Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/uwMR5TJTkUlT_MSX_M5o_LfWV64.roa
File: uwMR5TJTkUlT_MSX_M5o_LfWV64.roa (raw, json)
Hash identifier: qId2EY4t3TVxplFKgJT3uSkDEmkGK3kLeIvpCR3dPTg=
Subject key identifier: BB:03:11:E5:32:53:91:49:53:FC:C4:97:FC:CE:68:FC:B7:D6:57:AE
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018A6FEE798B3A216121CD10916BD0F5C3F7
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/uwMR5TJTkUlT_MSX_M5o_LfWV64.roa
Signing time: Thu 07 Sep 2023 13:56:54 +0000
ROA not before: Thu 07 Sep 2023 13:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 932
IP address blocks: 91.208.73.0/24 maxlen: 24
91.213.200.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
2a12:ab80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 20 Sep 2023 14:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:ee:79:8b:3a:21:61:21:cd:10:91:6b:d0:f5:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 7 13:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb0311e53253914953fcc497fcce68fcb7d657ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:a3:7a:93:fc:03:18:9f:9f:44:54:c3:7a:
5b:55:be:88:75:3e:af:6a:74:d6:13:15:35:53:f5:
c8:84:e5:5e:84:7c:07:71:c0:39:4c:f2:dc:3c:1f:
8d:4c:d7:3a:95:97:e8:8a:dd:12:2b:f5:b5:f4:19:
ae:43:4f:99:5a:67:2c:7c:ac:b5:67:65:2b:aa:b3:
08:9b:ef:cf:a8:40:97:ea:b1:ec:8d:fd:2d:9c:f2:
b8:15:5d:9e:92:bf:12:8a:02:03:30:fb:44:83:fa:
bc:3a:97:6e:03:c1:13:cc:f9:5d:b0:cf:64:7b:49:
dc:1f:78:60:c2:ec:0d:e6:04:17:e7:a6:98:67:a2:
af:0f:e1:a8:d1:83:a8:12:c1:99:8d:39:8a:1c:08:
58:d7:66:dd:5a:7f:33:c0:97:31:28:fe:5e:c3:37:
d3:ed:fd:c8:a2:dc:99:5c:ac:c1:ee:43:c5:2e:84:
a4:1a:6d:4e:72:f7:3c:e0:f4:e3:37:89:ee:ce:0e:
87:24:e0:0b:be:38:ad:6a:03:9c:99:fc:16:1e:79:
c4:1d:0a:2a:b6:d9:61:0c:1e:fe:fb:c8:27:8e:18:
af:d7:0b:19:1f:b7:c7:d8:4f:01:16:01:77:b4:8b:
f2:88:45:01:86:b5:d8:db:92:b4:ed:65:4c:10:7d:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:03:11:E5:32:53:91:49:53:FC:C4:97:FC:CE:68:FC:B7:D6:57:AE
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/uwMR5TJTkUlT_MSX_M5o_LfWV64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.73.0/24
91.208.104.0/24
91.213.200.0/24
IPv6:
2a12:ab80::/29
Signature Algorithm: sha256WithRSAEncryption
3f:08:3e:20:37:31:a1:f0:9b:b7:59:e9:64:dc:20:b0:9b:9e:
dc:32:4b:67:d7:d0:81:be:8f:c7:af:d8:f7:ba:13:16:66:3d:
84:cd:fe:fb:9f:4d:32:59:b6:f3:74:d6:df:b5:3e:5f:bd:d9:
29:5c:aa:3b:f8:6b:a1:1e:d5:b1:13:58:33:df:8c:c7:29:5a:
dc:45:1d:1c:0e:f0:ab:6e:9c:42:67:d9:a2:13:5e:3d:7b:5c:
bf:82:a2:6f:8a:e2:81:12:3e:33:5d:e1:17:8a:11:4b:92:b0:
65:89:75:16:76:c1:5f:ad:72:31:02:d8:00:4d:f2:f0:96:0f:
9b:86:df:85:36:9b:cd:b9:c4:af:a7:31:90:41:f3:c4:40:ea:
16:4a:dd:26:1e:ec:09:2e:4b:18:9f:75:b9:9f:63:f9:14:e6:
60:17:b8:cd:67:cd:c4:f5:cd:f1:09:cc:53:43:f4:8d:0b:30:
a5:a6:0c:95:22:1d:cf:6e:94:d4:e9:5e:ed:4f:98:e5:3e:a5:
91:19:79:8b:44:e0:af:d7:5e:a6:5b:00:ee:76:15:ae:72:e0:
83:b8:28:95:30:4b:f9:36:f1:d2:21:d6:40:74:8d:f4:d4:40:
78:f9:9c:00:9b:c1:5d:f2:ec:4e:12:dc:f3:b3:d7:2d:fc:f9:
10:a4:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org