Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/a1hXYEEriF8_l-9_d9OT9p5U8t8.roa
File: a1hXYEEriF8_l-9_d9OT9p5U8t8.roa (raw, json)
Hash identifier: sCKTckU7jnlEtSYE/+/LMvNHNmqhbDkUWAOsHXoPgz8=
Subject key identifier: 6B:58:57:60:41:2B:88:5F:3F:97:EF:7F:77:D3:93:F6:9E:54:F2:DF
Certificate issuer: /CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Certificate serial: 01856F54AB76565CAD4EE5C8F71E31C45B22
Authority key identifier: D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/a1hXYEEriF8_l-9_d9OT9p5U8t8.roa
Signing time: Sun 01 Jan 2023 21:54:57 +0000
ROA not before: Sun 01 Jan 2023 21:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44746
IP address blocks: 91.214.88.0/22 maxlen: 22
91.202.156.0/22 maxlen: 22
185.19.252.0/22 maxlen: 22
2a05:b880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:ab:76:56:5c:ad:4e:e5:c8:f7:1e:31:c4:5b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0ce1b9ffb2e73d2c97f0893063cabb2cb746790
Validity
Not Before: Jan 1 21:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b585760412b885f3f97ef7f77d393f69e54f2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:93:31:0a:86:88:6a:84:2f:ad:96:95:bb:39:
04:ea:fb:50:91:14:f9:d3:98:f4:e0:27:31:8d:7b:
c4:93:6d:53:f5:8f:13:e0:85:b5:28:b3:d6:6e:b3:
c8:c5:86:45:42:6f:0b:c5:16:49:9d:0e:e2:1c:6c:
31:e9:57:bb:41:94:9a:a9:15:62:ad:49:2f:74:62:
f0:4a:56:25:f9:e6:ed:de:17:07:71:6d:7b:3f:5a:
89:d5:22:6b:db:63:0e:e7:81:2f:12:55:6a:d6:ec:
c0:ae:2f:8f:14:22:3e:f7:3c:a9:1a:e4:20:86:02:
61:1b:d1:3f:5a:47:67:03:35:9b:96:db:5b:c2:25:
c4:55:b3:8f:12:26:5e:da:bd:15:1d:4c:8a:50:5b:
b9:8c:cb:2c:65:f3:b4:31:62:ab:44:b8:a9:a2:74:
01:6f:be:da:83:f4:29:51:3e:03:f8:dc:da:14:56:
0b:0f:7c:d6:d0:16:9e:a3:78:54:8a:a1:1d:f5:d9:
b0:5f:9f:5e:32:7e:56:7f:b9:cb:b6:64:70:7f:18:
15:47:57:f2:d8:34:0d:36:4e:ea:34:0e:01:80:e1:
2c:ff:c8:21:16:00:a2:f0:b7:1f:c4:89:55:87:4d:
78:52:8a:24:26:fb:ac:1d:e8:dd:a8:79:44:15:2b:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:57:60:41:2B:88:5F:3F:97:EF:7F:77:D3:93:F6:9E:54:F2:DF
X509v3 Authority Key Identifier:
keyid:D0:CE:1B:9F:FB:2E:73:D2:C9:7F:08:93:06:3C:AB:B2:CB:74:67:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M4bn_suc9LJfwiTBjyrsst0Z5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/a1hXYEEriF8_l-9_d9OT9p5U8t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e51322-0141-4d16-8168-b9fb53a2f03c/1/0M4bn_suc9LJfwiTBjyrsst0Z5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.156.0/22
91.214.88.0/22
185.19.252.0/22
IPv6:
2a05:b880::/29
Signature Algorithm: sha256WithRSAEncryption
50:aa:a5:81:e1:15:a3:29:0a:f5:3f:db:98:71:e2:54:ff:e8:
78:25:83:71:ce:f1:d0:1a:58:35:fa:66:10:4d:e2:14:2b:0b:
a2:71:73:2a:a6:6b:c5:91:a0:1a:b9:af:00:2a:c8:6b:8d:3d:
77:66:c4:38:45:ae:9c:6a:ba:93:ab:55:4b:7d:ee:56:d1:db:
79:08:88:e5:a4:61:dc:d4:28:74:28:9d:6e:ea:76:ae:b4:6f:
ee:da:2e:88:eb:7b:34:2d:c9:95:ca:69:f5:f6:73:1b:82:74:
1f:2e:27:f0:01:b9:bd:e7:5b:c9:86:62:32:b7:cb:96:d4:7b:
1f:35:ac:cd:a7:79:16:de:37:96:65:f4:49:38:a5:5e:10:3e:
c5:7e:90:86:e2:91:1d:0a:ae:9d:7a:3f:7c:c9:ef:d5:cc:44:
77:43:f7:bf:15:39:1f:e1:a3:d1:f7:db:04:e2:2b:06:15:be:
fa:42:bb:62:40:ed:a7:ad:7c:c6:46:a2:9b:f7:22:38:49:67:
ed:f6:34:0c:f0:9a:e4:73:01:aa:70:5a:8a:aa:24:24:bf:3d:
3e:11:9d:80:95:46:1b:42:03:be:82:df:17:b0:53:20:75:60:
fb:2a:54:dc:71:fc:ee:8b:68:7e:78:9d:bc:1a:82:45:22:4a:
0c:4d:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:10 2024 by rpki-client on console-fra.rpki-client.org