Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Pbd9BgZzOSHMMHP_61LkfCFlDZg.roa
File: Pbd9BgZzOSHMMHP_61LkfCFlDZg.roa (raw, json)
Hash identifier: 8b+CDNBm8mWOeIjg74JioregTXaszNBcmxenaw9AwbM=
Subject key identifier: 3D:B7:7D:06:06:73:39:21:CC:30:73:FF:EB:52:E4:7C:21:65:0D:98
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 018CC26D7BAF7CFA44191E87928174DECF69
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Pbd9BgZzOSHMMHP_61LkfCFlDZg.roa
Signing time: Mon 01 Jan 2024 00:30:04 +0000
ROA not before: Mon 01 Jan 2024 00:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 91.149.215.0/24 maxlen: 24
91.149.228.0/24 maxlen: 24
91.149.244.0/22 maxlen: 22
91.149.252.0/24 maxlen: 24
91.149.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 May 2024 08:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7b:af:7c:fa:44:19:1e:87:92:81:74:de:cf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 1 00:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3db77d0606733921cc3073ffeb52e47c21650d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c8:c1:39:a8:4e:e4:d5:36:64:3c:26:90:d0:
9f:f6:36:1c:8d:75:ae:a8:8e:7d:c9:30:f2:a4:47:
a2:af:54:ba:5b:82:97:4b:87:a9:12:1a:3b:35:43:
d6:0d:ec:fd:4e:96:6a:d0:59:29:f1:4e:a6:50:2c:
b0:4c:83:2b:27:e6:56:9a:45:74:ea:8e:2e:6a:c9:
ff:9f:b1:8d:68:a9:29:59:c5:04:86:c7:56:30:6a:
7f:aa:2d:45:d2:1d:30:a3:21:ba:6e:ff:98:f7:85:
40:d2:1f:6e:ed:81:af:24:7e:a1:fb:c6:8a:db:0b:
0d:53:60:4e:75:a8:25:14:04:45:86:e5:a7:6a:9c:
a5:51:57:ee:45:74:7d:69:0d:74:8f:36:e6:bf:bf:
68:98:8f:b5:b8:de:0a:91:2c:f2:c8:e1:7c:d5:81:
25:12:39:4e:69:07:52:33:df:11:23:bf:55:df:52:
85:13:aa:f6:0b:23:36:66:3d:ad:12:78:9a:43:35:
10:d8:a9:5c:7e:fb:f4:7c:91:8e:a5:93:3f:e0:73:
ed:95:ab:06:2b:81:f9:c4:0b:a3:73:d0:ab:de:18:
1c:77:52:c4:8c:f1:2c:5b:e4:02:23:84:6c:78:44:
a6:7c:11:ee:28:fe:65:2b:11:00:eb:3d:7e:2f:0e:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:7D:06:06:73:39:21:CC:30:73:FF:EB:52:E4:7C:21:65:0D:98
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Pbd9BgZzOSHMMHP_61LkfCFlDZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.215.0/24
91.149.228.0/24
91.149.244.0-91.149.252.255
Signature Algorithm: sha256WithRSAEncryption
4f:da:38:da:5f:97:be:9a:e8:4e:37:68:20:5f:f9:1c:dd:dd:
db:63:10:6c:7d:43:3f:dc:2c:5f:5a:b8:41:3e:bc:cd:e7:8b:
fb:de:f0:9a:f3:96:67:ef:f5:d9:42:3e:8a:7d:b8:f3:09:87:
b9:d3:3e:d3:a8:60:c2:0c:e1:1a:c3:b2:f0:8d:ee:b6:1f:74:
02:f0:6a:d1:37:2e:de:5e:3a:f6:5d:02:bc:2e:c7:ed:f0:a2:
30:87:ae:38:14:85:78:0e:83:f8:3c:0a:a3:c4:4c:6d:f9:c5:
83:9d:9d:a6:ab:64:96:24:b3:34:60:4d:38:14:37:fe:3b:a6:
b3:d7:b8:01:d8:42:e9:61:a7:dc:f9:25:57:90:d7:c4:b9:7a:
e0:50:e9:32:e5:30:c0:8a:ed:cf:7b:07:d8:d6:3a:10:20:c3:
01:cf:a6:ca:e6:a3:f8:60:50:26:45:4a:e6:36:8b:0f:d0:c0:
0b:d1:13:c2:ed:8b:30:6f:bb:87:71:af:10:29:4e:3c:be:28:
96:25:77:1c:7d:66:91:7b:cb:be:81:83:6f:7a:5c:39:bc:a4:
80:4e:c9:a9:0e:19:a2:cd:4a:79:ae:bf:61:f9:b4:2f:13:4b:
bd:49:9e:fe:26:75:c7:5a:fb:88:ee:d6:07:a8:75:d5:54:57:
69:e4:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:51:20 2024 by rpki-client on console-fra.rpki-client.org