:52:7D:21:09:AF:4F:BB:A3:4D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/zIGmhuI9bRRWDt9SfSEJr0-7o00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.182.0/24
91.132.49.0-91.132.50.255
Signature Algorithm: sha256WithRSAEncryption
57:34:be:19:34:47:05:c8:91:24:a0:3a:bd:d7:a6:fa:6f:ee:
91:4b:d3:97:db:f5:a5:79:3b:c3:e7:61:8e:8a:f9:02:45:35:
7f:e9:4d:44:b7:33:d2:a8:58:86:86:fc:23:7c:30:96:03:ed:
a6:31:00:e1:34:0f:4e:60:32:2f:71:4f:ad:62:a7:2a:d1:68:
7b:1d:34:ff:57:f1:a3:d1:5b:f3:de:ff:7b:c3:38:0a:2e:c9:
25:8f:7b:c3:9d:7c:98:0b:01:42:cb:fe:a6:e9:e5:0e:c0:33:
8c:f7:e5:ad:9f:d7:9a:a3:0e:04:df:49:59:b6:0a:a7:7d:06:
7a:6d:cb:90:e1:e2:cb:28:20:b1:6e:70:6d:31:97:98:c4:08:
8c:68:30:bd:d8:89:5f:63:fa:45:22:b2:b1:0f:db:dc:e0:87:
8d:ce:80:ee:f0:66:9c:7e:98:bf:1f:3d:89:65:ca:8f:c5:ee:
3d:1e:76:f8:9f:ed:66:65:93:01:31:67:77:53:9c:b3:86:03:
bd:ac:c5:b8:91:de:ea:50:03:25:e6:3a:1f:bb:5f:d9:36:7f:
b0:fa:2a:63:f0:15:b3:11:4b:b5:ba:20:5e:7a:ef:73:44:1b:
ab:c6:61:e4:25:3e:6a:d1:43:b4:3f:e1:09:a1:21:ad:27:31:
c0:8b:77:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org