Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/sYyseT0t_I7epXwhjEIznbapGZw.roa
File: sYyseT0t_I7epXwhjEIznbapGZw.roa (raw, json)
Hash identifier: xSuztZDV2PJfFYy9YQYW4Ss39YTUDqPiwmZB1VUE2ic=
Subject key identifier: B1:8C:AC:79:3D:2D:FC:8E:DE:A5:7C:21:8C:42:33:9D:B6:A9:19:9C
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 018805D1B54EA3BAD904C93D5AECA097A8E0
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/sYyseT0t_I7epXwhjEIznbapGZw.roa
Signing time: Wed 10 May 2023 13:20:09 +0000
ROA not before: Wed 10 May 2023 13:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 91.149.215.0/24 maxlen: 24
91.149.252.0/24 maxlen: 24
91.149.248.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 17 May 2023 12:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:d1:b5:4e:a3:ba:d9:04:c9:3d:5a:ec:a0:97:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: May 10 13:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b18cac793d2dfc8edea57c218c42339db6a9199c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:14:12:4c:78:09:59:c8:c2:8e:b8:89:16:
6f:b7:4b:80:12:33:1b:bf:5c:b7:02:39:61:81:ca:
02:4a:49:54:c4:08:77:f9:e3:98:5b:94:db:68:a0:
db:aa:ed:11:a1:a0:09:82:81:33:86:53:e9:ba:d7:
95:a3:e4:6d:b3:30:e3:0b:c1:36:69:d2:0e:8e:19:
28:79:dd:ce:90:9e:28:fd:2c:c9:f5:9b:ad:56:a3:
ad:4e:09:e2:1f:b7:2e:64:7b:f4:c6:a9:f4:51:76:
f6:e7:d9:d9:9d:6f:da:81:c8:7c:6e:e7:1b:41:6b:
45:f7:b1:e7:b9:92:a8:04:e1:44:96:f0:c9:d2:e1:
a8:1a:f0:f3:e9:35:67:c6:54:34:06:d6:27:8e:d7:
23:79:40:be:2e:e9:05:f0:a6:fb:0c:8b:81:c0:da:
35:29:9f:dd:45:a3:8a:ce:56:b4:c0:49:5e:6d:c1:
90:9a:33:67:32:e5:0b:36:c1:33:8e:5e:01:f5:05:
e6:8b:88:0e:3c:e1:04:4f:8c:39:30:8c:05:f8:0c:
9f:05:5a:46:f4:2e:f7:47:d3:fc:b3:57:d0:33:e0:
e0:30:3a:35:36:5f:de:b0:90:8f:0c:0b:d1:04:24:
5a:2d:fc:45:47:34:54:70:89:23:c0:68:58:3e:70:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8C:AC:79:3D:2D:FC:8E:DE:A5:7C:21:8C:42:33:9D:B6:A9:19:9C
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/sYyseT0t_I7epXwhjEIznbapGZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.215.0/24
91.149.248.0-91.149.252.255
Signature Algorithm: sha256WithRSAEncryption
45:f3:b2:87:3b:1a:68:52:48:43:68:88:ec:93:13:3f:39:0d:
d9:1b:a4:c5:d5:dc:39:25:1f:3d:6b:b4:51:6b:6f:c1:50:9f:
b2:c7:47:ca:39:be:1e:38:f7:53:05:c1:eb:5b:ad:91:48:04:
69:12:e0:ca:d8:48:1c:24:08:d3:ab:9e:47:27:dc:ed:b4:11:
c5:d5:f2:0b:54:39:3c:78:5b:c7:91:97:ba:8d:1f:58:24:f7:
5a:67:91:fb:07:e9:cf:85:58:a3:d0:f7:11:d7:8a:8d:c7:b9:
8a:c7:c6:d3:d9:63:f9:6d:94:17:6f:f8:b4:78:7c:59:38:ea:
74:2d:52:26:73:78:05:a1:99:21:c9:61:3b:c8:b8:e0:b5:19:
5c:ba:c4:41:bc:e4:33:6e:22:81:ad:e5:cc:cd:93:bb:c1:a7:
ec:88:7a:8e:2b:cb:1c:58:db:28:a7:57:4d:3b:fc:2d:6c:3e:
d0:7a:c3:29:28:09:7c:60:3a:72:d6:5f:ee:43:66:3c:88:6a:
dc:e5:5e:72:b1:26:d5:fe:8d:cd:8e:64:f4:d7:1f:74:31:88:
13:4d:bc:88:49:57:99:28:2a:02:85:81:45:36:86:6a:c6:52:
cf:7f:c4:6d:7a:a8:c0:f2:bf:3b:94:38:c9:8a:df:c2:01:06:
75:55:22:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:21 2024 by rpki-client on console-fra.rpki-client.org