Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/5reDaZaODXNYh2EzGikHuczbHfE.roa
File: 5reDaZaODXNYh2EzGikHuczbHfE.roa (raw, json)
Hash identifier: SDsW/0jQZmiUzrtSPCy6zH4PKqKIaMXFnGtFobS9Lxg=
Subject key identifier: E6:B7:83:69:96:8E:0D:73:58:87:61:33:1A:29:07:B9:CC:DB:1D:F1
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01880E9117FF6966B59CEDAE050990B856C4
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/5reDaZaODXNYh2EzGikHuczbHfE.roa
Signing time: Fri 12 May 2023 06:06:09 +0000
ROA not before: Fri 12 May 2023 06:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 91.213.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:91:17:ff:69:66:b5:9c:ed:ae:05:09:90:b8:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: May 12 06:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b78369968e0d73588761331a2907b9ccdb1df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:22:0f:e4:54:e7:b4:d3:dd:d3:ae:10:d2:
68:d3:4a:ab:c8:59:f5:37:9e:9d:3c:a0:ce:89:20:
6e:8e:6a:f1:77:aa:c1:05:6d:06:6f:2c:e2:9c:ed:
51:48:6d:2a:ed:40:30:e9:82:f4:44:61:42:e2:78:
47:b2:87:b7:3e:c7:b7:61:8f:e0:79:43:1b:00:0e:
37:88:05:12:83:64:3a:92:73:a2:e0:7d:3c:2c:42:
93:d1:d2:81:3b:ec:c6:0c:21:9c:58:4c:30:bd:01:
18:94:cc:77:b3:86:d7:22:22:8f:6e:03:52:07:58:
b5:97:15:12:a3:3e:25:6a:55:0b:5d:99:5a:b2:9d:
32:9d:4a:44:8f:f6:ac:79:f6:f8:a0:d5:de:84:1c:
bf:87:ec:76:2b:64:a5:db:ec:10:df:4a:43:6f:11:
78:c4:53:04:e6:73:ce:d7:e8:dd:ce:b7:17:e5:d5:
49:0e:6c:5f:66:d0:f4:44:6d:b7:ac:ce:ab:96:f8:
c7:78:3b:7a:a3:25:a4:bc:23:78:90:a2:80:ff:1f:
be:13:6c:bc:ef:c1:a2:48:d6:17:6f:57:37:e2:1a:
23:b1:45:ec:d1:32:f7:bf:60:68:b9:85:b6:7b:ed:
f1:d6:55:ca:82:1b:c0:05:af:19:25:09:f3:30:f0:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B7:83:69:96:8E:0D:73:58:87:61:33:1A:29:07:B9:CC:DB:1D:F1
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/5reDaZaODXNYh2EzGikHuczbHfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:87:7f:23:b8:0b:3c:05:61:57:f8:3a:98:f7:58:ff:c2:e2:
ae:bc:bd:b6:3a:55:2b:9e:f4:3a:a8:01:74:20:f2:21:41:d3:
af:d0:38:35:ea:70:4e:2b:58:6d:02:b2:0a:34:64:ef:bb:1f:
da:63:5b:03:b0:ad:ad:f4:08:ee:c5:8d:0f:40:1b:fc:fa:e5:
3d:58:65:2d:25:31:95:a1:4a:c7:51:ed:69:03:26:fa:4d:7f:
1f:9d:bb:eb:d0:26:02:ed:26:74:29:02:23:78:9f:48:f7:42:
dd:1c:af:5c:e6:3e:25:7f:ec:80:6e:4d:f3:42:e9:27:7c:c9:
8e:e8:59:5b:e2:b3:31:f9:e0:fa:0f:9a:20:59:c2:c3:f1:cd:
5c:77:47:2b:0a:47:32:1e:bb:a6:11:2f:a9:c2:36:fc:24:8c:
1c:b1:3f:71:18:bf:b5:70:9b:b3:66:e5:da:0b:67:af:17:53:
6a:1b:5e:6b:81:b0:07:ea:cb:66:54:7e:d3:b4:5c:41:84:67:
25:a0:8e:f7:e4:ff:d7:40:44:1f:ea:75:3a:d6:f3:86:8b:ed:
60:03:94:bc:23:3a:50:3f:e8:02:50:52:2e:70:c0:c3:92:17:
98:ba:a1:72:d6:6d:ba:05:ef:db:e8:af:64:4a:4b:bf:93:3e:
00:f9:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org