Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/gHTXRSISm9W2dqa3D-peh1dJevg.roa
File: gHTXRSISm9W2dqa3D-peh1dJevg.roa (raw, json)
Hash identifier: WK4MmKwIpPwVvxbfeNnkgAuWELEfK/lZXS7e+M1YKFA=
Subject key identifier: 80:74:D7:45:22:12:9B:D5:B6:76:A6:B7:0F:EA:5E:87:57:49:7A:F8
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0189740C8DA39348D8675AAB4595B7C72847
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/gHTXRSISm9W2dqa3D-peh1dJevg.roa
Signing time: Thu 20 Jul 2023 16:05:26 +0000
ROA not before: Thu 20 Jul 2023 16:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5484
IP address blocks: 91.226.225.0/24 maxlen: 24
91.226.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 03:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:0c:8d:a3:93:48:d8:67:5a:ab:45:95:b7:c7:28:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Jul 20 16:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8074d74522129bd5b676a6b70fea5e8757497af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:6c:3b:fb:39:97:2c:10:bd:90:3b:7e:bd:
96:87:50:5f:dd:a8:7a:92:ca:de:fb:ab:7e:11:86:
92:fd:fa:2b:0f:d9:38:6d:77:b0:b2:84:72:d8:49:
30:c2:cd:fb:cf:9b:f6:90:e6:3a:a8:cc:a6:d5:89:
f5:a8:c5:e2:79:38:73:55:c4:38:89:fe:08:a6:80:
ea:c3:e9:1f:83:b8:69:10:0b:bc:f6:5d:c3:ff:d0:
38:66:c8:d9:24:1a:3b:e6:2a:2c:c0:38:c8:d7:ac:
99:39:c8:68:6a:f3:65:12:a9:a0:ad:28:09:3e:be:
ba:de:03:85:a9:5d:2a:6d:77:f3:c0:63:e6:37:98:
6b:15:ca:02:ff:e8:bb:09:42:0d:9b:76:c1:3a:ce:
2b:b3:7f:dc:b3:17:ff:a7:2b:37:63:09:26:89:be:
9e:5c:e1:42:da:70:f2:33:9f:18:57:ce:a1:ac:63:
ef:78:05:7c:f0:eb:28:75:95:6a:59:b4:8d:dc:67:
fd:99:b1:f7:67:f6:5f:15:42:86:82:3b:b0:c1:33:
5f:9b:5b:73:76:f4:ec:56:fa:94:9b:02:05:82:e3:
b6:1f:30:45:c9:b8:15:f4:22:f5:60:52:45:9d:e4:
5d:19:8b:08:42:75:1d:b8:fd:04:75:3d:08:da:39:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:74:D7:45:22:12:9B:D5:B6:76:A6:B7:0F:EA:5E:87:57:49:7A:F8
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/gHTXRSISm9W2dqa3D-peh1dJevg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.224.0/23
Signature Algorithm: sha256WithRSAEncryption
88:ab:46:33:58:6d:fc:07:3b:2d:57:a0:0f:64:c1:13:2a:42:
15:25:cc:d9:07:43:39:72:ac:2d:2e:38:de:ed:19:37:bf:3c:
57:07:aa:03:b7:65:79:39:64:00:e3:bb:31:23:25:fb:08:2c:
2f:3d:04:fd:aa:1e:45:f8:58:79:ab:5c:78:9b:fe:a9:72:12:
de:6a:6e:7c:03:44:33:6b:2d:1f:f6:55:19:73:f7:cf:9b:5f:
b1:3d:69:7b:68:3d:cd:5b:87:94:7d:0e:4d:cf:e0:b7:7c:f1:
e6:10:1a:b4:2c:20:3e:1a:95:fc:db:7f:c6:ea:04:6a:32:40:
f9:52:dc:b4:6b:0e:f6:2a:23:77:fb:80:88:15:e0:15:0e:df:
4e:c6:f8:4d:d3:15:4d:e3:f5:09:f1:a5:42:d9:4a:90:a8:8d:
81:2e:bb:e1:78:ac:69:39:5d:c2:a8:d3:43:17:67:95:94:cb:
99:65:ab:57:5c:79:24:94:9e:ae:00:36:90:cf:66:6a:95:b8:
47:9d:1d:79:fc:46:8d:79:5a:c9:54:f9:3f:db:03:6b:80:ea:
bb:bd:54:02:01:f5:c8:28:0c:56:be:fd:20:3f:28:ef:96:80:
2d:1f:69:d8:67:5e:51:9c:22:ec:6a:e1:b1:53:21:14:95:cf:
d7:a5:10:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:25 2024 by rpki-client on console-ams.rpki-client.org