Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/xZh7Xhu9htfMg_QI5xuiBMmS0gw.roa
File: xZh7Xhu9htfMg_QI5xuiBMmS0gw.roa (raw, json)
Hash identifier: 0jdmOCd8oykw6NbR+VsTfwg8bkfZ/Gp7FEpi8+Q9iwo=
Subject key identifier: C5:98:7B:5E:1B:BD:86:D7:CC:83:F4:08:E7:1B:A2:04:C9:92:D2:0C
Certificate issuer: /CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Certificate serial: 018B39A537700C1230F3DA233A5B55A5D493
Authority key identifier: D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/xZh7Xhu9htfMg_QI5xuiBMmS0gw.roa
Signing time: Mon 16 Oct 2023 18:00:10 +0000
ROA not before: Mon 16 Oct 2023 18:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200736
IP address blocks: 91.132.132.0/24 maxlen: 24
91.132.134.0/24 maxlen: 24
91.132.133.0/24 maxlen: 24
91.132.135.0/24 maxlen: 24
185.237.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:a5:37:70:0c:12:30:f3:da:23:3a:5b:55:a5:d4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c18b5ad3a25f118a83bb2ffbbe795d6643663c
Validity
Not Before: Oct 16 18:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5987b5e1bbd86d7cc83f408e71ba204c992d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:45:89:a6:16:4e:86:dc:9f:1b:ea:3a:27:
fb:df:21:64:2e:23:74:38:bf:cf:8b:5a:0f:ee:db:
74:a1:cb:be:85:e9:a8:d1:be:65:79:2b:af:3f:2c:
76:c6:0b:9d:40:29:12:bb:cd:94:f9:33:bf:bc:dd:
94:1f:e8:eb:43:cb:90:a5:31:95:8e:e4:fd:5e:0f:
5f:7a:23:44:35:98:63:d8:8b:e1:c6:ef:87:4f:ea:
24:9d:12:1c:14:ba:68:a8:b0:5c:06:d1:a2:cf:60:
79:77:f2:ab:73:12:b9:3e:89:48:ee:b0:16:c9:83:
14:ff:0d:81:0d:0b:27:84:92:64:2b:53:b2:c8:6c:
d9:4b:88:87:00:dc:bb:9d:24:ca:d0:92:41:55:54:
39:95:f6:c6:1f:0c:d5:16:73:b0:a4:9a:6d:22:62:
39:63:6f:f8:67:1b:db:7b:04:56:13:bb:27:39:c1:
06:39:09:61:a5:1b:2b:36:a9:c4:3d:1d:ff:35:8e:
0e:3b:a5:bc:cb:39:71:a3:9b:f4:ac:da:62:5e:37:
4d:ea:19:d5:6f:b4:e9:2c:47:14:9c:6f:f6:d0:5c:
b9:f3:a0:cc:bc:89:44:e5:37:9b:87:96:50:fd:63:
ea:25:9d:c7:a5:ca:10:b8:c5:8f:1b:e6:23:7b:53:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:7B:5E:1B:BD:86:D7:CC:83:F4:08:E7:1B:A2:04:C9:92:D2:0C
X509v3 Authority Key Identifier:
keyid:D8:C1:8B:5A:D3:A2:5F:11:8A:83:BB:2F:FB:BE:79:5D:66:43:66:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MGLWtOiXxGKg7sv-755XWZDZjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/xZh7Xhu9htfMg_QI5xuiBMmS0gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/64b8dd-9bcb-475e-bf8f-d87fb767d8bd/1/2MGLWtOiXxGKg7sv-755XWZDZjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.132.0/22
185.237.220.0/22
Signature Algorithm: sha256WithRSAEncryption
02:52:15:cf:f0:d2:50:8f:54:7e:c6:1b:7d:dd:34:7c:c4:f6:
cf:2c:74:78:73:dd:e3:cf:a2:c3:75:ee:0e:58:ea:04:73:d6:
66:b8:a8:f2:00:83:bd:1d:8b:83:81:87:f7:90:2c:a3:6d:97:
bf:80:56:d0:d8:7b:74:6c:d8:2a:88:71:e5:f3:22:de:e3:4d:
77:53:c7:9b:36:bc:a6:20:7e:d2:39:c6:08:11:3d:df:a1:78:
3e:16:d5:62:98:45:f4:86:7d:30:5f:cc:b7:de:ca:f9:28:72:
60:77:bd:61:2a:3e:c7:cc:9f:b8:ae:b0:b8:ac:a4:de:72:40:
79:3e:23:b3:2c:e2:60:e5:b7:12:03:57:a5:64:60:1b:2e:08:
7f:34:62:73:be:5c:35:f4:b5:3d:91:c6:e0:4c:0d:7d:75:17:
ef:2a:2a:3f:35:ee:36:cc:c5:81:f0:e6:97:81:77:33:47:6c:
0b:30:18:4e:ff:80:2c:55:5c:fa:82:fa:7b:18:37:56:a5:df:
69:8b:dc:7b:fa:f9:55:23:1a:2b:e6:b6:50:43:06:28:4e:70:
56:ce:8b:87:f0:eb:a7:50:59:10:4b:b0:5f:3a:70:27:73:87:
15:35:f7:56:4a:c1:42:d5:bd:56:9a:37:89:f6:94:79:bc:4b:
ac:90:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:04 2024 by rpki-client on console-fra.rpki-client.org