Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/9WYerYGfT0hsUkh5m1LHmz_YTWY.roa
File: 9WYerYGfT0hsUkh5m1LHmz_YTWY.roa (raw, json)
Hash identifier: Taxff/4BClH4N8y6PETN+S6lBj5ZPXc0T0iIXW1rjZI=
Subject key identifier: F5:66:1E:AD:81:9F:4F:48:6C:52:48:79:9B:52:C7:9B:3F:D8:4D:66
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018CC49389A9BA54C602B49A578A67F0437E
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/9WYerYGfT0hsUkh5m1LHmz_YTWY.roa
Signing time: Mon 01 Jan 2024 10:30:52 +0000
ROA not before: Mon 01 Jan 2024 10:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211143
IP address blocks: 91.225.12.0/23 maxlen: 23
37.35.54.0/24 maxlen: 24
62.216.76.0/22 maxlen: 22
188.74.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 19 Apr 2024 11:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:89:a9:ba:54:c6:02:b4:9a:57:8a:67:f0:43:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 10:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5661ead819f4f486c5248799b52c79b3fd84d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e0:82:ac:fb:3a:0a:96:f3:82:99:d2:9d:16:
f3:d6:5f:05:99:81:88:46:af:d1:fd:68:d1:3b:36:
5f:ad:d2:e6:1a:6e:28:08:62:ee:41:b6:86:35:19:
d4:50:e5:7f:f1:c8:f4:d8:a2:01:d1:15:32:7a:f8:
01:f6:7b:22:91:28:18:f3:a8:70:14:02:d0:6b:ca:
e1:e5:1e:68:b4:89:47:82:45:9c:61:a0:54:03:44:
bb:95:f7:51:de:92:df:80:cd:d1:00:18:e1:cd:42:
f5:b5:3e:c0:ee:56:52:b9:bb:d7:2e:c7:19:57:fa:
42:c7:bd:5c:b7:f9:1b:02:d1:ab:a4:44:f6:26:3b:
c3:59:c2:e2:1e:ae:06:48:7b:f6:5d:3a:54:0e:38:
de:71:84:cd:ec:3f:da:a9:32:7e:39:b1:e7:97:96:
b2:da:c6:9c:d1:57:4c:17:13:f8:2f:49:a9:cf:79:
8c:a8:ff:2f:71:55:40:a6:a4:22:87:84:ff:a5:e3:
e6:41:bf:71:0f:72:29:ee:81:77:71:21:91:5a:06:
96:7d:7e:60:58:37:9b:32:df:11:ec:94:bf:79:b1:
78:1b:e7:57:9d:82:1a:f5:fa:7e:ea:54:f1:f7:39:
65:2d:18:b1:9d:9b:30:10:8d:fb:62:85:f7:00:68:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:66:1E:AD:81:9F:4F:48:6C:52:48:79:9B:52:C7:9B:3F:D8:4D:66
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/9WYerYGfT0hsUkh5m1LHmz_YTWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.54.0/24
62.216.76.0/22
91.225.12.0/23
188.74.246.0/23
Signature Algorithm: sha256WithRSAEncryption
34:4f:68:64:a5:bb:51:24:b1:2f:b1:0d:19:2a:fa:46:5f:65:
96:0e:f5:a9:71:51:fb:d5:8d:ae:21:66:a9:66:60:41:bf:0a:
bd:d8:03:33:93:61:5e:cf:0c:7c:ec:7c:1f:3c:25:83:d3:c8:
d1:85:f3:07:3d:86:51:3b:3f:25:6b:fa:ce:f1:1f:03:39:2a:
91:d2:96:6d:18:34:fd:c5:f3:f6:7b:a6:b2:56:66:7c:38:f4:
aa:03:27:f4:f5:df:0e:4a:ab:f0:5b:9d:81:9f:95:c1:81:02:
8b:9a:fd:8c:1e:e3:d8:8e:15:2d:f0:ce:ab:37:a6:f8:ba:d6:
9b:8b:85:f2:13:83:e5:3b:d7:67:03:dc:d4:f0:03:88:cc:9f:
8e:40:a5:27:d7:55:f4:0f:aa:92:c0:f3:28:e3:9a:04:2e:e7:
8d:d1:0b:1e:af:92:91:07:d6:be:6f:5e:11:d7:97:88:d1:32:
14:82:6e:af:55:a3:3b:e9:e4:94:0a:16:5d:f7:d7:2f:f5:74:
18:30:23:48:38:a3:ed:05:8f:46:cf:1d:b6:78:c4:b4:e7:7a:
d5:d5:90:c3:b7:81:2a:6a:c0:c3:b9:d0:05:b0:ba:b8:ef:84:
0d:7f:d8:83:78:91:81:81:4a:07:62:56:6a:dc:20:e4:27:0b:
2e:25:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 14:35:17 2024 by rpki-client on console-fra.rpki-client.org