Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/9zqgg_qPp3urdQCOK9Hi5KDXOk0.roa
File: 9zqgg_qPp3urdQCOK9Hi5KDXOk0.roa (raw, json)
Hash identifier: 4ipnXsA1kd8tbxywjjzqp4nXodNTIhTegcsTM2CFWuM=
Subject key identifier: F7:3A:A0:83:FA:8F:A7:7B:AB:75:00:8E:2B:D1:E2:E4:A0:D7:3A:4D
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 0190E1572B60B1DD6C96708CBFB1BF6B02A5
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/9zqgg_qPp3urdQCOK9Hi5KDXOk0.roa
Signing time: Tue 23 Jul 2024 20:45:04 +0000
ROA not before: Tue 23 Jul 2024 20:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59953
IP address blocks: 91.109.232.0/21 maxlen: 21
185.78.8.0/22 maxlen: 22
185.248.220.0/22 maxlen: 22
185.248.222.0/24 maxlen: 24
2a0d:f280::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 Aug 2024 20:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e1:57:2b:60:b1:dd:6c:96:70:8c:bf:b1:bf:6b:02:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Jul 23 20:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f73aa083fa8fa77bab75008e2bd1e2e4a0d73a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:54:4b:0f:38:5d:4e:6f:b5:13:7a:26:08:
6a:aa:62:f3:46:7e:67:57:87:12:60:6a:e8:5e:7b:
87:9f:b3:43:93:83:9c:87:43:9f:c6:70:bb:9b:ff:
9e:fe:d4:bc:fa:51:ec:8d:e5:36:b4:8d:cb:42:d3:
e7:c1:ae:70:5d:09:2e:53:bc:d2:ca:a2:a3:e9:88:
aa:53:a7:90:41:9d:b9:9b:89:f8:b6:bc:1d:c7:bf:
5f:6d:31:09:84:6c:4c:73:6b:7e:ea:1e:dd:28:2e:
24:e1:e4:d2:ef:47:25:61:e2:07:b2:c3:a8:16:17:
57:11:b9:e1:93:1a:bc:48:5d:a1:af:8f:ae:df:9b:
db:85:2b:4f:02:75:4b:16:e5:4b:0b:e4:09:9b:ac:
c2:10:d3:d4:76:9b:3c:6a:f0:aa:65:d3:e5:96:98:
ea:e1:63:04:17:24:0f:e0:c4:58:14:ec:e2:72:b0:
50:35:6f:0b:ae:1d:6b:c3:08:f4:35:97:ac:83:a4:
ef:aa:17:1a:3a:71:a3:63:7f:d8:a3:76:36:8d:94:
f6:e4:4e:a5:0f:fb:eb:54:5f:3f:41:e9:f1:f3:5e:
b3:12:80:66:2c:c5:6d:a3:13:d8:63:d4:a5:57:0e:
ea:47:83:bf:d9:af:ec:a9:5d:6b:19:f3:9c:d4:ce:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3A:A0:83:FA:8F:A7:7B:AB:75:00:8E:2B:D1:E2:E4:A0:D7:3A:4D
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/9zqgg_qPp3urdQCOK9Hi5KDXOk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.232.0/21
185.78.8.0/22
185.248.220.0/22
IPv6:
2a0d:f280::/29
Signature Algorithm: sha256WithRSAEncryption
1a:40:d1:a4:8c:b0:ea:e5:72:32:0c:92:74:83:9f:4e:3a:e7:
f3:b8:f1:d9:df:07:4a:3e:9b:2a:ee:21:d7:69:88:d7:56:a7:
48:f1:57:9c:54:3c:bc:c6:45:83:10:3e:be:a8:30:2e:ac:c8:
c2:68:f8:0e:14:76:b1:52:b5:9e:a2:c3:75:36:18:bc:61:7f:
18:27:03:aa:59:33:07:f9:fd:f3:a2:35:b5:17:05:43:c2:12:
50:7d:45:2e:54:85:d7:57:a3:21:31:64:83:fb:3b:ea:b6:4b:
06:5c:30:90:8a:bd:d6:e0:90:14:21:f6:98:ac:c4:f3:1e:45:
2a:98:a3:5d:8d:83:3a:42:5b:ba:72:cc:7d:72:f5:8b:40:74:
0a:2d:91:88:23:87:b2:13:f3:0c:6d:6c:27:0a:9b:3a:2a:c8:
5f:ca:10:7e:8a:bd:f6:1b:32:cf:ef:17:b1:f2:b1:45:f9:c6:
25:a2:84:27:ac:75:df:95:97:47:5d:49:1f:88:57:db:66:88:
73:86:a6:34:56:eb:a3:a9:db:1e:6e:24:e0:b9:1c:6f:94:28:
b3:4e:2d:66:ef:16:4b:f1:1a:34:47:b8:2e:f0:ff:97:47:b2:
08:68:02:da:dd:ed:01:ac:16:94:1e:c9:3c:db:ef:b1:c5:87:
f6:20:8d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 21:32:36 2024 by rpki-client on console-ams.rpki-client.org