Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/et-ZuKtQ4yjmpRBxO255RbahVlg.roa
File: et-ZuKtQ4yjmpRBxO255RbahVlg.roa (raw, json)
Hash identifier: uzpCNax2AdHccClgYAuWBTwTWZHxBuy5yYai8luvEfQ=
Subject key identifier: 7A:DF:99:B8:AB:50:E3:28:E6:A5:10:71:3B:6E:79:45:B6:A1:56:58
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 0187B1596FCFF91EC707D4260C87FE688A61
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/et-ZuKtQ4yjmpRBxO255RbahVlg.roa
Signing time: Mon 24 Apr 2023 03:40:41 +0000
ROA not before: Mon 24 Apr 2023 03:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208664
IP address blocks: 91.207.8.0/24 maxlen: 24
91.201.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:59:6f:cf:f9:1e:c7:07:d4:26:0c:87:fe:68:8a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Apr 24 03:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7adf99b8ab50e328e6a510713b6e7945b6a15658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:97:f3:e9:2b:03:5e:ac:bd:3e:d3:d3:c6:
7d:aa:1b:bc:bb:2c:07:2a:ed:c7:b7:5f:ce:5d:04:
ee:32:49:82:ec:42:57:7b:1a:25:2f:0d:a5:ed:0a:
1c:63:59:29:c3:a8:e2:6a:cb:41:e9:a1:13:91:ef:
39:cb:1d:8c:e7:a9:db:b6:94:a2:2b:c8:f3:7b:21:
de:43:a8:80:5a:47:d6:56:f5:ce:ae:06:d0:8a:3d:
a3:61:a7:27:cc:a8:06:89:9b:6e:14:21:ba:9a:fa:
7d:bb:c4:09:57:f4:3e:a3:0e:e1:89:ff:84:ba:da:
97:c1:b5:64:06:1e:8d:5e:fd:f7:bb:98:c6:52:00:
28:c0:63:8e:fe:85:26:64:78:f9:30:cf:18:6d:9c:
12:99:ae:fc:51:e9:cb:c2:57:b2:e8:fd:88:fc:e2:
96:56:ce:70:ce:d7:3f:eb:3b:de:e8:eb:c3:bf:7e:
96:31:8f:af:39:f6:94:d8:b4:bf:85:f2:a9:91:b7:
1b:74:29:56:7a:2c:09:3d:c6:23:09:9b:f1:d4:be:
54:cd:f3:f8:25:f4:b2:1e:f8:5e:12:35:82:8a:4f:
b2:b6:fb:59:51:66:98:7e:64:7c:67:c2:7a:25:f0:
43:02:30:6a:b0:8f:a4:17:6e:97:d6:6c:f6:1b:4b:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DF:99:B8:AB:50:E3:28:E6:A5:10:71:3B:6E:79:45:B6:A1:56:58
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/et-ZuKtQ4yjmpRBxO255RbahVlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.10.0/24
91.207.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e6:f7:4a:3d:99:0f:8e:e4:76:af:c9:46:c1:4b:42:93:b3:
0e:4a:17:89:09:f5:71:3a:fa:ad:da:45:80:e4:3c:53:18:78:
be:78:b2:f8:b5:70:53:4f:fd:96:3d:b3:01:89:9b:79:82:04:
73:2c:83:fe:49:15:68:e1:ce:c9:0e:b0:98:7b:b6:4e:1c:14:
21:25:31:cc:49:45:c2:f1:75:d8:43:11:02:27:a9:78:a0:44:
90:0b:31:c8:f2:fa:91:5b:a7:b1:9d:2b:4d:be:21:16:07:2a:
89:c9:11:b9:52:8e:f8:9a:88:51:e2:ab:62:97:c9:5c:37:7a:
65:ab:3e:2c:8f:93:f5:3d:e2:dc:f7:a0:60:74:e8:b6:15:fa:
dd:b7:83:dc:32:a6:ec:97:e3:69:52:2b:c0:cb:ae:74:c2:83:
ab:6f:4e:79:1e:98:fb:5a:cd:11:5b:87:fa:33:73:ff:76:26:
c1:39:4c:70:a3:5f:1b:e0:3d:aa:c3:6d:7f:0d:87:18:04:4c:
d4:c7:79:15:2e:72:e6:7c:09:67:d3:6f:ff:0a:34:f6:40:7f:
01:53:d8:5f:d3:b5:05:af:f2:ef:59:d4:54:28:f1:a5:63:b1:
1d:48:c2:4b:61:e9:c6:53:ca:78:ed:52:cc:de:32:10:22:cb:
c9:4a:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:53 2024 by rpki-client on console-fra.rpki-client.org