Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa
File: Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa (raw, json)
Hash identifier: G9ASAwYuymmXPFlm++7WyvEcC6Z3FanCGsuY7Nv7otk=
Subject key identifier: 1A:AB:F5:02:DF:17:A1:00:C4:99:5F:81:33:93:51:3F:0D:ED:E8:FB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 018570FBE5BB0EDF8F84C4A33598CB219257
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa
Signing time: Mon 02 Jan 2023 05:37:14 +0000
ROA not before: Mon 02 Jan 2023 05:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197600
IP address blocks: 91.223.160.0/24 maxlen: 24
2001:678:7b8::/48 maxlen: 48
2001:678:7bc::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:e5:bb:0e:df:8f:84:c4:a3:35:98:cb:21:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jan 2 05:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aabf502df17a100c4995f813393513f0dede8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:c5:b6:05:22:97:ab:92:30:9d:18:22:c4:
45:38:9e:7f:c8:7b:3d:3a:80:63:94:20:6f:cd:c2:
39:e3:ad:72:98:0f:86:29:49:06:2c:3b:5c:a4:fb:
eb:44:25:64:17:95:87:ff:d4:e4:5f:81:76:ac:b5:
dd:0c:22:e0:1b:52:54:91:f9:93:a6:48:e8:9b:ee:
20:06:73:a7:8d:23:1a:3a:fb:66:aa:17:51:f8:bf:
75:94:26:0a:3f:66:10:48:5f:91:29:ae:de:38:16:
8a:b4:3c:33:75:78:8c:90:c9:bb:1a:cc:cf:73:54:
9d:cc:b7:03:8b:fe:f6:20:96:87:3d:0a:62:d7:8e:
f1:bc:2e:51:ac:71:13:d9:2f:91:72:fa:1b:77:5d:
e7:71:c9:af:c0:ea:86:3c:31:81:00:08:58:b1:38:
89:fe:90:bd:01:e6:5d:cf:a6:25:db:fc:5b:d5:d7:
53:07:0c:95:71:eb:dd:85:79:2d:22:34:2e:00:51:
e7:ed:0d:30:cb:ff:b4:3a:0f:7e:8a:ae:20:0a:31:
e0:49:62:57:bd:bc:36:06:5a:c1:7a:07:4e:35:7c:
9a:49:5f:27:97:3b:3a:b1:a5:fc:96:cc:55:af:72:
8e:44:c0:0d:f8:06:7c:25:3d:aa:cb:51:37:1b:44:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:F5:02:DF:17:A1:00:C4:99:5F:81:33:93:51:3F:0D:ED:E8:FB
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/Gqv1At8XoQDEmV-BM5NRPw3t6Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.160.0/24
IPv6:
2001:678:7b8::/48
2001:678:7bc::/48
Signature Algorithm: sha256WithRSAEncryption
5b:5b:61:fc:6e:4b:95:d0:18:68:67:aa:e7:4b:a0:64:2c:7e:
06:f2:cb:b9:7a:7c:27:80:ab:f7:a3:8e:d9:01:68:c2:68:5d:
4f:0e:47:18:b2:6d:31:98:48:b7:9a:66:72:16:60:2e:ef:ac:
af:b2:96:dd:17:9f:74:f2:93:3b:dc:b0:3f:34:03:13:3d:45:
38:87:e5:87:67:7e:37:04:a4:45:e4:82:61:4a:13:26:8a:e1:
23:45:ec:2f:09:7c:6c:3e:fd:10:80:cc:bc:c1:86:8b:ed:69:
2f:31:8c:99:3c:59:56:e1:7e:11:57:62:58:03:68:e1:e2:37:
34:2f:0a:96:94:ce:8e:aa:89:6e:bd:9e:a4:3b:40:80:9d:c1:
88:18:38:d7:05:99:ee:6b:76:f6:e1:2d:5a:e6:4c:4e:2c:74:
e0:3b:b5:9c:61:82:ee:21:a5:65:e2:73:b7:89:6b:18:1d:20:
17:cf:67:b1:84:77:9e:b2:38:0c:ee:1c:c7:57:0a:ea:35:99:
ba:9a:94:58:65:46:fc:e0:d9:58:ac:63:98:7c:67:d9:e1:03:
61:8a:41:ac:23:57:7a:41:7b:eb:54:19:33:d7:37:4b:e0:9d:
25:72:6d:f1:8b:2f:7a:f2:03:65:6c:a1:c1:c9:35:da:92:17:
11:31:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org