Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/RB3iFiIUIy9sWRESDq3E_Pf8RZI.roa
File: RB3iFiIUIy9sWRESDq3E_Pf8RZI.roa (raw, json)
Hash identifier: upXlzMtGiX0gCm4qH5r+66iqjvg1Swwss9hca66LPyY=
Subject key identifier: 44:1D:E2:16:22:14:23:2F:6C:59:11:12:0E:AD:C4:FC:F7:FC:45:92
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 018F386F6BCB4C25A73A822C407A9CD7C0C2
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/RB3iFiIUIy9sWRESDq3E_Pf8RZI.roa
Signing time: Thu 02 May 2024 08:32:57 +0000
ROA not before: Thu 02 May 2024 08:32:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 91.149.193.0/24 maxlen: 24
91.149.215.0/24 maxlen: 24
91.149.225.0/24 maxlen: 24
91.149.228.0/24 maxlen: 24
91.149.244.0/22 maxlen: 22
91.149.248.0/22 maxlen: 22
91.149.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 05:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:6f:6b:cb:4c:25:a7:3a:82:2c:40:7a:9c:d7:c0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: May 2 08:32:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=441de2162214232f6c5911120eadc4fcf7fc4592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:94:a4:e2:14:26:bd:32:9c:3a:91:d1:22:00:
7d:30:bc:00:04:e5:88:95:36:c4:21:2b:f4:d8:93:
1d:4b:f5:c9:16:37:91:a4:72:bc:61:3e:a4:88:e9:
e9:17:20:2f:22:d8:9c:c0:68:bf:97:f9:92:a1:b0:
12:9d:e1:df:6d:09:58:2b:59:3d:2b:07:02:7d:64:
6d:08:d7:f8:7d:24:de:3c:52:87:89:3e:d1:03:ad:
bc:a5:31:28:39:76:8c:2d:28:ec:45:be:ad:68:d3:
e6:38:63:22:1b:73:37:87:f3:dc:bf:22:44:2b:d0:
cb:2b:2b:be:82:5f:c2:22:74:ce:9f:2a:ee:5b:9a:
62:d4:8a:43:55:b0:96:94:e7:b6:bf:61:24:77:32:
94:ea:3e:50:51:21:31:cd:cf:8f:ec:35:ad:4a:7d:
f9:2d:90:90:3f:05:0b:cc:3c:ba:61:77:b5:28:87:
52:29:c1:9e:ad:96:dd:8e:ac:71:f9:88:69:62:f4:
bf:a1:7d:db:c3:53:02:84:c1:bd:93:18:51:c9:9a:
7b:3f:47:aa:4c:90:95:39:22:2d:5b:86:2f:2d:f0:
fa:8b:38:dc:10:a5:40:21:66:26:55:1e:20:ad:6f:
28:ef:b9:57:b1:41:6b:61:e6:8d:25:d9:50:d3:db:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1D:E2:16:22:14:23:2F:6C:59:11:12:0E:AD:C4:FC:F7:FC:45:92
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/RB3iFiIUIy9sWRESDq3E_Pf8RZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.193.0/24
91.149.215.0/24
91.149.225.0/24
91.149.228.0/24
91.149.244.0-91.149.252.255
Signature Algorithm: sha256WithRSAEncryption
67:23:1c:fe:7d:ae:47:11:22:52:68:50:69:17:a7:4f:79:75:
1c:9c:8f:f3:5f:52:ae:66:98:d9:c1:db:df:11:f2:63:d5:49:
2d:37:1f:65:08:a4:e3:89:56:55:7c:0b:e4:95:b3:72:79:e7:
dd:0f:15:95:04:85:d2:60:d5:c5:1c:eb:6c:42:ca:b8:07:03:
01:56:0e:38:be:af:b6:f5:66:28:e6:57:14:9f:fa:31:0f:3c:
28:f9:a3:c0:b1:bf:d8:7e:bb:0b:24:54:b5:83:e0:3f:98:2c:
22:84:81:c7:34:d5:fa:8a:30:7a:3e:4a:40:e6:4c:97:24:93:
d5:2a:e6:fa:bf:6a:09:2a:7c:3e:e1:61:ca:76:1b:59:4d:c4:
f4:11:ba:66:b0:9d:d7:88:e6:60:0e:7a:6c:ea:f5:d0:d1:c7:
3d:a1:43:29:e8:ca:f2:be:94:39:3f:4f:14:53:e6:68:cc:b3:
8d:1f:ac:d3:96:36:2e:7d:a7:b2:74:08:4d:85:a9:d4:ea:2f:
01:91:52:36:0d:ab:fa:15:5c:74:57:6f:e8:f4:2d:ac:3e:8d:
4b:46:bd:6f:b6:3a:7e:d8:0b:45:5e:fb:63:bb:66:22:2e:7b:
2f:32:7b:31:a4:7e:01:ca:c3:d4:23:cf:76:3e:84:38:b9:95:
9e:65:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 08:14:35 2024 by rpki-client on console-fra.rpki-client.org